last executing test programs: 1m1.214352479s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 51.727882552s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 43.536025208s ago: executing program 3 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000002740)={0x14, 0x33, 0x1, 0x70bd2c, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x40014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x170, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xd0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0xb4, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x40, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x44, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64"}, {0xc}, {0xc}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 43.363590889s ago: executing program 3 (id=846): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0xd4, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x99, 0x6, "a9b4574ea5110549dcc651fe69eca27f0c838279b62f65f2d617912a7383fed9ce77eeea55d93624533cb2b23833e2437e3a8caca604b80599bc5d8ca9d293ab0e1008e470e7dc3315536cb3ba014a1ebdae75a5a2d72fdffac4ead9c594fac2664431584506bf7a105583fb769f6d5dac4c5099b90b564f2eb0c0aa774692031f23fa282c6ffb9fd4160874b59250a90b8f3cd374"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x840}, 0x4040014) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0xd4, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x99, 0x6, "a9b4574ea5110549dcc651fe69eca27f0c838279b62f65f2d617912a7383fed9ce77eeea55d93624533cb2b23833e2437e3a8caca604b80599bc5d8ca9d293ab0e1008e470e7dc3315536cb3ba014a1ebdae75a5a2d72fdffac4ead9c594fac2664431584506bf7a105583fb769f6d5dac4c5099b90b564f2eb0c0aa774692031f23fa282c6ffb9fd4160874b59250a90b8f3cd374"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x840}, 0x4040014) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0xa01}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r4) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004084}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=@dellink={0x328, 0x11, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1000}, [@IFLA_MTU={0x8, 0x4, 0xb}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9e}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x24}, @IFLA_VFINFO_LIST={0x2ac, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xf, 0x7fffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4474, 0xffffffff}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3ff, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffff2, @random="01ac14476a6e"}}, @IFLA_VF_VLAN={0x10, 0x2, {0xe92a, 0xee5, 0x8c2}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2a5, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @multicast}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xa9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x10001}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffff94, 0x2, 0x10}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xf01, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0xbad}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffffffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x100, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x8}}]}, {0x140, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xea09, 0xc77, 0x400, 0x3962707a1f9b5cef}}, {0x14, 0x1, {0x2, 0x8ef, 0x7, 0x88a8}}, {0x14, 0x1, {0x44d, 0x3fa, 0xeec1, 0x8100}}, {0x14, 0x1, {0x3, 0x9d3, 0x5, 0x8100}}, {0x14, 0x1, {0x6, 0xa64, 0x1000, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x40, 0x760, 0x3, 0x88a8}}, {0x14, 0x1, {0xfffffff5, 0x7e1, 0xa, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0xc, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff2, 0x389, 0x60}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x45c, 0x6, 0x88a8}}, {0x14, 0x1, {0xcaba, 0x6e, 0x7}}, {0x14, 0x1, {0x1ff, 0xeb3, 0x401, 0x8100}}, {0x14, 0x1, {0x399818ed, 0x99a, 0x51e, 0x8100}}, {0x14, 0x1, {0x0, 0x8c1, 0x7, 0x8100}}, {0x14, 0x1, {0x5, 0xe17, 0x8a48, 0x8100}}]}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b3c25720125fa11aca005ab1a011f7bd"}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f000000ca80)={'sit0\x00', &(0x7f000000c980)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x7, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x4, 0xc8, 0x0, 0x5}]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1, 0x0, 0x0, @void, @value}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0xa4}}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x22, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 42.986445608s ago: executing program 3 (id=848): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipmr_newroute={0x1c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x5, 0xff, 0x1, 0xff, 0x7}}, 0x1c}}, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) (async) sendto$inet6(r7, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) (async) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x88, 0x4a, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r3, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendto(r1, &(0x7f00000002c0)="40f46e8114b2de6f05d0c8b2ddbeaf0ee0af82ccff458ba4becc5bd8a34cd171bbbb2a36645d6175d5980400fefb5bc935a5d4fbca261a422afef1c3c50550f5fcb99eb5fbf03f431bccb8ce63d01d29bd436f048f1eed579d1790e7c386f8be9babbc3adeb7c3ef989e546ff75b72b9449a1ba971cfb651d7d859cd5e1140a208cdb6cead8f8bd50e6578a4ee1d7ba5c1", 0x91, 0x0, &(0x7f0000000380)=@l2={0x1f, 0x5, @none, 0x0, 0x1}, 0x80) 40.563381969s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 30.502264625s ago: executing program 3 (id=848): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipmr_newroute={0x1c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x5, 0xff, 0x1, 0xff, 0x7}}, 0x1c}}, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) (async) sendto$inet6(r7, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) (async) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x88, 0x4a, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r3, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendto(r1, &(0x7f00000002c0)="40f46e8114b2de6f05d0c8b2ddbeaf0ee0af82ccff458ba4becc5bd8a34cd171bbbb2a36645d6175d5980400fefb5bc935a5d4fbca261a422afef1c3c50550f5fcb99eb5fbf03f431bccb8ce63d01d29bd436f048f1eed579d1790e7c386f8be9babbc3adeb7c3ef989e546ff75b72b9449a1ba971cfb651d7d859cd5e1140a208cdb6cead8f8bd50e6578a4ee1d7ba5c1", 0x91, 0x0, &(0x7f0000000380)=@l2={0x1f, 0x5, @none, 0x0, 0x1}, 0x80) 29.413062417s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 17.426543582s ago: executing program 3 (id=848): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipmr_newroute={0x1c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x5, 0xff, 0x1, 0xff, 0x7}}, 0x1c}}, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) (async) sendto$inet6(r7, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) (async) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x88, 0x4a, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r3, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendto(r1, &(0x7f00000002c0)="40f46e8114b2de6f05d0c8b2ddbeaf0ee0af82ccff458ba4becc5bd8a34cd171bbbb2a36645d6175d5980400fefb5bc935a5d4fbca261a422afef1c3c50550f5fcb99eb5fbf03f431bccb8ce63d01d29bd436f048f1eed579d1790e7c386f8be9babbc3adeb7c3ef989e546ff75b72b9449a1ba971cfb651d7d859cd5e1140a208cdb6cead8f8bd50e6578a4ee1d7ba5c1", 0x91, 0x0, &(0x7f0000000380)=@l2={0x1f, 0x5, @none, 0x0, 0x1}, 0x80) 12.431554291s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 4.758840775s ago: executing program 3 (id=848): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipmr_newroute={0x1c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x5, 0xff, 0x1, 0xff, 0x7}}, 0x1c}}, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) (async) sendto$inet6(r7, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) (async) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x88, 0x4a, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r3, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendto(r1, &(0x7f00000002c0)="40f46e8114b2de6f05d0c8b2ddbeaf0ee0af82ccff458ba4becc5bd8a34cd171bbbb2a36645d6175d5980400fefb5bc935a5d4fbca261a422afef1c3c50550f5fcb99eb5fbf03f431bccb8ce63d01d29bd436f048f1eed579d1790e7c386f8be9babbc3adeb7c3ef989e546ff75b72b9449a1ba971cfb651d7d859cd5e1140a208cdb6cead8f8bd50e6578a4ee1d7ba5c1", 0x91, 0x0, &(0x7f0000000380)=@l2={0x1f, 0x5, @none, 0x0, 0x1}, 0x80) 3.175418924s ago: executing program 4 (id=1139): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c486070000000000280012800b00010069703667726500001800028005000800db00000005001600020000000400120008000a00", @ANYRES32=r1, @ANYBLOB="5b800d03d9a7ad0fed34641b7dd959ec04b8ea84a9e0783c3d9238891c51f4ff165284ab7204bd5cbb092e7f0d4cf1e1b446c2b3e11d5849f6d7033b7a9182f1bc7b0530117f7e0d131a6216c361bb1d417bdc7cd3122736460588c93823ddc23b4e72fdbb1676137737d94621a6a0fd58e6aed5cf8747ff38b5959c4f426b9885995796de1a58e260888b677fa5ff8d004d5081ebbfaac4060000000000000011b89e3f56e3b2aa2fd64927"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delnexthop={0x30, 0x69, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x54014) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delnexthop={0x30, 0x69, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x54014) 3.075319157s ago: executing program 2 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x22, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000540)) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r0}, 0x38) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r2, &(0x7f0000000440)='cgroup.stat\x00', 0x0, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) (async) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x4473, 0x8000, 0x20f, 0x2, 0x10, 0xe, 0x2, 0x0, r7}, 0x20) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0xfffffd56, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x4}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f2915b4de68d624fbaad8f259fe661d2"}, @IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0b3c52aad69e357e0060ac80f90db2b3"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d9a545649ccf2e87718de10745f0e7f7"}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "65916c26ec305b988d7b09c9790bd5e2"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8f7aec0d320b41df2a0ecaf1fe7c3bfb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "212dc8b851ab929796c095ee42624eba"}]}, {0x4}]}, @IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3fcd9fc523410fc1e4fa6dbef3575514"}, @IFLA_PORT_VF={0x8, 0x1, 0xb4d}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r13}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000180)="41c46cf45ae99b9b8dc56c7ea6d5d7b3861c557eec0bca6088c40b24955810467eb137d663d9ff7fe149aecd2bc4f3cb6ad17fe957218a01d6fb235ec2912c5f84", &(0x7f0000000240)=""/137, &(0x7f0000000300)="b7472508ac209217646485ee1236f5a2859a15fbfd8abe5fc504cfb70d40c108be181929f8d782d5518835a786a4e983e47657f5e647c427033a2e461db7cc0299d0c44b24b5a5509d833ea3c4acf2e30d4d4c77dec0ead6254720fb072664f82a900a82c3fa64adcbc54a4b9b226f277eb6", &(0x7f0000000380)="8b8d1486169b5637c73bfc33a7876d1b272a8d7b0409dffab5b6490ace9f467fcf358e4dbc7628ff9a8c558b0198161a9d3d0399e34507f9f7b6a92d5a6ea17a2c23f7c5474564878457f9f35938709304e860e722417d8c9dde55cf31bec592e31006b3f182d5c431a39dfdec749648e41710e6c0ae208aa1df1db19c72a12932c6d7cce5792d98f2c5e5bf4318f612242091135f767c74e8f0ffc0eaae", 0x5, r2}, 0x38) (async, rerun: 64) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) 2.959528659s ago: executing program 2 (id=1142): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d91f153080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337da07b209b48592b79870b625", 0xe4}], 0x1}, 0x0) 2.567964724s ago: executing program 0 (id=1143): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x104, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xb4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x98, 0x6, [@m_nat={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @dev={0xac, 0x14, 0x14, 0x31}}}]}, {0xd, 0x6, "3ea6d48212417e7c0e"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x41}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$inet6_dccp(0xa, 0x6, 0x0) 2.524895262s ago: executing program 4 (id=1144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r2, 0x2000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) sendmmsg$alg(r4, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xd8}], 0x1, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) 2.435224584s ago: executing program 2 (id=1145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100), &(0x7f00000002c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x40}}, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x1813, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x5, 0x8, 0x0, 0x10000}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000915c748887f73484fee3438417046bf186a77a619984e2df8b2cd18a63ba95e2a4a07f0c4e6c9358e9195b570daeacc1f0a507177580cebf230a49082502e96cae0096fb1433b01047c5e526f515cb4ed4ae8bd5cba1fa76218c1a161b62401635af124170b532404c4b08f9a6e20c2f89ad7223be6e627f831f22624d7a386a6271da6e2a46f6e95cd3a0e72934d4797cc05f28db490902a39809b8671153dc9ebada3cb52691224c6551b38ff59f41825c8a8966995f1a9c50334afbedd7f157c1a50b3839049821e4510d962670d5db0124", @ANYRES32=r1, @ANYBLOB="ffff00"/20, @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0400"/28], 0x50) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f00000006c0)="fa0cbef571813b1e494150ed3b76721e19787bdfcfa7", 0x16) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xc0, 0xffff0001, 0x2, 0x24, 0x6, 0x5}, 0x9c) 2.30332677s ago: executing program 0 (id=1146): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1d00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x4, 0xe59, 0x6}, &(0x7f00000003c0)=0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1d00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x4, 0xe59, 0x6}, &(0x7f00000003c0)=0x10) (async) 2.062847475s ago: executing program 0 (id=1147): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80000) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000006c0)={0x1}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe3b}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe5dc}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x2, 0x8a, 0x7}, 0x10, 0x38a5, r3, 0x4, 0x0, &(0x7f0000000500)=[{0x5, 0x3, 0x7, 0x1}, {0x1, 0x2, 0xd, 0x4}, {0x2, 0x3, 0x5, 0xb}, {0x2, 0x4, 0x2, 0x4}], 0x10, 0x401, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000600)={r0, r4}) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44) 1.943159426s ago: executing program 4 (id=1148): r0 = socket(0x2a, 0x4, 0x6) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0xe, 0x4, 0x9, 0xc, 0x4, 0x81}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="fc236cc452374ec33c80da6c8a32365c4fc59483df9b38609299055e4bb8f400525ea123ee11907f23546d287e775e9179bf9a7c78e076f2b5bf77741cf8cfe77625da204640cffa0d8bdcbbb5ee67f2ad20fe241b74b1d03d6bd5c7ce69ad4b27a8db6fcf584bc384329e4bcf2d0bce6bef741588603661b6d419b5c6fbc8e223cb59ac4f827ea5c67583fba257ec8766661f139fec5042270292", 0x9b}, {&(0x7f0000000180)="5a3d2aa3ec79df2721c433df933f2e1fa90105fb487e119f1f37625ef96b2baa5f5ba6df899cf9ae72f12c1655dcf8f872d71c616e1d03babb5e25b3606da5291b46b17e786618c7cc2bd8506ff00009931c2d23248511c623cea4b2cef6b421a3f3", 0x62}, {&(0x7f0000000200)="1bda0a5ba03d58c2e6104c57aed0cfe847e789be5ef9beab8d8d", 0x1a}, {&(0x7f0000000240)="80b4a9e6da7ef7b685bbf39deef67855862a1fad2492f3a5c9cd1cbbbd68575e5522278d2cecd3b987d214f64e765571c05da690d00db1f56a35f2711f91f6a0f40be1449027e1ee2d1ab78ae60cf64510914fed0094ead8ec8a0d65936f5cdb27db33116ff10211316d4a969241138b877ba987552dc8ae276e9f71304c208d1336ae2e68a35e0dd480d1a281beca8465941a3565976eb6dbf0bdebc5fa16be4e4fc6377e842dcc99e8da0d9f4c0bb58f8bc680561c126a478c323d3cb5de28eda24de2c92a7b", 0xc7}], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) sendmsg$key(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2, 0xc, 0xe, 0x3, 0x1a, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x1a, 0x12, 0x10}, @sadb_address={0x3, 0x6, 0x33, 0x80, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x8a, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@remote, 0x1, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x1a, 0x0, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010101, 0x9, 0x10}]}, 0xd0}}, 0x2000080d) socket$unix(0x1, 0x5, 0x0) write$bt_hci(r0, &(0x7f0000000500)={0x1, @create_logical_link={{0x438, 0x21}, {0xc8, {0x6, 0x0, 0xfff8, 0xb, 0xe, 0x80}, {0x40, 0x9, 0x5, 0x3, 0x10, 0x4}}}}, 0x25) r3 = accept4$tipc(r2, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000640)=0x5b9, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff650, 0x0, 0x0, 0x0, 0xffff8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @initr0], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x17b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x1, 0x4, 0x2}, {0x1, 0x3, 0x9, 0x8}, {0x2, 0x5, 0xc, 0xc}, {0x2, 0x3, 0x8, 0x3}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000680)='kvm_vcpu_wakeup\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', r1, r6, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$xdp(r6, &(0x7f0000001b80)={&(0x7f0000000a80)={0x2c, 0x1, r1, 0x2b}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="ea6a79b3fac500a26f52d84b725c33cb2fbf1ebcc7a5c7b4c59d5a1376aa38e183406539fabef9d4e520d8d5e574ae2428365b7a2fccdcd0c82fb5a9e246bf8350ebe0665b75cd90cb48", 0x4a}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000d0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x60, r8, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004a800}, 0x2081) r9 = openat$cgroup_subtree(r6, &(0x7f0000001d40), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000001d80)={[{0x2b, 'cpuset'}]}, 0x8) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xd0, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x667}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=@ipv6_deladdrlabel={0x2c, 0x49, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r1}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x80000) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, r8, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc0a3, 0x2}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x14) r11 = accept$inet(0xffffffffffffffff, &(0x7f00000021c0)={0x2, 0x0, @multicast2}, &(0x7f0000002200)=0x10) vmsplice(r11, &(0x7f0000002400)=[{&(0x7f0000002240)="76fa086c971d4d503e65c129980a315f7297e37da8ea9005a2b84e4a9ade468115567aa42a346e6e62e1c7034ed4a79d3af9e5d301c66b96b3", 0x39}, {&(0x7f0000002280)="d8ee0afbbaa88a313fd021ab264f54a4d287a3bee550ffc77c61eb5ae128037ab56cf5590e3636bb14e170800120af6774ea7ff35970579d0e3ac93845ca3b99e863485477717d941816d80d1f57d93114f4a0387eafcbfef91b31d4e1c793a31c0e8304019017e099380d781def88b1cc405e78325b4bf54fe6310d0a55dad1d2fa328d457792096ba5bf3037dce194f9573800bab91701637f944f7be30dafe284022f7ac7df35fbc869936fb9504fe610", 0xb2}, {&(0x7f0000002340)="cbc93f281c91b7c4b8049c7336ac82a6fad5da01047cc8ec66755718da7fd0bceb33e6182b291a30076fc968d8a1f0f493112fca498a4cf67816dac75e90190038059e491edabd070015167941914638af9d2bdf985e68ba29b2e88d5231a2", 0x5f}, {&(0x7f00000023c0)="faa71ec566ed2bb343e045d935316c9b2a3cf40a78f5a0ba16810e6c", 0x1c}], 0x4, 0x4) 1.932666747s ago: executing program 2 (id=1149): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 1.906802251s ago: executing program 4 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x200, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x884) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x70, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7d5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x72e}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711230000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x200, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x884) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x70, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7d5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x72e}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711230000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1.739466457s ago: executing program 2 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="26eb6d12cb78af20c43504e686a3130f2b123c2587ebe03ac0cce7de9bdfe28a", 0x20}], 0x1) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000080609000000000000000000030000020500010007000000fd8ebc50596b7d5d00849db48729e70fe9dfedf797ad438e3bb5"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x20008004) (async) setsockopt(r1, 0x800000000010d, 0x0, &(0x7f00001c9fff), 0xc5) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.72249446s ago: executing program 0 (id=1152): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r0) 1.584505358s ago: executing program 0 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x8, 0xb7, 0x7, 0x7, 0x2, 0x9, 0x49, 0x0, 0xd6, 0x6, 0x80, 0x9, 0x7, 0x6}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0xa}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000010400000000000000000000040000000000000024c0e05dde877287ec950b0f417aa581ff0f00000e29d67c8f8bb3bb8e8c5faa01b960210c46e9bfd5d110930877eb0e99948c6fca491946e6055767c08d33fd5206b8b909155a60a150f1139cd64a569d82b91f9a590ca89eb2efbabe7302fec9ab502fe1ba5fbe6750a9c60546af54f17d07ef8fcdc669a86255cd47a3886cfe56a30d506f9d194e6d32ac7a358ed2e375c60f916122ef1867f1ef139e5a5d31e24284eba2b2fbd321d676b3329f0990e20fe9e5", @ANYRES32=r3, @ANYBLOB="00000000000000001800128008000100767469000c0002800800030000000000"], 0x38}}, 0x0) (async) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x3a6}, 0x8) (async) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000000)) 1.519487309s ago: executing program 4 (id=1154): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008113b0ffbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103600000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getroute={0x40, 0x1a, 0x10, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x6, 0xfd, 0x3, 0xfe, 0x0, 0x900}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @RTA_UID={0x8, 0x19, r0}, @RTA_IIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.51928719s ago: executing program 2 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.340145975s ago: executing program 0 (id=1156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b38d784e5b", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00617e7475c390230000000000000000000000000000010000000000"], 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xfff3}, {0x9}}}, 0x24}}, 0x0) 955.430167ms ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 0s ago: executing program 4 (id=1157): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cbd7000fddbdf25000003e4", @ANYRES32=r6, @ANYBLOB="830f0400cf1607001800128008000100736974000c00028008000300ac14141c"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000000c0)={r8, 0x9ca, 0x7, 0x5}) (rerun: 32) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x28004) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r10, 0xc, 0x1, 0x7fff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="0a0000000020530e291cb8bf", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r12], 0x20) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24b40002", @ANYRES16=r9, @ANYBLOB="000303000000000000000100000000000000014100000018001700000200000000007564703a73797a3100000000"], 0xfed7}}, 0x24048040) r13 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r13, 0x8905, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 74.519702][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.532024][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542437][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.554933][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.566750][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.612276][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.623070][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.636072][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.646723][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.658755][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.686132][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.695985][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.705783][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714937][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796843][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.805296][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.811145][ T5829] veth0_vlan: entered promiscuous mode [ 74.827153][ T5829] veth1_vlan: entered promiscuous mode [ 74.838989][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.853648][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.874440][ T5833] veth0_macvtap: entered promiscuous mode [ 74.904567][ T5833] veth1_macvtap: entered promiscuous mode [ 74.921105][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.939448][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.960913][ T5829] veth0_macvtap: entered promiscuous mode [ 74.971623][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.988147][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.996300][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.008902][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.019191][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.029927][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.039979][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.050536][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.075155][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.111811][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.138812][ T5829] veth1_macvtap: entered promiscuous mode [ 75.162083][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.175143][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.185440][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.196105][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.206224][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.217747][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.228960][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.239112][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.247580][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.270383][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.279683][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288594][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.297510][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.392070][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.407360][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433547][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.460549][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.471518][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.482456][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.492959][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.503760][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.516459][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.543964][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.562324][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.580201][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.599084][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.610289][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.622547][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.633650][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.644467][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.654635][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.665209][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681151][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.746991][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756003][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.765660][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.775966][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800942][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.819714][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.853771][ T5843] Bluetooth: hci1: command tx timeout [ 75.928959][ T5930] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 75.936918][ T5843] Bluetooth: hci0: command tx timeout [ 75.938204][ T5144] Bluetooth: hci4: command tx timeout [ 75.942341][ T5843] Bluetooth: hci3: command tx timeout [ 75.947921][ T5144] Bluetooth: hci2: command tx timeout [ 75.991339][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.020451][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112664][ T5938] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 76.187022][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 76.205026][ T5941] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 76.269722][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.289978][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.382901][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.392809][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.602882][ T5950] bridge_slave_0: left allmulticast mode [ 76.610241][ T5950] bridge_slave_0: left promiscuous mode [ 76.617681][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.697740][ T5950] bridge_slave_1: left allmulticast mode [ 76.707527][ T5950] bridge_slave_1: left promiscuous mode [ 76.713303][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.728679][ T5950] bond0: (slave bond_slave_0): Releasing backup interface [ 76.752259][ T5950] bond0: (slave bond_slave_1): Releasing backup interface [ 76.811560][ T5950] team0: Port device team_slave_0 removed [ 76.832110][ T5950] team0: Port device team_slave_1 removed [ 76.838906][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.846672][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.856825][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.864641][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.102790][ T5969] Zero length message leads to an empty skb [ 77.134873][ T5968] netlink: 'syz.4.16': attribute type 4 has an invalid length. [ 77.143785][ T5968] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16'. [ 77.148408][ T5971] netlink: 'syz.3.18': attribute type 11 has an invalid length. [ 77.171830][ T5973] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 77.201838][ T5968] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 77.304192][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 77.333496][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 77.370777][ T5981] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 77.472480][ T5990] netlink: 'syz.4.24': attribute type 12 has an invalid length. [ 77.482961][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 77.502003][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.908494][ T6008] openvswitch: netlink: Key type 16377 is out of range max 32 [ 77.934892][ T5144] Bluetooth: hci1: command tx timeout [ 77.959548][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.015114][ T5144] Bluetooth: hci2: command tx timeout [ 78.020579][ T5144] Bluetooth: hci3: command tx timeout [ 78.027308][ T5844] Bluetooth: hci4: command tx timeout [ 78.032777][ T5844] Bluetooth: hci0: command tx timeout [ 78.351331][ T6043] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.700532][ T6055] delete_channel: no stack [ 78.829642][ T6059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.47'. [ 78.906809][ T6063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 79.492612][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'. [ 79.641727][ T6094] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 80.330696][ T6132] netlink: 'syz.3.72': attribute type 16 has an invalid length. [ 80.546687][ T6135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.027179][ T6157] xt_hashlimit: size too large, truncated to 1048576 [ 81.077316][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.007675][ T6190] __nla_validate_parse: 4 callbacks suppressed [ 82.007696][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 82.300502][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 83.099678][ T6204] tipc: Started in network mode [ 83.217477][ T6204] tipc: Node identity 46ccefce44c, cluster identity 4711 [ 83.225564][ T6204] tipc: Enabled bearer , priority 0 [ 83.233048][ T6205] syzkaller0: entered promiscuous mode [ 83.314058][ T6205] syzkaller0: entered allmulticast mode [ 83.339158][ T6203] tipc: Resetting bearer [ 83.355317][ T6198] tipc: Resetting bearer [ 83.390226][ T6198] tipc: Disabling bearer [ 83.809100][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 84.854880][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 85.487751][ T6263] netlink: 180 bytes leftover after parsing attributes in process `syz.3.120'. [ 85.590666][ T6265] batadv_slave_1: entered promiscuous mode [ 85.631165][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'. [ 85.644706][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 86.007007][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.471902][ T6306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.138'. [ 86.481665][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 86.644154][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.684710][ T6311] team0: No ports can be present during mode change [ 87.225867][ T25] cfg80211: failed to load regulatory.db [ 87.501196][ T6341] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 87.895133][ T6362] xt_hashlimit: size too large, truncated to 1048576 [ 88.013784][ T6367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.165'. [ 88.119986][ T6371] warning: `syz.1.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.378488][ T6380] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 88.554968][ T25] hid-generic 0005:0B57:0800.0001: item fetching failed at offset 0/1 [ 88.575215][ T25] hid-generic 0005:0B57:0800.0001: probe with driver hid-generic failed with error -22 [ 88.688058][ T6395] xt_l2tp: unknown flags: 18 [ 88.821868][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 88.919046][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 88.968627][ T6405] netlink: 10 bytes leftover after parsing attributes in process `syz.1.176'. [ 89.001765][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.547602][ T6464] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 91.158586][ T6484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.204'. [ 91.345940][ T6489] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 91.452364][ T6492] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 92.003176][ T6504] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 92.043043][ T6504] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 92.096139][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 92.160624][ T6508] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.168442][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 92.197491][ T6508] team0: Device ipvlan2 is already an upper device of the team interface [ 92.222321][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 92.262316][ T6509] netlink: 1220 bytes leftover after parsing attributes in process `syz.4.210'. [ 92.301933][ T6509] openvswitch: netlink: Message has 5 unknown bytes. [ 92.352535][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.414439][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 92.538734][ T6525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.954455][ T6544] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 92.962176][ T6544] netlink: 'syz.2.222': attribute type 2 has an invalid length. [ 93.086505][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 93.153640][ T6547] syzkaller0: entered allmulticast mode [ 93.341295][ T6567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.226'. [ 93.379861][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 93.710442][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 95.325136][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 95.831986][ T6616] netlink: 'syz.4.243': attribute type 4 has an invalid length. [ 95.846796][ T6616] netlink: 'syz.4.243': attribute type 11 has an invalid length. [ 95.867168][ T6616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.243'. [ 95.892296][ T6602] infiniband syz1: set down [ 95.908267][ T6602] infiniband syz1: added ipvlan1 [ 95.928439][ T6602] syz1: rxe_create_cq: returned err = -12 [ 95.950647][ T6602] infiniband syz1: Couldn't create ib_mad CQ [ 95.977904][ T6602] infiniband syz1: Couldn't open port 1 [ 96.037236][ T6602] RDS/IB: syz1: added [ 96.043151][ T6602] smc: adding ib device syz1 with port count 1 [ 96.054641][ T6602] smc: ib device syz1 port 1 has pnetid [ 96.184491][ T6629] netlink: 'syz.3.248': attribute type 13 has an invalid length. [ 96.205787][ T6629] netlink: 'syz.3.248': attribute type 58 has an invalid length. [ 96.231595][ T6629] netlink: 152 bytes leftover after parsing attributes in process `syz.3.248'. [ 96.393205][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.400567][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.649683][ T6649] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 96.804837][ T6656] netlink: 32 bytes leftover after parsing attributes in process `syz.3.257'. [ 97.112747][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 97.208382][ T6674] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 97.336422][ T6674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.369156][ T6679] bond1: (slave gretap1): making interface the new active one [ 97.379868][ T6679] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 97.617914][ T6695] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 97.771205][ T6698] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 98.037394][ T6712] openvswitch: netlink: IP tunnel dst address not specified [ 98.113710][ T6718] __nla_validate_parse: 1 callbacks suppressed [ 98.113728][ T6718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.279'. [ 98.134128][ T6715] ipvlan0: entered promiscuous mode [ 98.158521][ T6715] ipvlan0: entered allmulticast mode [ 98.191924][ T6715] veth0_vlan: entered allmulticast mode [ 98.740658][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 98.778146][ T6759] geneve2: entered promiscuous mode [ 98.837853][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.290'. [ 98.997950][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 99.023195][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 99.324188][ T6783] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 99.345845][ T6783] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 99.355848][ T6783] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.294'. [ 99.409476][ T6786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.419667][ T6781] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 99.666205][ T6799] IPv6: sit1: Disabled Multicast RS [ 99.832993][ T6810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.301'. [ 99.898252][ T6810] xt_socket: unknown flags 0x50 [ 100.171646][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.309'. [ 100.313740][ T62] tipc: Subscription rejected, illegal request [ 100.418316][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 100.534378][ T6844] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 100.782741][ T6863] netlink: 'syz.2.321': attribute type 9 has an invalid length. [ 100.979435][ T6872] nbd: must specify a size in bytes for the device [ 101.022005][ T6875] ip6gre1: entered allmulticast mode [ 101.884739][ T6917] Bluetooth: MGMT ver 1.23 [ 101.932692][ T6922] bond0: entered promiscuous mode [ 101.958001][ T6922] bond_slave_0: entered promiscuous mode [ 101.969888][ T6922] bond_slave_1: entered promiscuous mode [ 101.978417][ T6922] batadv0: entered promiscuous mode [ 102.022953][ T6922] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.596788][ T6955] sctp: [Deprecated]: syz.2.351 (pid 6955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.596788][ T6955] Use struct sctp_sack_info instead [ 102.781137][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.106421][ T6969] delete_channel: no stack [ 103.268872][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.640407][ T6977] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 103.710892][ T6980] __nla_validate_parse: 12 callbacks suppressed [ 103.710913][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.359'. [ 103.730059][ T6977] team0: Device veth0_macvtap failed to register rx_handler [ 103.885006][ T6986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.677290][ T7013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.370'. [ 104.748821][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 104.942513][ T7027] sctp: [Deprecated]: syz.4.375 (pid 7027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.942513][ T7027] Use struct sctp_sack_info instead [ 105.234678][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 105.350480][ T7041] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 105.402142][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 105.689805][ T7067] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 105.709999][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.386'. [ 105.725531][ T7067] team0: Device hsr_slave_0 failed to register rx_handler [ 105.990273][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 106.009327][ T7082] smc: net device wg0 applied user defined pnetid SYZ0 [ 106.286952][ T7096] trusted_key: syz.3.392 sent an empty control message without MSG_MORE. [ 106.344347][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 106.359766][ T7099] netlink: 'syz.3.392': attribute type 13 has an invalid length. [ 106.483166][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.393'. [ 106.697794][ T7111] sctp: [Deprecated]: syz.4.395 (pid 7111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.697794][ T7111] Use struct sctp_sack_info instead [ 106.724006][ T7111] sctp: [Deprecated]: syz.4.395 (pid 7111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.724006][ T7111] Use struct sctp_sack_info instead [ 106.750317][ T7113] netlink: 'syz.0.396': attribute type 12 has an invalid length. [ 106.915854][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 107.322390][ T7131] netlink: 'syz.3.400': attribute type 21 has an invalid length. [ 107.929305][ T7157] netlink: 'syz.0.409': attribute type 11 has an invalid length. [ 108.557901][ T7190] x_tables: duplicate entry at hook 1 [ 108.565025][ T7180] nbd: socks must be embedded in a SOCK_ITEM attr [ 108.783946][ T7195] __nla_validate_parse: 6 callbacks suppressed [ 108.783966][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 108.831256][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 108.988623][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.008173][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.017982][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.051358][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.114582][ T7209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.171817][ T7219] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 109.248798][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 109.455281][ T7229] netlink: 'syz.0.432': attribute type 3 has an invalid length. [ 109.675840][ T7242] ip6gre1: entered allmulticast mode [ 109.851799][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 109.965673][ T7258] unsupported nla_type 174 [ 110.037995][ T7264] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 110.045883][ T7264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.137111][ T7266] sctp: [Deprecated]: syz.0.445 (pid 7266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.137111][ T7266] Use struct sctp_sack_info instead [ 110.763738][ T7277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'. [ 111.261615][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.864005][ T7326] unsupported nlmsg_type 40 [ 111.904998][ T7329] dvmrp1: entered allmulticast mode [ 113.128256][ T7386] tipc: Started in network mode [ 113.138314][ T7386] tipc: Node identity , cluster identity 4711 [ 113.146967][ T7386] tipc: Failed to set node id, please configure manually [ 113.160355][ T7386] tipc: Enabling of bearer rejected, failed to enable media [ 113.375438][ T7393] netlink: 'syz.3.481': attribute type 7 has an invalid length. [ 113.624660][ T7407] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 113.692028][ T7407] hsr0: entered promiscuous mode [ 113.702758][ T7407] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 113.722971][ T7407] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.740705][ T7407] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 113.916960][ T7417] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 114.163249][ T7439] netlink: 'syz.0.498': attribute type 75 has an invalid length. [ 114.403607][ T7450] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 115.261112][ T7490] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 115.301500][ T7490] netlink: 'syz.0.512': attribute type 3 has an invalid length. [ 115.327732][ T7490] __nla_validate_parse: 12 callbacks suppressed [ 115.327751][ T7490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.512'. [ 115.348736][ T7490] NCSI netlink: No device for ifindex 0 [ 115.527302][ T7506] sctp: [Deprecated]: syz.0.518 (pid 7506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.527302][ T7506] Use struct sctp_sack_info instead [ 115.565559][ T7504] openvswitch: netlink: IP tunnel dst address not specified [ 115.911390][ T7516] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.247634][ T7523] netlink: 'syz.0.522': attribute type 20 has an invalid length. [ 116.456618][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.524'. [ 116.853063][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 117.074036][ T7560] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 117.083221][ T7560] netlink: 'syz.1.534': attribute type 2 has an invalid length. [ 117.108095][ T7560] netlink: 3 bytes leftover after parsing attributes in process `syz.1.534'. [ 117.185587][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea3a000: rx timeout, send abort [ 117.195946][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea39000: rx timeout, send abort [ 117.204645][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ea3a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.220460][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ea39000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.401946][ T7578] netlink: 'syz.0.538': attribute type 24 has an invalid length. [ 117.633628][ T7587] bridge_slave_0: left allmulticast mode [ 117.639482][ T7587] bridge_slave_0: left promiscuous mode [ 117.650938][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.666071][ T7548] syz.2.530 (7548) used greatest stack depth: 19088 bytes left [ 117.668440][ T7585] netlink: 'syz.4.540': attribute type 142 has an invalid length. [ 117.737316][ T7587] bridge_slave_1: left allmulticast mode [ 117.743071][ T7587] bridge_slave_1: left promiscuous mode [ 117.757379][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.788882][ T7587] bond0: (slave bond_slave_0): Releasing backup interface [ 117.812111][ T7587] bond_slave_0: left promiscuous mode [ 117.843500][ T7587] bond0: (slave bond_slave_1): Releasing backup interface [ 117.853252][ T7587] bond_slave_1: left promiscuous mode [ 117.879099][ T7587] team0: Port device team_slave_0 removed [ 117.899217][ T7587] team0: Port device team_slave_1 removed [ 117.911205][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.918951][ T7587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.929564][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.938336][ T7587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.955004][ T7591] veth0_to_hsr: invalid flags given to default FDB implementation [ 117.997555][ T7593] netlink: 'syz.2.543': attribute type 2 has an invalid length. [ 118.254971][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 118.776873][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 118.899027][ T7642] pim6reg: entered allmulticast mode [ 118.934690][ T7647] pim6reg: left allmulticast mode [ 119.338497][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 119.490479][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.505923][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.651230][ T7686] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 119.705637][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'. [ 119.924673][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.108462][ T7713] x_tables: duplicate underflow at hook 2 [ 120.122703][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 120.134480][ T7717] batadv_slave_0: entered promiscuous mode [ 120.140837][ T7718] batadv_slave_0: left promiscuous mode [ 120.172117][ T979] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/1 [ 120.214224][ T979] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22 [ 120.235964][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.248293][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.366520][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.373792][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.391700][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.398942][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.502562][ T7725] v: renamed from veth1_virt_wifi (while UP) [ 120.552250][ T7729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.643688][ T7731] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 120.657527][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.225399][ T7765] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 121.247383][ T7767] Cannot find del_set index 3 as target [ 121.265998][ T7763] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 121.316752][ T7766] netlink: 508 bytes leftover after parsing attributes in process `syz.3.594'. [ 121.363042][ T7765] netlink: 508 bytes leftover after parsing attributes in process `syz.3.594'. [ 121.388795][ T7776] netlink: 830 bytes leftover after parsing attributes in process `syz.2.597'. [ 121.447681][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 121.669197][ T7789] wg1: entered promiscuous mode [ 121.888943][ T7755] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.118582][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 122.317172][ T7828] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 122.640462][ T7846] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.679804][ T7846] tc_dump_action: action bad kind [ 122.726055][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 122.777925][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 123.469787][ T7914] sctp: [Deprecated]: syz.4.628 (pid 7914) Use of int in max_burst socket option deprecated. [ 123.469787][ T7914] Use struct sctp_assoc_value instead [ 123.494015][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 123.516842][ T7909] xt_CT: No such helper "pptp" [ 123.921820][ T7918] netlink: 'syz.0.629': attribute type 21 has an invalid length. [ 123.929928][ T7918] netlink: 128 bytes leftover after parsing attributes in process `syz.0.629'. [ 123.939935][ T7918] netlink: 3 bytes leftover after parsing attributes in process `syz.0.629'. [ 124.189198][ T7955] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 124.232636][ T7958] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 124.385853][ T7962] veth0: entered promiscuous mode [ 124.397679][ T7962] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 124.522265][ T7971] veth0_vlan: left promiscuous mode [ 124.539108][ T7971] veth0_vlan: entered promiscuous mode [ 124.629146][ T7961] veth0: left promiscuous mode [ 124.780997][ T7989] netlink: 'syz.2.646': attribute type 13 has an invalid length. [ 124.844911][ T7988] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 125.042665][ T8009] netlink: 'syz.2.653': attribute type 6 has an invalid length. [ 125.209012][ T8015] bridge0: port 3(veth0_to_bridge) entered blocking state [ 125.242158][ T8015] bridge0: port 3(veth0_to_bridge) entered disabled state [ 125.289894][ T8015] veth0_to_bridge: entered allmulticast mode [ 125.345986][ T8015] veth0_to_bridge: entered promiscuous mode [ 125.352173][ T8015] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.410721][ T8015] bridge0: port 3(veth0_to_bridge) entered blocking state [ 125.418388][ T8015] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 125.655379][ T8048] pim6reg1: entered promiscuous mode [ 125.665147][ T8048] pim6reg1: entered allmulticast mode [ 125.711334][ T8053] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 126.214163][ T8076] netlink: 'syz.3.673': attribute type 12 has an invalid length. [ 126.646898][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.658143][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.667380][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.678000][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.687789][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.695393][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.708279][ T8098] __nla_validate_parse: 18 callbacks suppressed [ 126.708297][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 126.791388][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 126.951317][ T8100] "syz.4.679" (8100) uses obsolete ecb(arc4) skcipher [ 127.249993][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 127.540409][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 127.582111][ T8138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.685'. [ 127.596891][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 127.615407][ T8138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.685'. [ 128.025013][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 128.072204][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.072564][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'. [ 128.090647][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.109717][ T8096] bridge_slave_0: entered allmulticast mode [ 128.116188][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'. [ 128.134485][ T8158] syz.2.691 (8158) used greatest stack depth: 18928 bytes left [ 128.136837][ T8096] bridge_slave_0: entered promiscuous mode [ 128.162832][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.181358][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 128.192226][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.208766][ T8096] bridge_slave_1: entered allmulticast mode [ 128.216816][ T8096] bridge_slave_1: entered promiscuous mode [ 128.286471][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.325981][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.353177][ T8172] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 128.415763][ T8172] team0: Device veth0_macvtap failed to register rx_handler [ 128.532272][ T8182] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.549710][ T8096] team0: Port device team_slave_0 added [ 128.568702][ T8096] team0: Port device team_slave_1 added [ 128.619711][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.643878][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.690464][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.703185][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.710285][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.737042][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.804530][ T8096] hsr_slave_0: entered promiscuous mode [ 128.814795][ T5144] Bluetooth: hci3: command tx timeout [ 128.829772][ T8096] hsr_slave_1: entered promiscuous mode [ 128.842536][ T8096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.850382][ T8096] Cannot create hsr debugfs directory [ 129.185201][ T8096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.259758][ T8202] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 129.322964][ T8096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.502578][ T8096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.896608][ T5144] Bluetooth: hci3: command tx timeout [ 131.444728][ T8096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.798009][ T8252] batadv1: entered allmulticast mode [ 131.845299][ T8256] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 131.902535][ T8096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.942111][ T8096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.968017][ T8096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.980910][ T8254] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 131.990526][ T8096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.247003][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.281330][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.313237][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.320462][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.373271][ T8279] __nla_validate_parse: 7 callbacks suppressed [ 132.377007][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.386696][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.403955][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 132.425994][ T8279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.438110][ T8279] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.446295][ T8279] gretap1: entered promiscuous mode [ 132.451580][ T8279] gretap1: entered allmulticast mode [ 132.732588][ T8298] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 132.798280][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.894182][ T8096] veth0_vlan: entered promiscuous mode [ 132.927038][ T8096] veth1_vlan: entered promiscuous mode [ 132.942074][ T8304] tipc: Started in network mode [ 132.952195][ T8304] tipc: Node identity -, cluster identity 4711 [ 132.973623][ T5144] Bluetooth: hci3: command tx timeout [ 133.085274][ T8096] veth0_macvtap: entered promiscuous mode [ 133.141131][ T8096] veth1_macvtap: entered promiscuous mode [ 133.199388][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.227101][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.738'. [ 133.243434][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.282235][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.303085][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.314532][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.334205][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.345713][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.357802][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.387978][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.412636][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.436483][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.453846][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.472552][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.483115][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.494977][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.507953][ T8096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.517208][ T8096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.543475][ T8096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.558197][ T8096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.758231][ T7448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.775133][ T7448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.837401][ T7448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.855810][ T7448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.113667][ T8358] netlink: 'syz.2.749': attribute type 8 has an invalid length. [ 134.952284][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 134.982077][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 135.018375][ T8391] netlink: 'syz.3.757': attribute type 20 has an invalid length. [ 135.054001][ T8399] netlink: 192 bytes leftover after parsing attributes in process `syz.3.757'. [ 135.333064][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.924365][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.950779][ T8440] netlink: 1344 bytes leftover after parsing attributes in process `syz.0.765'. [ 135.978854][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.035108][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.044951][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.054390][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.061702][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.109618][ T8438] netlink: 92 bytes leftover after parsing attributes in process `syz.4.764'. [ 136.405318][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.440755][ T8466] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 136.463545][ T8466] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 136.496438][ T8465] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 136.605873][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.713958][ T8480] netlink: 52 bytes leftover after parsing attributes in process `syz.4.777'. [ 136.722888][ T8480] netlink: 864 bytes leftover after parsing attributes in process `syz.4.777'. [ 136.768967][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.804163][ T8482] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 136.823907][ T8482] netlink: 56 bytes leftover after parsing attributes in process `syz.0.779'. [ 136.837751][ T8482] netlink: 'syz.0.779': attribute type 11 has an invalid length. [ 136.854475][ T8489] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 136.924315][ T8489] macvlan0: entered promiscuous mode [ 136.935531][ T8489] macvlan0: entered allmulticast mode [ 136.958854][ T8489] veth1_vlan: entered allmulticast mode [ 136.967331][ T8489] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 136.977636][ T8495] netlink: 'syz.0.779': attribute type 39 has an invalid length. [ 137.114961][ T8487] tipc: New replicast peer: 255.255.255.255 [ 137.156135][ T8487] tipc: Enabled bearer , priority 10 [ 137.232061][ T8501] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 137.267535][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 137.419943][ T1149] bridge_slave_1: left allmulticast mode [ 137.431783][ T1149] bridge_slave_1: left promiscuous mode [ 137.441750][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.457176][ T1149] bridge_slave_0: left allmulticast mode [ 137.463001][ T1149] bridge_slave_0: left promiscuous mode [ 137.469076][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.495403][ T8511] __nla_validate_parse: 2 callbacks suppressed [ 137.495421][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.787'. [ 137.726500][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 137.773983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.990627][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 138.176777][ T5144] Bluetooth: hci3: command tx timeout [ 138.185145][ T5880] tipc: Node number set to 34402254 [ 138.228558][ T8536] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.254853][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.275604][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.287114][ T1149] bond0 (unregistering): Released all slaves [ 138.301842][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 138.322118][ T8530] netlink: 'syz.3.792': attribute type 13 has an invalid length. [ 138.332367][ T8530] netlink: 'syz.3.792': attribute type 58 has an invalid length. [ 138.344667][ T8530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.792'. [ 138.356793][ T8523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.457349][ T8525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.473769][ T8525] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.486864][ T8525] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 138.656645][ T8549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'. [ 138.805887][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.824401][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.831727][ T8434] bridge_slave_0: entered allmulticast mode [ 138.860284][ T8434] bridge_slave_0: entered promiscuous mode [ 138.894310][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.901466][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.939291][ T8434] bridge_slave_1: entered allmulticast mode [ 138.939967][ T8562] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.954792][ T8434] bridge_slave_1: entered promiscuous mode [ 138.988443][ T8566] xt_limit: Overflow, try lower: 0/0 [ 139.097866][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.198944][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.265002][ T8578] syz.3.804 uses old SIOCAX25GETINFO [ 139.397678][ T8434] team0: Port device team_slave_0 added [ 139.445401][ T8434] team0: Port device team_slave_1 added [ 139.531968][ T1149] hsr_slave_0: left promiscuous mode [ 139.540766][ T1149] hsr_slave_1: left promiscuous mode [ 139.551908][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.563559][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.579510][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.588023][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.638555][ T1149] veth1_macvtap: left promiscuous mode [ 139.652342][ T1149] veth0_macvtap: left promiscuous mode [ 139.661371][ T1149] veth1_vlan: left promiscuous mode [ 139.674160][ T1149] veth0_vlan: left promiscuous mode [ 140.115917][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 140.162042][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 140.253687][ T5144] Bluetooth: hci3: command tx timeout [ 140.613118][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.624718][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.672172][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.710193][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.736236][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.805551][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.840796][ T8604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.877911][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'. [ 141.010914][ T8434] hsr_slave_0: entered promiscuous mode [ 141.044837][ T8434] hsr_slave_1: entered promiscuous mode [ 141.054387][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.074143][ T8434] Cannot create hsr debugfs directory [ 141.343245][ T8625] netlink: 'syz.3.816': attribute type 21 has an invalid length. [ 141.375582][ T8625] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.391782][ T8625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.399639][ T8625] IPv6: NLM_F_CREATE should be set when creating new route [ 141.406938][ T8625] IPv6: NLM_F_CREATE should be set when creating new route [ 141.414255][ T8625] IPv6: NLM_F_CREATE should be set when creating new route [ 141.414976][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'. [ 141.471935][ T8633] 8021q: VLANs not supported on lo [ 141.760383][ T8651] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 142.337638][ T5144] Bluetooth: hci3: command tx timeout [ 142.468754][ T8704] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 142.513703][ T8704] netlink: 17 bytes leftover after parsing attributes in process `syz.4.833'. [ 142.725961][ T8434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.849565][ T8434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.858559][ T8720] netlink: 256 bytes leftover after parsing attributes in process `syz.0.836'. [ 142.892290][ T8723] netlink: 'syz.4.839': attribute type 9 has an invalid length. [ 142.919354][ T8434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.942352][ T8434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.063699][ T8730] netlink: 92 bytes leftover after parsing attributes in process `syz.3.840'. [ 143.122058][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.141844][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.167590][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.174903][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.225475][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.232850][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.678674][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.855844][ T5831] syz-executor (5831) used greatest stack depth: 18352 bytes left [ 144.160280][ T8434] veth0_vlan: entered promiscuous mode [ 144.317929][ T8434] veth1_vlan: entered promiscuous mode [ 144.414955][ T5144] Bluetooth: hci3: command tx timeout [ 144.436322][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 144.465350][ T8434] veth0_macvtap: entered promiscuous mode [ 144.497905][ T8759] netlink: 160 bytes leftover after parsing attributes in process `syz.2.849'. [ 144.541155][ T8434] veth1_macvtap: entered promiscuous mode [ 144.599096][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.614014][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.629192][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.651235][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.698779][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.722174][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.750678][ T8767] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.761505][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.791164][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.836404][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.843239][ T8774] netlink: 'syz.0.853': attribute type 11 has an invalid length. [ 144.865566][ T8770] netlink: 'syz.0.853': attribute type 11 has an invalid length. [ 144.874600][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.911704][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.942600][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.954839][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.961431][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.964401][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.982293][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.000647][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.012654][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.031046][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.039012][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.055871][ T8434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.075751][ T8434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.100033][ T8434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.111678][ T8434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.116719][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 145.222745][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'. [ 145.395742][ T8759] syz.2.849 (8759) used greatest stack depth: 17952 bytes left [ 145.448598][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.463885][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.548899][ T7900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.583757][ T7900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.888615][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.864'. [ 146.027459][ T8825] netem: incorrect ge model size [ 146.032835][ T8825] netem: change failed [ 146.136831][ T8777] chnl_net:caif_netlink_parms(): no params data found [ 146.274921][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 146.559906][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.591814][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.619753][ T8777] bridge_slave_0: entered allmulticast mode [ 146.635107][ T8777] bridge_slave_0: entered promiscuous mode [ 146.766450][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.812717][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.829458][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.842339][ T8777] bridge_slave_1: entered allmulticast mode [ 146.849975][ T8777] bridge_slave_1: entered promiscuous mode [ 146.901197][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.914779][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.923918][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.945784][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.949479][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.968957][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.983117][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.041520][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.137621][ T5843] Bluetooth: hci2: command tx timeout [ 147.149093][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.196070][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.394710][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.430372][ T8867] pim6reg1: entered promiscuous mode [ 147.435980][ T8867] pim6reg1: entered allmulticast mode [ 147.479055][ T8777] team0: Port device team_slave_0 added [ 147.531655][ T8777] team0: Port device team_slave_1 added [ 147.734216][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.743063][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.788819][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.812210][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.833427][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.900699][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.945872][ T8889] ip6gre2: entered allmulticast mode [ 147.985763][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 148.148625][ T8896] netlink: 244 bytes leftover after parsing attributes in process `syz.2.883'. [ 148.164049][ T35] bridge_slave_1: left allmulticast mode [ 148.170788][ T35] bridge_slave_1: left promiscuous mode [ 148.185396][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.205929][ T35] bridge_slave_0: left allmulticast mode [ 148.211624][ T35] bridge_slave_0: left promiscuous mode [ 148.234455][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.278035][ T8901] netlink: 288 bytes leftover after parsing attributes in process `syz.2.885'. [ 148.300773][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 148.332336][ T8901] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 148.467177][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 148.681407][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.694617][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.706782][ T35] bond0 (unregistering): Released all slaves [ 148.719372][ T8777] hsr_slave_0: entered promiscuous mode [ 148.730629][ T8777] hsr_slave_1: entered promiscuous mode [ 148.759074][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.777333][ T8777] Cannot create hsr debugfs directory [ 148.954926][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.005289][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.024918][ T8855] bridge_slave_0: entered allmulticast mode [ 149.031939][ T8855] bridge_slave_0: entered promiscuous mode [ 149.040478][ T8915] netlink: 116 bytes leftover after parsing attributes in process `syz.2.888'. [ 149.054149][ T5843] Bluetooth: hci3: command tx timeout [ 149.106359][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.114392][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.122454][ T8855] bridge_slave_1: entered allmulticast mode [ 149.131619][ T8855] bridge_slave_1: entered promiscuous mode [ 149.213792][ T5843] Bluetooth: hci2: command tx timeout [ 149.268561][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.278048][ T8917] netlink: 'syz.0.890': attribute type 21 has an invalid length. [ 149.303262][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.441720][ T8855] team0: Port device team_slave_0 added [ 149.470416][ T8855] team0: Port device team_slave_1 added [ 149.559156][ T8927] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 149.626698][ T8925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.670591][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.685164][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.727723][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.810404][ T35] hsr_slave_0: left promiscuous mode [ 149.831205][ T35] hsr_slave_1: left promiscuous mode [ 149.843958][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.853731][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.871796][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.881327][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.920366][ T35] veth1_macvtap: left promiscuous mode [ 149.926213][ T35] veth0_macvtap: left promiscuous mode [ 149.933030][ T35] veth1_vlan: left promiscuous mode [ 149.954092][ T35] veth0_vlan: left promiscuous mode [ 150.493675][ T35] team0 (unregistering): Port device team_slave_1 removed [ 150.548180][ T35] team0 (unregistering): Port device team_slave_0 removed [ 150.990584][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.997719][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.024156][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.066546][ T8942] netlink: 830 bytes leftover after parsing attributes in process `syz.4.897'. [ 151.133551][ T5843] Bluetooth: hci3: command tx timeout [ 151.305251][ T5843] Bluetooth: hci2: command tx timeout [ 151.319002][ T8777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.345820][ T8959] netlink: 10 bytes leftover after parsing attributes in process `syz.0.900'. [ 151.437280][ T8855] hsr_slave_0: entered promiscuous mode [ 151.492884][ T8855] hsr_slave_1: entered promiscuous mode [ 151.517880][ T8855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.526261][ T8855] Cannot create hsr debugfs directory [ 151.596737][ T8777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.831135][ T8777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.969283][ T8777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.288774][ T9014] ax25_connect(): syz.0.915 uses autobind, please contact jreuter@yaina.de [ 152.523932][ T9024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.598912][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 152.684230][ T8777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.707149][ T8777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.768601][ T8777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.809583][ T8777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.854815][ T8855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.891879][ T8855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.913024][ T8855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.951455][ T8855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.041812][ T9041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.045382][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.064820][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.082409][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.089652][ T7902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.124320][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.131768][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.154807][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 153.166426][ T9041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.172582][ T9044] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 153.213848][ T5843] Bluetooth: hci3: command tx timeout [ 153.229706][ T9046] netlink: 'syz.4.926': attribute type 4 has an invalid length. [ 153.277706][ T8777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.377677][ T5843] Bluetooth: hci2: command tx timeout [ 153.471092][ T9050] ebtables: ebtables: counters copy to user failed while replacing table [ 153.557020][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.647084][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.725171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.732328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.747223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.754435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.793119][ T8855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.825097][ T8855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.871334][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.964928][ T9079] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 153.987797][ T8777] veth0_vlan: entered promiscuous mode [ 153.999708][ T8777] veth1_vlan: entered promiscuous mode [ 154.023063][ T8777] veth0_macvtap: entered promiscuous mode [ 154.032493][ T8777] veth1_macvtap: entered promiscuous mode [ 154.048808][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.059767][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.069930][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.080666][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.091008][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.101950][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.115101][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.124821][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.135334][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.145507][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.156004][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.166202][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.177218][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.188308][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.198274][ T8777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.207308][ T8777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.216541][ T8777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.225529][ T8777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.379246][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.485128][ T7448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.493006][ T7448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.577335][ T9098] raw_sendmsg: syz.4.939 forgot to set AF_INET. Fix it! [ 154.721919][ T9105] netlink: 'syz.2.941': attribute type 32 has an invalid length. [ 154.747767][ T9105] netlink: 1344 bytes leftover after parsing attributes in process `syz.2.941'. [ 154.762278][ T8855] veth0_vlan: entered promiscuous mode [ 154.788104][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.796101][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.845083][ T8855] veth1_vlan: entered promiscuous mode [ 154.940855][ T8855] veth0_macvtap: entered promiscuous mode [ 154.958535][ T8855] veth1_macvtap: entered promiscuous mode [ 155.027933][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.073719][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.080472][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 155.091420][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.104780][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.115202][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.126229][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.141191][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.162166][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.186563][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.293720][ T5843] Bluetooth: hci3: command tx timeout [ 155.482682][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.502362][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.534896][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.573228][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.599853][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.623869][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.644789][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.671826][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.689636][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.749198][ T8855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.773353][ T8855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.782127][ T8855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.800627][ T8855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.986735][ T9121] ebt_among: src integrity fail: 300 [ 156.031929][ T7902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.032774][ T7895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.040406][ T7902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.094398][ T7895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.560527][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.955566][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.981427][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.990736][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.006389][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.014202][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.022082][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.045478][ T9148] team_slave_0: entered promiscuous mode [ 157.051421][ T9148] team_slave_1: entered promiscuous mode [ 157.088810][ T9148] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 157.180398][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 157.230690][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 157.231866][ T9164] FAULT_INJECTION: forcing a failure. [ 157.231866][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.261046][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.4.961 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 157.271695][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.281774][ T9164] Call Trace: [ 157.285060][ T9164] [ 157.287993][ T9164] dump_stack_lvl+0x241/0x360 [ 157.292716][ T9164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.297937][ T9164] ? __pfx__printk+0x10/0x10 [ 157.302549][ T9164] should_fail_ex+0x3b0/0x4e0 [ 157.307253][ T9164] _copy_from_user+0x2f/0xc0 [ 157.311898][ T9164] move_addr_to_kernel+0x82/0x150 [ 157.316926][ T9164] __sys_sendto+0x268/0x4c0 [ 157.321439][ T9164] ? __pfx___sys_sendto+0x10/0x10 [ 157.326458][ T9164] ? __mutex_unlock_slowpath+0x21e/0x790 [ 157.332103][ T9164] ? __fget_files+0x2a/0x410 [ 157.336700][ T9164] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.342770][ T9164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.349107][ T9164] __x64_sys_sendto+0xde/0x100 [ 157.353883][ T9164] do_syscall_64+0xf3/0x230 [ 157.358391][ T9164] ? clear_bhb_loop+0x35/0x90 [ 157.363070][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.368984][ T9164] RIP: 0033:0x7fd760f85d29 [ 157.373402][ T9164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.393103][ T9164] RSP: 002b:00007fd761cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.401522][ T9164] RAX: ffffffffffffffda RBX: 00007fd761175fa0 RCX: 00007fd760f85d29 [ 157.409497][ T9164] RDX: 000000000000fce0 RSI: 00000000200002c0 RDI: 0000000000000003 [ 157.417473][ T9164] RBP: 00007fd761cda090 R08: 0000000020000140 R09: 0000000000000014 [ 157.425528][ T9164] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 157.433496][ T9164] R13: 0000000000000000 R14: 00007fd761175fa0 R15: 00007ffc57bf4d58 [ 157.441481][ T9164] [ 157.775438][ T9149] chnl_net:caif_netlink_parms(): no params data found [ 157.849644][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.857334][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.865045][ T9149] bridge_slave_0: entered allmulticast mode [ 157.871686][ T9149] bridge_slave_0: entered promiscuous mode [ 157.882511][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.889987][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.898220][ T9149] bridge_slave_1: entered allmulticast mode [ 157.905469][ T9149] bridge_slave_1: entered promiscuous mode [ 157.934057][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.946062][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.990609][ T9149] team0: Port device team_slave_0 added [ 158.022263][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.106738][ T9149] team0: Port device team_slave_1 added [ 158.388262][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.454793][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 158.458618][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.476371][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.485978][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.499417][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.513040][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.521875][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.580759][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 158.617449][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.630742][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.680086][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.748285][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.792359][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.805446][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.851941][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.887600][ T9204] sctp: [Deprecated]: syz.0.969 (pid 9204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.887600][ T9204] Use struct sctp_sack_info instead [ 159.044711][ T9149] hsr_slave_0: entered promiscuous mode [ 159.054597][ T5144] Bluetooth: hci2: command tx timeout [ 159.068252][ T9149] hsr_slave_1: entered promiscuous mode [ 159.081697][ T9149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.132371][ T9149] Cannot create hsr debugfs directory [ 159.248129][ T9221] FAULT_INJECTION: forcing a failure. [ 159.248129][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.262071][ T9221] CPU: 1 UID: 0 PID: 9221 Comm: syz.0.975 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 159.272698][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.282839][ T9221] Call Trace: [ 159.286146][ T9221] [ 159.289098][ T9221] dump_stack_lvl+0x241/0x360 [ 159.293808][ T9221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.299045][ T9221] ? __pfx__printk+0x10/0x10 [ 159.303666][ T9221] ? __pfx_lock_release+0x10/0x10 [ 159.308713][ T9221] should_fail_ex+0x3b0/0x4e0 [ 159.313418][ T9221] _copy_from_iter+0x1e9/0x1c20 [ 159.318282][ T9221] ? __pfx__copy_from_iter+0x10/0x10 [ 159.323568][ T9221] ? __lock_acquire+0x1397/0x2100 [ 159.328597][ T9221] ? dev_get_by_index+0x23/0x2d0 [ 159.333549][ T9221] packet_sendmsg+0x3b38/0x6a40 [ 159.338404][ T9221] ? mark_lock+0x9a/0x360 [ 159.342748][ T9221] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 159.348141][ T9221] ? __pfx___might_resched+0x10/0x10 [ 159.353442][ T9221] ? __pfx_packet_sendmsg+0x10/0x10 [ 159.358644][ T9221] ? aa_sk_perm+0x96d/0xab0 [ 159.363158][ T9221] ? __pfx_aa_sk_perm+0x10/0x10 [ 159.368018][ T9221] ? __fget_files+0x2a/0x410 [ 159.372612][ T9221] ? aa_sock_msg_perm+0x91/0x160 [ 159.377551][ T9221] ? __pfx_packet_sendmsg+0x10/0x10 [ 159.382750][ T9221] __sock_sendmsg+0x221/0x270 [ 159.387435][ T9221] __sys_sendto+0x363/0x4c0 [ 159.391937][ T9221] ? __pfx___sys_sendto+0x10/0x10 [ 159.396960][ T9221] ? __mutex_unlock_slowpath+0x21e/0x790 [ 159.402604][ T9221] ? __fget_files+0x2a/0x410 [ 159.407201][ T9221] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.413179][ T9221] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.419509][ T9221] __x64_sys_sendto+0xde/0x100 [ 159.424274][ T9221] do_syscall_64+0xf3/0x230 [ 159.428780][ T9221] ? clear_bhb_loop+0x35/0x90 [ 159.433455][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.439351][ T9221] RIP: 0033:0x7f637a185d29 [ 159.443764][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.463544][ T9221] RSP: 002b:00007f637b0a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 159.471981][ T9221] RAX: ffffffffffffffda RBX: 00007f637a375fa0 RCX: 00007f637a185d29 [ 159.479951][ T9221] RDX: 000000000000fce0 RSI: 00000000200002c0 RDI: 0000000000000003 [ 159.488015][ T9221] RBP: 00007f637b0a6090 R08: 0000000020000140 R09: 0000000000000014 [ 159.495985][ T9221] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 159.503957][ T9221] R13: 0000000000000000 R14: 00007f637a375fa0 R15: 00007fff8da3fde8 [ 159.511943][ T9221] [ 159.956142][ T1149] bridge_slave_1: left allmulticast mode [ 159.984006][ T1149] bridge_slave_1: left promiscuous mode [ 159.990892][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.015603][ T1149] bridge_slave_0: left allmulticast mode [ 160.023024][ T1149] bridge_slave_0: left promiscuous mode [ 160.034820][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.501286][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.512446][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.524287][ T1149] bond0 (unregistering): Released all slaves [ 160.584121][ T5144] Bluetooth: hci3: command tx timeout [ 160.597369][ T9248] ipvlan0: entered promiscuous mode [ 160.613877][ T9248] ipvlan0: entered allmulticast mode [ 160.619225][ T9248] veth0_vlan: entered allmulticast mode [ 160.742130][ T9258] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 160.836201][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.984'. [ 160.845825][ T9261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.984'. [ 161.128282][ T9191] chnl_net:caif_netlink_parms(): no params data found [ 161.136051][ T5144] Bluetooth: hci2: command tx timeout [ 161.395977][ T1149] hsr_slave_0: left promiscuous mode [ 161.421420][ T1149] hsr_slave_1: left promiscuous mode [ 161.432884][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.449601][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.474713][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.489147][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.541317][ T1149] veth1_macvtap: left promiscuous mode [ 161.547687][ T1149] veth0_macvtap: left promiscuous mode [ 161.553384][ T1149] veth1_vlan: left promiscuous mode [ 161.558797][ T1149] veth0_vlan: left promiscuous mode [ 162.141064][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 162.191340][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 162.225451][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 162.654140][ T5144] Bluetooth: hci3: command tx timeout [ 162.654339][ T9282] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.669935][ T9286] veth0: entered promiscuous mode [ 162.757095][ T9285] veth0: left promiscuous mode [ 162.805745][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.843972][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.851265][ T9191] bridge_slave_0: entered allmulticast mode [ 162.873939][ T9191] bridge_slave_0: entered promiscuous mode [ 162.933043][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.953663][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.963262][ T9191] bridge_slave_1: entered allmulticast mode [ 162.971139][ T9191] bridge_slave_1: entered promiscuous mode [ 163.025163][ T9149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.036112][ T9149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.060075][ T9149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.075202][ T9149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.100183][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.195240][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.215470][ T5144] Bluetooth: hci2: command tx timeout [ 163.249073][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.372403][ T9191] team0: Port device team_slave_0 added [ 163.433146][ T9191] team0: Port device team_slave_1 added [ 163.441697][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 163.635965][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.642974][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.701173][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.714580][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 163.742430][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.757694][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.796597][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.886030][ T7448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.911182][ T9327] netlink: 'syz.4.1001': attribute type 2 has an invalid length. [ 163.947973][ T9191] hsr_slave_0: entered promiscuous mode [ 163.971110][ T9191] hsr_slave_1: entered promiscuous mode [ 163.990560][ T9191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.999805][ T9191] Cannot create hsr debugfs directory [ 164.018140][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.085088][ T7448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.241795][ T7448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.278699][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.425845][ T7448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.450960][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.458143][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.515273][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.522431][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.734152][ T5144] Bluetooth: hci3: command tx timeout [ 164.845243][ T7448] bridge_slave_1: left allmulticast mode [ 164.850985][ T7448] bridge_slave_1: left promiscuous mode [ 164.858689][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.870609][ T7448] bridge_slave_0: left allmulticast mode [ 164.878128][ T7448] bridge_slave_0: left promiscuous mode [ 164.884368][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.294519][ T5144] Bluetooth: hci2: command tx timeout [ 165.388644][ T7448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.399803][ T7448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.410215][ T7448] bond0 (unregistering): Released all slaves [ 165.611822][ T9388] netlink: 'syz.0.1015': attribute type 3 has an invalid length. [ 165.936943][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.060678][ T9149] veth0_vlan: entered promiscuous mode [ 166.086026][ T9149] veth1_vlan: entered promiscuous mode [ 166.134833][ T9402] pimreg3: entered allmulticast mode [ 166.147132][ T9149] veth0_macvtap: entered promiscuous mode [ 166.179691][ T9149] veth1_macvtap: entered promiscuous mode [ 166.242526][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.255201][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.265553][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.276117][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.286024][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.297031][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.307005][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.317498][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.328837][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.353432][ T9191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.388158][ T9407] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 166.399565][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 166.452115][ T9409] tc_dump_action: action bad kind [ 166.568698][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.581344][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.615070][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.636942][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.651474][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.666363][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.684044][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.708658][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.744643][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.752035][ T9191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.801772][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 166.824364][ T5144] Bluetooth: hci3: command tx timeout [ 166.852145][ T7448] hsr_slave_0: left promiscuous mode [ 166.858319][ T7448] hsr_slave_1: left promiscuous mode [ 166.876307][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.884394][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.892350][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.904627][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.928034][ T7448] veth1_macvtap: left promiscuous mode [ 166.934167][ T7448] veth0_macvtap: left promiscuous mode [ 166.939862][ T7448] veth1_vlan: left promiscuous mode [ 166.945727][ T7448] veth0_vlan: left promiscuous mode [ 167.428734][ T7448] team0 (unregistering): Port device team_slave_1 removed [ 167.482779][ T7448] team0 (unregistering): Port device team_slave_0 removed [ 167.960465][ T9149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.970246][ T9149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.980447][ T9149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.989690][ T9149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.001680][ T9191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.095998][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 168.123226][ T9191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.303266][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 168.379962][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 168.484222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.512710][ T9435] x_tables: duplicate underflow at hook 2 [ 168.523522][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.535397][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.632680][ T9191] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.719272][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.726458][ T7895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.735775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.766598][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.771498][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.773756][ T7895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.381970][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.405786][ T9476] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1040'. [ 169.592059][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.640585][ T9486] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 169.660974][ T9486] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 169.726467][ T9191] veth0_vlan: entered promiscuous mode [ 169.729356][ T9490] openvswitch: netlink: IP tunnel dst address not specified [ 169.750592][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.780228][ T9191] veth1_vlan: entered promiscuous mode [ 169.797252][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.817502][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.843948][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.888314][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.919592][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 169.935086][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.946896][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 169.985408][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.016201][ T9486] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 170.102040][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.143863][ T9501] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1045'. [ 170.158514][ T9191] veth0_macvtap: entered promiscuous mode [ 170.161200][ T9501] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1045'. [ 170.190846][ T9191] veth1_macvtap: entered promiscuous mode [ 170.200496][ T9501] netlink: 'syz.4.1045': attribute type 5 has an invalid length. [ 170.218530][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.218648][ T9506] netlink: 'syz.4.1045': attribute type 12 has an invalid length. [ 170.227940][ T9501] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1045'. [ 170.246049][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.256457][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.265564][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.273185][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.280950][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.287659][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.297839][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.353911][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.382830][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.394593][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.406600][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.419224][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.438400][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.451961][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.469264][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.510231][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.521147][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 170.531506][ T25] IPVS: starting estimator thread 0... [ 170.548468][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.572578][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.592573][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.613939][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.628709][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.639912][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.643783][ T9516] IPVS: using max 24 ests per chain, 57600 per kthread [ 170.651043][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.670258][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.684236][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 170.714009][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.745400][ T9521] batadv1: entered promiscuous mode [ 170.765751][ T9521] team0: Port device batadv1 added [ 170.775841][ T9191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.813434][ T9191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.822271][ T9191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.841639][ T9191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.026012][ T9529] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 171.104997][ T52] bridge_slave_1: left allmulticast mode [ 171.124045][ T52] bridge_slave_1: left promiscuous mode [ 171.129832][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.203474][ T52] bridge_slave_0: left allmulticast mode [ 171.209784][ T52] bridge_slave_0: left promiscuous mode [ 171.244482][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.969568][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.981366][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.992191][ T52] bond0 (unregistering): Released all slaves [ 172.056807][ T9551] bridge0: entered promiscuous mode [ 172.062663][ T9551] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.190733][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 172.333908][ T5843] Bluetooth: hci2: command tx timeout [ 172.351234][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 172.363243][ T7897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.371493][ T7897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.435247][ T9560] gretap1: entered allmulticast mode [ 172.447314][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 172.529575][ T9567] openvswitch: netlink: Missing key (keys=40, expected=80) [ 172.561736][ T9569] tipc: Can't bind to reserved service type 1 [ 172.580531][ T9565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 172.591655][ T9565] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 172.603519][ T9565] gretap3: entered promiscuous mode [ 172.610587][ T9565] gretap3: entered allmulticast mode [ 172.652862][ T7897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.666011][ T7897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.838439][ T52] hsr_slave_0: left promiscuous mode [ 172.854859][ T52] hsr_slave_1: left promiscuous mode [ 172.861304][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.876391][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.889202][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.897634][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.920780][ T52] veth1_macvtap: left promiscuous mode [ 172.927177][ T52] veth0_macvtap: left promiscuous mode [ 172.932754][ T52] veth1_vlan: left promiscuous mode [ 172.938780][ T52] veth0_vlan: left promiscuous mode [ 173.540517][ T9585] xt_connbytes: Forcing CT accounting to be enabled [ 173.562402][ T9585] --map-set only usable from mangle table [ 173.666348][ T52] team0 (unregistering): Port device team_slave_1 removed [ 173.719774][ T52] team0 (unregistering): Port device team_slave_0 removed [ 174.272952][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 174.412461][ T9592] ieee802154 phy0 wpan0: encryption failed: -90 [ 174.414458][ T5843] Bluetooth: hci2: command tx timeout [ 174.614441][ T9603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.633994][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.641175][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.664218][ T9504] bridge_slave_0: entered allmulticast mode [ 174.685147][ T9504] bridge_slave_0: entered promiscuous mode [ 174.717707][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.733539][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.740876][ T9504] bridge_slave_1: entered allmulticast mode [ 174.748182][ T9504] bridge_slave_1: entered promiscuous mode [ 174.777684][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.790258][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.821430][ T9504] team0: Port device team_slave_0 added [ 174.829259][ T9504] team0: Port device team_slave_1 added [ 174.864262][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.902396][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.909747][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.936258][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.955420][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.962404][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.989571][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.020675][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.060644][ T9504] hsr_slave_0: entered promiscuous mode [ 175.071055][ T9504] hsr_slave_1: entered promiscuous mode [ 175.077578][ T9504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.085653][ T9504] Cannot create hsr debugfs directory [ 175.112317][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.198664][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.298550][ T9608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1075'. [ 175.527163][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 175.615506][ T52] bridge_slave_1: left allmulticast mode [ 175.624000][ T52] bridge_slave_1: left promiscuous mode [ 175.640485][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.662543][ T52] bridge_slave_0: left allmulticast mode [ 175.670850][ T52] bridge_slave_0: left promiscuous mode [ 175.684480][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.761939][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.776785][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.787210][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.807198][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.828473][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.848611][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.181238][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.199384][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.213911][ T52] bond0 (unregistering): Released all slaves [ 176.228037][ T9616] validate_nla: 3 callbacks suppressed [ 176.228060][ T9616] netlink: 'syz.4.1077': attribute type 21 has an invalid length. [ 176.494861][ T5144] Bluetooth: hci2: command tx timeout [ 176.567427][ T9635] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 176.786155][ T9504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.855362][ T9504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.888132][ T9504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.993641][ T9504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.053260][ T52] hsr_slave_0: left promiscuous mode [ 177.067421][ T52] hsr_slave_1: left promiscuous mode [ 177.087304][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.109479][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.139720][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.150262][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.216190][ T52] veth1_macvtap: left promiscuous mode [ 177.229224][ T52] veth0_macvtap: left promiscuous mode [ 177.242765][ T52] veth1_vlan: left promiscuous mode [ 177.253635][ T52] veth0_vlan: left promiscuous mode [ 177.569951][ T9666] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1090'. [ 177.933646][ T5144] Bluetooth: hci3: command tx timeout [ 178.038652][ T52] team0 (unregistering): Port device team_slave_1 removed [ 178.095167][ T52] team0 (unregistering): Port device team_slave_0 removed [ 178.572146][ T9655] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1090'. [ 178.582141][ T5144] Bluetooth: hci2: command tx timeout [ 178.721997][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.740637][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.858744][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.865890][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.885326][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.892496][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.953116][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 178.991077][ T9504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.065255][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 179.237100][ T9696] netlink: 'syz.2.1098': attribute type 9 has an invalid length. [ 179.249491][ T9696] netlink: 'syz.2.1098': attribute type 6 has an invalid length. [ 179.341150][ T9700] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1100'. [ 179.425521][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.432672][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.476304][ T9621] bridge_slave_0: entered allmulticast mode [ 179.483847][ T9621] bridge_slave_0: entered promiscuous mode [ 179.497434][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.506826][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.523773][ T9621] bridge_slave_1: entered allmulticast mode [ 179.554572][ T9621] bridge_slave_1: entered promiscuous mode [ 179.736993][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.759537][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.786370][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.893885][ T9621] team0: Port device team_slave_0 added [ 179.914143][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 179.917496][ T9729] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1107'. [ 179.935701][ T9621] team0: Port device team_slave_1 added [ 179.976022][ T9727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.986746][ T9727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.995456][ T9727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.002901][ T9727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.014852][ T5144] Bluetooth: hci3: command 0x041b tx timeout [ 180.059188][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.073453][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.133473][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.170081][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.203898][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.240227][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.290084][ T9739] netlink: 'syz.2.1109': attribute type 25 has an invalid length. [ 180.309370][ T9739] netlink: 'syz.2.1109': attribute type 7 has an invalid length. [ 180.329970][ T9504] veth0_vlan: entered promiscuous mode [ 180.383203][ T9504] veth1_vlan: entered promiscuous mode [ 180.428812][ T9621] hsr_slave_0: entered promiscuous mode [ 180.447927][ T9621] hsr_slave_1: entered promiscuous mode [ 180.464610][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.487713][ T9621] Cannot create hsr debugfs directory [ 180.704261][ T9504] veth0_macvtap: entered promiscuous mode [ 180.716676][ T9504] veth1_macvtap: entered promiscuous mode [ 180.729260][ T9756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1115'. [ 180.739291][ T9756] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1115'. [ 180.749266][ T9756] netlink: 'syz.2.1115': attribute type 5 has an invalid length. [ 180.757621][ T9756] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1115'. [ 180.816375][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.844647][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.884241][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.913788][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.924434][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 180.933681][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 180.946969][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.991464][ T9763] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.000722][ T9763] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.009874][ T9763] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.018751][ T9763] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.028883][ T9763] vxlan0: entered promiscuous mode [ 181.034691][ T9763] vxlan0: entered allmulticast mode [ 181.132040][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.173929][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.185354][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.202000][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.237121][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.292552][ T9504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.320101][ T9504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.348093][ T9504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.373688][ T9504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.515699][ T7897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.536260][ T7897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.590792][ T7900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.602264][ T7900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.666802][ T9621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.696585][ T9621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.716300][ T9621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.778349][ T9621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.903979][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.918219][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.937644][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.944847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.955282][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.962473][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.094849][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 182.256188][ T7900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.348683][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.455210][ T9809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.490018][ T7900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.530105][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.569553][ T7900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.621685][ T9621] veth0_vlan: entered promiscuous mode [ 182.635260][ T9621] veth1_vlan: entered promiscuous mode [ 182.669349][ T9621] veth0_macvtap: entered promiscuous mode [ 182.680575][ T9621] veth1_macvtap: entered promiscuous mode [ 182.696126][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.707274][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.717744][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.728357][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.742471][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.753548][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.774909][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.799889][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.811083][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.830858][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.881964][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.918156][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.967198][ T9621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.990001][ T9621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.010559][ T9621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.031461][ T9621] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.217302][ T7900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.511409][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.535729][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.546551][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.562540][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.581345][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 183.589686][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.632026][ T7900] bridge_slave_1: left allmulticast mode [ 183.638033][ T7895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.666691][ T7900] bridge_slave_1: left promiscuous mode [ 183.679742][ T7895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.693881][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.723592][ T7900] bridge_slave_0: left allmulticast mode [ 183.742763][ T7900] bridge_slave_0: left promiscuous mode [ 183.751402][ T9850] x_tables: duplicate underflow at hook 1 [ 183.757947][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.906988][ T9857] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1142'. [ 184.184670][ T5144] Bluetooth: hci3: command 0x041b tx timeout [ 184.229187][ T7900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.241063][ T7900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.252208][ T7900] bond0 (unregistering): Released all slaves [ 184.347127][ T7897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.363623][ T7897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.010378][ T9884] netlink: 'syz.0.1147': attribute type 29 has an invalid length. [ 185.032017][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1150'. [ 185.061901][ T9896] netlink: 'syz.4.1150': attribute type 7 has an invalid length. [ 185.104260][ T9896] netlink: 'syz.4.1150': attribute type 8 has an invalid length. [ 185.176166][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 185.184553][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 185.409713][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 185.498266][ T7900] hsr_slave_0: left promiscuous mode [ 185.534537][ T7900] hsr_slave_1: left promiscuous mode [ 185.550767][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.560299][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.574187][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.600848][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 185.610290][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.648010][ T7900] veth1_macvtap: left promiscuous mode [ 185.654600][ T7900] veth0_macvtap: left promiscuous mode [ 185.666059][ T7900] veth1_vlan: left promiscuous mode [ 185.678239][ T7900] veth0_vlan: left promiscuous mode [ 185.694683][ T5144] Bluetooth: hci2: command tx timeout [ 186.628951][ T7900] team0 (unregistering): Port device team_slave_1 removed [ 186.681044][ T7900] team0 (unregistering): Port device team_slave_0 removed [ 187.169551][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.188655][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.205801][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.237633][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.247199][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.255777][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.409538][ T12] smc: removing ib device syz1 [ 187.539147][ T9931] sit2: entered allmulticast mode [ 187.567243][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.575090][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.582333][ T9839] bridge_slave_0: entered allmulticast mode [ 187.590406][ T9839] bridge_slave_0: entered promiscuous mode [ 187.602019][ T5912] ================================================================== [ 187.610100][ T5912] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 187.618875][ T5912] Read of size 8 at addr ffff88807bf302e8 by task kworker/1:6/5912 [ 187.626753][ T5912] [ 187.629076][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: kworker/1:6 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 187.639821][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.649873][ T5912] Workqueue: events smc_ib_port_event_work [ 187.655697][ T5912] Call Trace: [ 187.658977][ T5912] [ 187.661894][ T5912] dump_stack_lvl+0x241/0x360 [ 187.666592][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.671778][ T5912] ? __pfx__printk+0x10/0x10 [ 187.676359][ T5912] ? _printk+0xd5/0x120 [ 187.680505][ T5912] ? __virt_addr_valid+0x183/0x530 [ 187.685623][ T5912] ? __virt_addr_valid+0x183/0x530 [ 187.690727][ T5912] print_report+0x169/0x550 [ 187.695237][ T5912] ? __virt_addr_valid+0x183/0x530 [ 187.700458][ T5912] ? __virt_addr_valid+0x183/0x530 [ 187.705578][ T5912] ? __virt_addr_valid+0x45f/0x530 [ 187.710693][ T5912] ? __phys_addr+0xba/0x170 [ 187.715193][ T5912] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 187.721168][ T5912] kasan_report+0x143/0x180 [ 187.725677][ T5912] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 187.731757][ T5912] __ethtool_get_link_ksettings+0x6e/0x190 [ 187.737565][ T5912] ib_get_eth_speed+0x160/0x800 [ 187.742421][ T5912] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 187.747795][ T5912] ? rxe_query_port+0x4f/0x260 [ 187.752565][ T5912] rxe_query_port+0x76/0x260 [ 187.757165][ T5912] ib_query_port+0x166/0x7d0 [ 187.761755][ T5912] smc_ib_port_event_work+0x14e/0xa50 [ 187.767133][ T5912] ? process_scheduled_works+0x976/0x1840 [ 187.772849][ T5912] process_scheduled_works+0xa66/0x1840 [ 187.778402][ T5912] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.784384][ T5912] ? assign_work+0x364/0x3d0 [ 187.789060][ T5912] worker_thread+0x870/0xd30 [ 187.793748][ T5912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 187.799644][ T5912] ? __kthread_parkme+0x169/0x1d0 [ 187.804674][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 187.809784][ T5912] kthread+0x2f0/0x390 [ 187.813850][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 187.818958][ T5912] ? __pfx_kthread+0x10/0x10 [ 187.823541][ T5912] ret_from_fork+0x4b/0x80 [ 187.827953][ T5912] ? __pfx_kthread+0x10/0x10 [ 187.832539][ T5912] ret_from_fork_asm+0x1a/0x30 [ 187.837303][ T5912] [ 187.840313][ T5912] [ 187.842623][ T5912] Allocated by task 5828: [ 187.846943][ T5912] kasan_save_track+0x3f/0x80 [ 187.851617][ T5912] __kasan_kmalloc+0x98/0xb0 [ 187.856201][ T5912] __kmalloc_node_noprof+0x290/0x4d0 [ 187.861482][ T5912] __kvmalloc_node_noprof+0x72/0x190 [ 187.866757][ T5912] alloc_netdev_mqs+0xa4/0x1080 [ 187.871607][ T5912] rtnl_create_link+0x2f9/0xc20 [ 187.876451][ T5912] rtnl_newlink_create+0x210/0xa40 [ 187.881563][ T5912] rtnl_newlink+0x1c7e/0x2210 [ 187.886235][ T5912] rtnetlink_rcv_msg+0x791/0xcf0 [ 187.891165][ T5912] netlink_rcv_skb+0x1e3/0x430 [ 187.895928][ T5912] netlink_unicast+0x7f6/0x990 [ 187.900699][ T5912] netlink_sendmsg+0x8e4/0xcb0 [ 187.905459][ T5912] __sock_sendmsg+0x221/0x270 [ 187.910133][ T5912] __sys_sendto+0x363/0x4c0 [ 187.914628][ T5912] __x64_sys_sendto+0xde/0x100 [ 187.919381][ T5912] do_syscall_64+0xf3/0x230 [ 187.923885][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.929780][ T5912] [ 187.932095][ T5912] Freed by task 9923: [ 187.936064][ T5912] kasan_save_track+0x3f/0x80 [ 187.940822][ T5912] kasan_save_free_info+0x40/0x50 [ 187.945855][ T5912] __kasan_slab_free+0x59/0x70 [ 187.950622][ T5912] kfree+0x196/0x430 [ 187.954516][ T5912] device_release+0x99/0x1c0 [ 187.959105][ T5912] kobject_put+0x22f/0x480 [ 187.963529][ T5912] netdev_run_todo+0xe79/0x1000 [ 187.968381][ T5912] rtnl_dellink+0x760/0x8d0 [ 187.972876][ T5912] rtnetlink_rcv_msg+0x791/0xcf0 [ 187.977812][ T5912] netlink_rcv_skb+0x1e3/0x430 [ 187.982652][ T5912] netlink_unicast+0x7f6/0x990 [ 187.987411][ T5912] netlink_sendmsg+0x8e4/0xcb0 [ 187.992177][ T5912] __sock_sendmsg+0x221/0x270 [ 187.997376][ T5912] ____sys_sendmsg+0x52a/0x7e0 [ 188.002140][ T5912] __sys_sendmsg+0x269/0x350 [ 188.006733][ T5912] do_syscall_64+0xf3/0x230 [ 188.011232][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.017122][ T5912] [ 188.019436][ T5912] The buggy address belongs to the object at ffff88807bf30000 [ 188.019436][ T5912] which belongs to the cache kmalloc-cg-4k of size 4096 [ 188.033742][ T5912] The buggy address is located 744 bytes inside of [ 188.033742][ T5912] freed 4096-byte region [ffff88807bf30000, ffff88807bf31000) [ 188.047645][ T5912] [ 188.049960][ T5912] The buggy address belongs to the physical page: [ 188.056371][ T5912] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bf30 [ 188.065124][ T5912] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 188.073615][ T5912] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 188.081158][ T5912] page_type: f5(slab) [ 188.085130][ T5912] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 188.093706][ T5912] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 188.102285][ T5912] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 188.110952][ T5912] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 188.119638][ T5912] head: 00fff00000000003 ffffea0001efcc01 ffffffffffffffff 0000000000000000 [ 188.128304][ T5912] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 188.136982][ T5912] page dumped because: kasan: bad access detected [ 188.143420][ T5912] page_owner tracks the page as allocated [ 188.149153][ T5912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 72056942954, free_ts 72041558975 [ 188.172255][ T5912] post_alloc_hook+0x1f3/0x230 [ 188.177060][ T5912] get_page_from_freelist+0x365c/0x37a0 [ 188.182601][ T5912] __alloc_pages_noprof+0x292/0x710 [ 188.187797][ T5912] alloc_pages_mpol_noprof+0x3e8/0x680 [ 188.193257][ T5912] alloc_slab_page+0x6a/0x110 [ 188.197933][ T5912] allocate_slab+0x5a/0x2b0 [ 188.202427][ T5912] ___slab_alloc+0xc27/0x14a0 [ 188.207107][ T5912] __slab_alloc+0x58/0xa0 [ 188.211487][ T5912] __kmalloc_node_noprof+0x2ee/0x4d0 [ 188.216775][ T5912] __kvmalloc_node_noprof+0x72/0x190 [ 188.222051][ T5912] alloc_netdev_mqs+0xa4/0x1080 [ 188.226901][ T5912] rtnl_create_link+0x2f9/0xc20 [ 188.231751][ T5912] rtnl_newlink_create+0x210/0xa40 [ 188.236866][ T5912] rtnl_newlink+0x1c7e/0x2210 [ 188.241552][ T5912] rtnetlink_rcv_msg+0x791/0xcf0 [ 188.246484][ T5912] netlink_rcv_skb+0x1e3/0x430 [ 188.251248][ T5912] page last free pid 5832 tgid 5832 stack trace: [ 188.257563][ T5912] free_unref_page+0xd3f/0x1010 [ 188.262419][ T5912] __slab_free+0x2c2/0x380 [ 188.266847][ T5912] qlist_free_all+0x9a/0x140 [ 188.271479][ T5912] kasan_quarantine_reduce+0x14f/0x170 [ 188.276937][ T5912] __kasan_slab_alloc+0x23/0x80 [ 188.281879][ T5912] __kmalloc_cache_noprof+0x1d9/0x390 [ 188.287245][ T5912] netdevice_event+0x37d/0x950 [ 188.291999][ T5912] notifier_call_chain+0x1a5/0x3f0 [ 188.297107][ T5912] __netdev_upper_dev_link+0x4c3/0x670 [ 188.302565][ T5912] netdev_upper_dev_link+0x9e/0xf0 [ 188.307716][ T5912] virt_wifi_newlink+0x3f4/0x7c0 [ 188.312671][ T5912] rtnl_newlink_create+0x2ee/0xa40 [ 188.317781][ T5912] rtnl_newlink+0x1c7e/0x2210 [ 188.322452][ T5912] rtnetlink_rcv_msg+0x791/0xcf0 [ 188.327385][ T5912] netlink_rcv_skb+0x1e3/0x430 [ 188.332227][ T5912] netlink_unicast+0x7f6/0x990 [ 188.336990][ T5912] [ 188.339303][ T5912] Memory state around the buggy address: [ 188.344926][ T5912] ffff88807bf30180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.352987][ T5912] ffff88807bf30200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.361040][ T5912] >ffff88807bf30280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.369146][ T5912] ^ [ 188.376595][ T5912] ffff88807bf30300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.384736][ T5912] ffff88807bf30380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.392784][ T5912] ================================================================== [ 188.415706][ T5843] Bluetooth: hci2: command tx timeout [ 188.448440][ T5912] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 188.455674][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: kworker/1:6 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 188.466451][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.476532][ T5912] Workqueue: events smc_ib_port_event_work [ 188.482373][ T5912] Call Trace: [ 188.485663][ T5912] [ 188.488601][ T5912] dump_stack_lvl+0x241/0x360 [ 188.493293][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.498519][ T5912] ? __pfx__printk+0x10/0x10 [ 188.503145][ T5912] ? preempt_schedule+0xe1/0xf0 [ 188.508020][ T5912] ? vscnprintf+0x5d/0x90 [ 188.512369][ T5912] panic+0x349/0x880 [ 188.516283][ T5912] ? check_panic_on_warn+0x21/0xb0 [ 188.521410][ T5912] ? __pfx_panic+0x10/0x10 [ 188.525843][ T5912] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 188.531824][ T5912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.538152][ T5912] ? print_report+0x502/0x550 [ 188.542829][ T5912] check_panic_on_warn+0x86/0xb0 [ 188.547768][ T5912] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 188.553746][ T5912] end_report+0x77/0x160 [ 188.557987][ T5912] kasan_report+0x154/0x180 [ 188.562520][ T5912] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 188.568505][ T5912] __ethtool_get_link_ksettings+0x6e/0x190 [ 188.574310][ T5912] ib_get_eth_speed+0x160/0x800 [ 188.579157][ T5912] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 188.584528][ T5912] ? rxe_query_port+0x4f/0x260 [ 188.589297][ T5912] rxe_query_port+0x76/0x260 [ 188.593888][ T5912] ib_query_port+0x166/0x7d0 [ 188.598476][ T5912] smc_ib_port_event_work+0x14e/0xa50 [ 188.603849][ T5912] ? process_scheduled_works+0x976/0x1840 [ 188.609571][ T5912] process_scheduled_works+0xa66/0x1840 [ 188.615128][ T5912] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.621110][ T5912] ? assign_work+0x364/0x3d0 [ 188.625698][ T5912] worker_thread+0x870/0xd30 [ 188.630283][ T5912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 188.636182][ T5912] ? __kthread_parkme+0x169/0x1d0 [ 188.641205][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 188.646311][ T5912] kthread+0x2f0/0x390 [ 188.650378][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 188.655483][ T5912] ? __pfx_kthread+0x10/0x10 [ 188.660072][ T5912] ret_from_fork+0x4b/0x80 [ 188.664488][ T5912] ? __pfx_kthread+0x10/0x10 [ 188.669075][ T5912] ret_from_fork_asm+0x1a/0x30 [ 188.673837][ T5912] [ 188.677139][ T5912] Kernel Offset: disabled [ 188.681459][ T5912] Rebooting in 86400 seconds..