last executing test programs: 36.911434487s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 36.911414409s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 34.620968249s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 24.832487238s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 14.554191725s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 5.820383426s ago: executing program 1 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0x490, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private0, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xe74c, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8f}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x982f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3726}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x41}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x513}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x29}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfe35}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x40844}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000d80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c0000000206010200000000000000000a00000605000400030000000900020033797a317d000000000c0007800500150005000000100003006269746d61703a706f59740016000300686173683a6e65742c706f72742c6e65740000002de8b1697bc3deea250d68bdfb02afeeb719318fdd0ef6e7e7a45e8e3a044c42b1b1bd8f03f27a1eb56aaeb4d672d7e855d1fc37622ff64842d200"/162], 0x5c}, 0x1, 0x0, 0x0, 0x24000009}, 0x20000001) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x59a}]}]}, 0x28}}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x30}}, 0x4040090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a94000000020a01020000000000000000030000050c00044000000000000000040900010073797a31000000000c0004400000000000000004080002400000000149000600b7b0c6730529660791302b5aef6e2fe6da9f5f970dc544c4ccc9c4b668d7905e9edf41e287dd1b04e1dbdcb549b4111638684fc632108802bbe87781dbaa95e166964b5b8a000000fbfe024000000000140000001100010000000000000000000a00000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4840}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000dc0)={{0xa, 0x4e22, 0x8, @remote, 0x4}, {0xa, 0x4e23, 0x8, @mcast1, 0x80}, 0x1, {[0x0, 0x7, 0x7, 0xae3e, 0xf, 0x8, 0x5, 0x10000]}}, 0x5c) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2, r4}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000540), 0x0, 0x80, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00002dbd7000fddbdf2508000000300001801400040000000000000000000000ffffffffffff080006003c0000000800060000000000060005004e220000080004007a0000000800040005000000bae614c999a12f87c92987"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004095) socket$nl_route(0x10, 0x3, 0x0) 5.570217412s ago: executing program 0 (id=1598): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x7, 0x810, r0, 0x0) 3.523459628s ago: executing program 1 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x10, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0xfffffffffffffc53, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 3.316679955s ago: executing program 3 (id=2654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) 3.123331076s ago: executing program 3 (id=2656): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010067726574617000003400028008000100", @ANYRES32=0x0, @ANYBLOB="08000700e000000106000200"], 0x64}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)={0xe0c, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x8}, 0x6d, 0x1, 0x7, 0x0, 0x27, 'syz0\x00', "c4195e39b752befa0a2a8e43e1ac0b356b5f1179cef225c692a7060d57188bde", "238c450ae7c03c24a1868d7ddf5744f2029b544ba96cd8980246c4a2efcae511", [{0x8001, 0x4, {0x2, 0x6}}, {0x1, 0x4f2, {0x1, 0x4}}, {0x9, 0x4, {0x1, 0x5}}, {0x1ff, 0x5, {0x0, 0x3}}, {0x8, 0x9, {0x2, 0x1}}, {0x2, 0x4, {0x3, 0x1}}, {0x8, 0x0, {0x3, 0x5}}, {0x6, 0x2000, {0x2, 0xa}}, {0x8, 0x9, {0x1, 0xfffffffb}}, {0x9b77, 0x5b, {0x1, 0x6}}, {0x0, 0x6, {0x3, 0xfffffff7}}, {0x7, 0x200, {0x1, 0x1}}, {0x891, 0x8001, {0x2, 0x10}}, {0x3, 0xfff8, {0x3, 0x80000001}}, {0x3, 0x8, {0x2, 0x4}}, {0x699f, 0x7, {0x3, 0x1}}, {0x0, 0xf9c4, {0x3, 0x80000001}}, {0x7, 0xdab, {0x0, 0x7}}, {0x470, 0x5, {0x1, 0x10}}, {0xe, 0x6791, {0x0, 0x5}}, {0xa, 0x800, {0x0, 0x6}}, {0x8, 0x2b8, {0x0, 0xffffff90}}, {0x5, 0x100, {0x1, 0xffffffff}}, {0x0, 0x8, {0x1, 0x6}}, {0x2a29, 0x2, {0x3, 0x4}}, {0x9, 0x0, {0x0, 0xe}}, {0x401, 0x3, {0x1, 0x1}}, {0xed, 0x5, {0x0, 0x100}}, {0x4, 0x1, {0x3, 0x9}}, {0x6, 0x616e, {0x1}}, {0x7, 0x7fff, {0x3, 0x4}}, {0x3, 0x5fc, {0x2, 0x7ff}}, {0x0, 0x5, {0x3, 0x4}}, {0x3, 0x8001, {0x1, 0x5}}, {0x0, 0x23e9, {0x2, 0x7fffffff}}, {0xe, 0x9, {0x2, 0x80000001}}, {0x8, 0x6000, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0xd7}}, {0x1, 0x4a22, {0x0, 0x67}}, {0x6a13, 0x5, {0x0, 0x200}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xde, 0x6, 0x5, 0xff, 0x0, 'syz0\x00', "2dcdbfa1dc623f98a6764af06e84d6eb4dce0ea06624041cadcd34aded068beb", "19786177b2ff6a627687b9abbfbee57b0ed722f7fb282886a3d0a0bdd7ad485b", [{0xffff, 0x2, {0x2, 0x7}}, {0x1, 0x1, {0x1, 0x9}}, {0xc45, 0x6217, {0x2, 0x424}}, {0x0, 0x6, {0x1, 0x3}}, {0x2fc, 0x2, {0x0, 0x4}}, {0xf800, 0x0, {0x1, 0x807}}, {0x1, 0x2, {0x0, 0x9}}, {0x8, 0x91, {0x3, 0x91e}}, {0xb89, 0xfff8, {0x1, 0x8f}}, {0x3, 0x3, {0x3, 0x7ff}}, {0x39aa, 0x95dc, {0x0, 0x10000}}, {0xa, 0x13fe, {0x1, 0x200}}, {0xe, 0x100, {0x3, 0x34eb}}, {0x5, 0x7, {0x0, 0x8782}}, {0x0, 0x2, {0x0, 0x80}}, {0x5, 0x0, {0x1, 0x2}}, {0x1, 0x52, {0x0, 0x80000000}}, {0xaa54, 0x3, {0x3, 0x1}}, {0x2bf4, 0xc17, {0x2, 0x2}}, {0x5, 0xffff, {0x0, 0x7a24}}, {0x4, 0x4, {0x1, 0x6edcc8c9}}, {0x3, 0x1, {0x0, 0x7fffffff}}, {0x400, 0x3800, {0x0, 0xfffffffa}}, {0x80, 0xffff, {0x3, 0x1}}, {0xc, 0x7, {0x2, 0x6a3}}, {0x5, 0x8, {0x3, 0x7}}, {0x401, 0x0, {0x1, 0x3}}, {0x9, 0xfcb8, {0x2, 0xfffffffe}}, {0x9085, 0x5, {0x1, 0x6}}, {0xc, 0xfffc, {0x2, 0x2}}, {0x9, 0x400, {0x2, 0x4}}, {0x9, 0x7, {0x3, 0xfffffffe}}, {0x2, 0x8, {0x2, 0x10000}}, {0xaac, 0x4f, {0x2, 0xe686}}, {0x5, 0x1, {0x2, 0x7}}, {0x3, 0xa, {0x3, 0xdf}}, {0x4, 0x6, {0x0, 0xd}}, {0x7, 0x8f5, {0x0, 0x10000}}, {0x8000, 0x3, {0x1, 0x5}}, {0xe, 0xfffd, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x8, 0x4, 0xff, 0x5, 0x1b, 'syz0\x00', "e0003d4cc51435114774ff79052b56227581a8e718d0747b14c6909556bc58fd", "b88e4702de068315b445c05f1f39c35cc8704be1bc5b633a360c5aff12e903f1", [{0x5, 0x1, {0x6289c13054ed6544, 0x9}}, {0x1, 0x77, {0x1, 0x1}}, {0xa03, 0x3b, {0x1, 0x101}}, {0x3, 0x7, {0x2, 0x4}}, {0x3b, 0x7ff, {0x3, 0x10000}}, {0x3, 0x6, {0x2, 0x3}}, {0x7, 0x9, {0x1, 0x4}}, {0x6, 0x1, {0x2, 0x1d9}}, {0x6, 0x4, {0x3, 0x2}}, {0xd, 0x8, {0x0, 0x80000000}}, {0xff, 0x6, {0x0, 0x1}}, {0xeae0, 0x1000, {0x0, 0x4}}, {0x8, 0x0, {0x3, 0xffffffff}}, {0x6, 0x0, {0x2, 0x4}}, {0x7, 0x10, {0x3, 0x7}}, {0x1a, 0x9, {0x2, 0x2}}, {0xfff9, 0x6, {0x0, 0x5}}, {0x0, 0x0, {0x0, 0xfff}}, {0x5, 0x8000, {0x1}}, {0x8, 0x6, {0x2, 0x8}}, {0x9, 0xcc, {0x1, 0x1}}, {0x2, 0x4, {0x3, 0x2}}, {0x7, 0x2, {0x0, 0x631}}, {0x7842, 0x50c, {0x3, 0x1}}, {0x3c9e, 0x6, {0x3, 0x2}}, {0x5, 0x1, {0x1, 0xffffffc0}}, {0x8, 0x5, {0x2, 0x1000}}, {0x1fe, 0xfff8, {0x3, 0x2}}, {0xf001, 0x200, {0x2, 0x2e39}}, {0x3, 0x4, {0x3, 0x6}}, {0x2, 0x2, {0x1, 0x8}}, {0x9, 0x8, {0x2}}, {0x9, 0x1ff, {0x2, 0x81}}, {0x7, 0x2, {0x3, 0xfffffffd}}, {0x0, 0x7f, {0x2, 0x7fff}}, {0x0, 0x8, {0x2, 0xfffffa24}}, {0x55e8, 0x9, {0x1, 0x4}}, {0x6, 0x5, {0x3, 0x8000}}, {0x9, 0x0, {0x2, 0x9}}, {0x100, 0xf, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x68d}, 0x8, 0x3, 0x4, 0x80, 0xd, 'syz0\x00', "db05365082fabe2187a367420a4df84148252cf1f94969cead38605563f5c4ea", "21dd01355ada9d126624b7aba5a6399f1c7ce9e6c7e4373a728a1f41d98e80c2", [{0x0, 0x4, {0x2, 0xffffffff}}, {0x22, 0x200, {0x3, 0x75}}, {0x9, 0xe, {0x1, 0x8}}, {0xfff8, 0x0, {0x3, 0x6}}, {0x0, 0xff37, {0x2, 0x7}}, {0x1, 0x621, {0x1, 0x8}}, {0x4, 0x81, {0x2, 0x6}}, {0xfb60, 0x6, {0x2, 0x3}}, {0x0, 0x7f, {0x1, 0x78}}, {0x6, 0x6, {0x2, 0x657f8dd9}}, {0x0, 0x8, {0x0, 0x5}}, {0x9, 0x7, {0x2, 0x9}}, {0x8, 0x40, {0x3, 0x7}}, {0x4, 0xb1df, {0x1}}, {0xd, 0xf9, {0x2, 0xfffffffd}}, {0x6, 0x2, {0x0, 0xd}}, {0x6, 0x7, {0x2, 0x8}}, {0x7, 0x5fff, {0x1, 0x9}}, {0x30, 0x76ab, {0x1, 0x2}}, {0x6, 0x6, {0x3, 0xfffffff7}}, {0x7, 0x96, {0x2, 0x5}}, {0x4, 0x0, {0x2, 0xac}}, {0x101, 0x401, {0x2, 0x800000}}, {0x7f, 0x5, {0x1, 0x9}}, {0x6, 0x0, {0x0, 0x8}}, {0x5, 0xc9d, {0x0, 0xff}}, {0x2, 0x6, {0x1, 0x4}}, {0xd, 0xfffe, {0x3, 0x1}}, {0xa1f, 0x5, {0x3, 0x9}}, {0xfff0, 0x83, {0x1, 0xfffffff8}}, {0x5, 0x3, {0x3, 0x938d}}, {0x6, 0x5, {0x0, 0xd94}}, {0x0, 0x2, {0x3, 0x2}}, {0x9, 0x6, {0x3, 0x6}}, {0x2, 0x9, {0x2, 0xc2a6}}, {0x2}, {0x3c8, 0x8, {0x2, 0x55789b5a}}, {0xffff, 0xc819, {0x0, 0xfffffff8}}, {0x1, 0x81, {0x0, 0x2}}, {0xf41, 0x3, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x81, 0x7, 0x8, 0x5, 0x6, 'syz0\x00', "5066857df21b76131fda7e4786022fc010cbc5cfa7d840fb117879d7dfc89fa7", "92909ee33214245a28b05982df9d7e4be537a948af76ab26046722d697cf9004", [{0x3, 0x2, {0x1, 0x40}}, {0xe4fb, 0x4db, {0x3, 0x3}}, {0xfff6, 0x8a, {0x3, 0x8}}, {0x0, 0x1, {0x3, 0x10}}, {0x2, 0x400, {0x3, 0x2}}, {0xfff, 0x393, {0x1, 0xb}}, {0x0, 0x4, {0x1, 0xa0}}, {0xfff8, 0x9, {0x3, 0xfffff198}}, {0x7, 0x7, {0x3, 0x9}}, {0x0, 0x0, {0x3, 0x69208804}}, {0x7, 0x7f, {0x1, 0xc}}, {0xa2, 0x800, {0x1}}, {0x100, 0x1, {0x1, 0x9}}, {0x8c, 0x5, {0x2}}, {0x0, 0x6cdf, {0x0, 0x81}}, {0x5, 0x8, {0x1, 0x5}}, {0x9, 0x8, {0x2, 0xfffffffa}}, {0x8, 0x3, {0x3, 0x200}}, {0x4f4b, 0x7ff, {0x3, 0x4}}, {0x428, 0x5, {0x1}}, {0x7, 0x0, {0x1, 0x2}}, {0xffff, 0x0, {0x3, 0x990}}, {0x8000, 0x2, {0x0, 0x7fffffff}}, {0x401, 0x9, {0x3, 0x101}}, {0x8001, 0x6, {0x1, 0x4}}, {0xff, 0x0, {0x0, 0x7}}, {0x9, 0xc, {0x2}}, {0x8a5, 0x6, {0x0, 0x2}}, {0x8, 0xb451, {0x1, 0x8000}}, {0x1000, 0x8, {0x39b87dd5ed5d5a30, 0x1}}, {0x4, 0xfff, {0x1, 0x3}}, {0x2, 0xf9ce, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0xbdf}}, {0x9, 0x5, {0x2, 0x8}}, {0x1, 0x5, {0x2, 0x1}}, {0x2, 0x77, {0x3, 0xfffffff8}}, {0x8001, 0xa, {0x3, 0x100}}, {0xbb, 0xb29, {0x1, 0x10001}}, {0x5, 0xbd, {0x0, 0x74a}}, {0x200, 0x80, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xbe}, 0x8, 0x9, 0x3e55, 0xa40e, 0x28, 'syz0\x00', "6356e2810443d2992ef24622649d51596db923fa2c429ff423d658e4cb45b2eb", "fb36461656ac881ee16a8105287ebbb1c34a1d554929d21ae225493704b2f47c", [{0x5, 0x6, {0x0, 0x7fff}}, {0x87a, 0x9, {0x2, 0x41}}, {0x5, 0x9, {0x0, 0x15f}}, {0x4, 0x7, {0x0, 0x9}}, {0x4, 0xd000, {0x0, 0x7}}, {0x5, 0x5300, {0x2, 0x800}}, {0x8001, 0x0, {0x0, 0x7}}, {0xfffa, 0xc000, {0x0, 0xd2c1}}, {0x8, 0x0, {0x3, 0x80000001}}, {0x9, 0x8, {0x3}}, {0x7f, 0x6, {0x2, 0x800}}, {0x60, 0x0, {0x3, 0x3ff}}, {0x4, 0x7, {0x0, 0xffffffff}}, {0x3, 0x6, {0x3, 0x6}}, {0x7, 0x8, {0x0, 0x2}}, {0x1ff, 0x9, {0x1, 0xc0b}}, {0x8, 0x6, {0x1, 0x5}}, {0x3, 0x5, {0x3, 0x6}}, {0xff80, 0xbaf, {0x1, 0xffff9455}}, {0x200, 0x2a, {0x2, 0x9}}, {0x81, 0x5da4, {0x1, 0x5}}, {0x9, 0x40, {0x3, 0x6}}, {0x1ff, 0x9, {0x2}}, {0x8, 0x6, {0x1, 0x8}}, {0x1, 0xb, {0x0, 0x4}}, {0x7, 0x5, {0x3, 0x3}}, {0x2, 0x2, {0x0, 0xb}}, {0x900, 0x3, {0x3, 0xd}}, {0x1, 0x6, {0x3, 0x10}}, {0x4, 0x1}, {0x66, 0x2, {0x3, 0xf6}}, {0x4a6, 0x7, {0x2, 0x7}}, {0x75, 0x6, {0x1, 0x8}}, {0x6, 0x2, {0x3, 0x10000}}, {0x67, 0x200, {0x3, 0x8}}, {0x8, 0x8, {0x2, 0x6}}, {0xf1fe, 0x1, {0x2, 0xfffffff5}}, {0xe9, 0xff, {0x1, 0xe4c}}, {0x8, 0xe9, {0x2, 0x5}}, {0x9, 0x4, {0x1, 0x9}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40044) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = socket(0x40000000002, 0x3, 0xfb) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e00000000000f0040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4048000) unshare(0x8040480) r6 = epoll_create(0x7) epoll_pwait(r6, &(0x7f0000000440)=[{}], 0x1, 0x1ff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) socket$inet6_tcp(0xa, 0x1, 0x0) 2.675338438s ago: executing program 1 (id=2660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r2, &(0x7f0000000100)=""/12, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="dc", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0xb32, 0x10}, &(0x7f0000000040)=0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x4}}], 0x10) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) 2.564760226s ago: executing program 2 (id=2661): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x27, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000004) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000380)='GPL\x00', 0x20, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) sendfile(r3, r3, 0x0, 0x200) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYBLOB="000000004232f3042c001280080001006772650020000080080005080004ff07000000000000007f0000000000554372bfb72b6aa6c0f3306de31a19391813fe2b0f0a5abe5d1a00be3688248273001ac8aa8419774183e3f403", @ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x854) r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x25, 0x80000, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r9, 0x0, 0x0, 0x4) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @private=0xa010101}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x14c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.327673322s ago: executing program 3 (id=2662): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) (async) sendto$inet6(r1, &(0x7f0000000040)="6435b7", 0x3, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x1}}], 0x18}}], 0x1, 0x0) (async) sendto$inet6(r3, &(0x7f0000000480)="00c6192ade5306c70e99dcf0e7717bade503d70b9b1a59f8f7e247786a34c6ed2ae9d7b81ea301ae6b9d26df8a1348a5962ad2febd4d2d71b4da3d60fe2383bf4ea7", 0x42, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, 0x1}, 0x1c) (async) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r4, 0xfff8, 0x709, 0x7, 0xa8b, 0x8001}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000095000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.32716596s ago: executing program 4 (id=2663): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000005c0)={0x0, 0xea60}, 0x10) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002f40)={'vlan0\x00', &(0x7f0000002f00)=@ethtool_pauseparam={0x1, 0xff, 0x9, 0x80000000}}) 1.731191634s ago: executing program 1 (id=2664): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000000c0)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x20000335, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c200000000009504001200000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x20000335, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c200000000009504001200000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.653346366s ago: executing program 1 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x3d, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}}, 0xc000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='\x80\n', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) shutdown(r7, 0x1) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x34c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9189}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe48}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8c8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf37f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x31, 0x3, "15ab5d6bd0a623e9c6f83ae098138fb12845696923400df596aa9687fa9a5b8c41a4cd4c0f604d497769460994"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0401e12bc7d7e0ae2d7e92fd1f5edfe0a18da01078259a4f27ab"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "786bd14e21bab0d886dd8030a24d0c8d954b07113999ad09359ff6966046696a"}}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @loopback, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x21}, 0x840) 1.629620926s ago: executing program 2 (id=2666): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e0001006970366772657461700000002800028008000d0001000000080014000000000006000300917000000600100000000000040012"], 0x5c}, 0x1, 0xba01}, 0x0) 931.496291ms ago: executing program 3 (id=2667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000200)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000100)=@ll={0x11, 0x5, r3, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="f87f5ea0fd47", 0x6}], 0x1}}, {{&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="b86ff2080a3ddaa39e5133f3741ccf28a9f2df7e851be2cff97dd3e25035d635e91af31b33f8285089286739c1f79758da1dda5f08bc46fc813422d473a2cfba4e9acb71582005e2f188fb25f3ea100adc28bb3d680ff5a7c65bf128b268e764765eb07e9990b16bac8159b2405fedc9efcaeca7f19715bd8428cb2ebe", 0x7d}], 0x1, &(0x7f0000000540)=[{0xe8, 0x6, 0xfffffff6, "a33063c92ab804429662c3f0cba9b5f1f35ac14d6b21ed638fce5a3b7a3f778cb3e27b8d1f2c34061eb1d63155383c9d40f1ba7edd95d8125c3947c5fde7726883cbb3da40cf2d531c1454a7e6bba839af97aaa0cfbd37a0f371eee7c062716d60cc0163c8269a6092f0654b8f3dc6e70e7893c32ff494154a31dfa9535cce391f19da1718254f850e69ead222dde1dbc20e27f7081c34b2b39b72cce56c8cd8d9d1ac957d9f75c8e6af15671248e7ba02d94cf6febc1a6584590432e420f83334d2cdacee844108e361d90e20ccbe695ce0d68eece3"}, {0x70, 0x110, 0x9, "1a5dca08b0fd80d4c0d36de1418c30ecfc7af41d170630c1e498cf1865723b53f905cd5970d046c9ddeb8c739f193446e0062bce55dfdf2ef94d4b7c25ee0214823408ae8d8c7a6d66861d6c1e04ff9a8058c4efd8b67835ec5e4eeb"}, {0xc0, 0x6, 0x7, "29ee056144dff330c7761df139e068e6fd25d326822d37214d5093509f8ba73e338645228fc270f5e6b94662c1ec72d5ba9db73508a83caa6027b57714eebbd3682341523462c3316a92be9cd9a4e64dded9b9f577d107aba66cf62e7426a1300bba8062580ed70e09f60982781b368462dac416a41b5f91a688b74ac7799ccaa9d6e5f7f6226a5f4b9aaeb18a3c9ff78f7fe387002b421340da39858ac96e6b699f69640f941a0dcd90334f46e4fb"}, {0x68, 0x110, 0xf71, "5412f8760eec07e019043a39e5de22b4536725e12866cfc0dd146ec50d1e57ebe2538a9347ef24a014a66d4da06bfbe7aa675f0c250b1ed1339ec5d1445f8749478fdb80a7104aaae276b66e3a7c6ef471fb440a"}], 0x280}}, {{&(0x7f0000000300)=@isdn={0x22, 0x3, 0x3, 0x92, 0x5}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000380)="0bad94a2c3549f5e0a01e781999cc1f0e119a7dcd94e8e665ee07848a1196ff5f18494e6c55d881831493699ed5d72761a7413a0faed0d9c5e8db0e45604a0ce44e4d8d0ff2c6e4a1970497b6ac20ae64041d1e5f5cb296133592678b5004a0df66d31e0f407c4a14a7e39996ab489c8a362ee7d9ee9ce59230823ef03e8607c92e5a21d1c3bdb30f400a7e6a661dfe5c4837194172812786ede2f3551", 0x9d}, {&(0x7f0000000440)="53cf12dc92450c13fd24336c1ab0f06142ec67ea0bc8a8cffee02d2e69fe2d7acf370f19dc053be73e23c8aabbc8c6ef5b64e0e0e6de8bb2752bf5bd41da7c675f950c418ca81ac247e8", 0x4a}, {&(0x7f00000004c0)="823b4ee1cb8bd46c7fe1cd39e3b659e671d2501142799c23e2d2133c3cd9019475b3042a9828010849710b7c0e018201f260b0c9", 0x34}, {&(0x7f00000007c0)="c8379d79a6dabdf0c1b3bd9184a1ae83ec26a1680b6110acb6de9652df01723874216f3ad47fdb0078a6a32c7683175f1521bb31ba0e5602c1cc84f75916fc6f9d2ad3d19ddeba4d2d2c1439c9cad65521463c26647be8cb58078d2eaff040c7369360a060ceaf90e5315d861ec2f15c9e7f94e908030a9def29dafa1b49e64b592ecc2ed80085b8ec9cc74ae71d78e9c18a3c2e7d5d6fcd1bcb3a2d00397be6ce92c8d31112210768ee88f7e83aa0af824115cf014cf158dd0b0fabeb279659def83b21fbf07a1c41962f8e5fd6a3f8496dc11efc80cecfe4e9d6a273", 0xdd}, {&(0x7f00000008c0)="a32d5df53bfff0d4b1d15425daa48a69c0c4f679808add45fd7c201b6336bd3320da7d10d14d5361094b3aef8c493fa1287319132f14153a5eb624b8d58f3041d845c06cea1e677b53379afaec4c2a07bf0b38bd11c1911cabce43afd90a25dab4b57fc632a290f09e82bd651000f2d5be2b9031b216265b669d2106be5db09bb2aa5e6d6f9a15d629ca7da7a2c2913bb54430be2d10b305948600a16bf792f0890dc9ad59517e7460f90f1a3ced2edb1782900088fe793ab837a9beb818fd6cf1862c87adb6f6da81a494de8fefb71acf9cebebdc350124f0c86b1bdc8b57bdea5e720ad0a93297babdf0d42f5cbbae81", 0xf1}, {&(0x7f00000009c0)="002b26cc1d12e1825e72b2363e5580be4330ede87fd44b198edaadffb94cfc5bd6692d5ad3df4c235de9bd676efbab359c4935990dc46c7b804317a412ac8df23cc70b953b85b29985988bcb49423561fb21d649bd9904068360639dc1ba12fa50a0784eec2587ab3d65e84ee9921e75faebc326915fd26e47010c2d2426c1fcd4342492e2ff3386fda2debb0c5ba4370b7006e80e232ea6a76ce09dc154136acf8047cbb5c01d5ca815", 0xaa}], 0x6}}, {{&(0x7f0000000b00)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b80)="8256a812453e83bbb0544041e4f16830385ccc06ea542ede424ba666cd7172898e6d1fb2", 0x24}, {&(0x7f0000000bc0)="0296824ee10fd344ced0b7edad303c4cba8bc5e7554d4f89ddcee7f63c7e477a0dda4622c094b70c1d16a814dc4d1f49aa85e31368e55dc89fd65b73c07a84fd1bb3fe08b4ba014b530ac17b9182200e6df77096485cd6345dfe9840a883cbad818da113a41d6f57a2169cf59c4dce88e3b7e44d2b6b14116f2890d4380b6132e1caf0ba33933c78c9775207ca1eb04e", 0x90}, {&(0x7f0000000c80)="2920404b624fc7cea812e00b9f00d830c1a3b17a36a505352c08a136924a28952ddd1cefbfd03c44062e266ed44b20aa659e32db0436d7aeb9e282c1fd8836fb9b034fba09a9d31cbb1195e290c5d024bdfaefe78c80495d0a5d920b71264ba0f2c2fe4a0169230d1af7971c0744059db24488d32f", 0x75}], 0x3, &(0x7f0000000d40)=[{0xc8, 0x109, 0xa, "7606600c6c31ddef6a5d6e905a6d55efba806fbe7103062ca1cb8b4fa71cd0aff4f94cf1bf976c4ea74723bf9b4a11a415e19d434cf9ed0132b4128e7fad4998913b0a2491187d6dfc436f1b615fb477b3bfb5bb839e1a8d9c57b4255cd094f19eb45ec51ee60df7ceb3098301600ced7283215ecf2ab8caa562ceb2708f7eaccb5277770c53c77a86b7269b48096c64a94b0d2e3da4be15a8e836713e850f2dfa79bca947d99594735955bdd1b290b674575b088e49"}, {0x78, 0x1, 0xfff, "9a746f73f57c119e0184e8c08bfaf76e9121064d2f0bdd7c89f6b51ccc5e2f8e8c7782301e8fdfa54add83f2f58548a447de19759bce28774bedabd5732e7a9bb0d7eb75dd7b6a9c73e4226b35bc5f8b02656991b0e12e726e9a3d9220cb133dd618d1b641"}, {0x28, 0x3a, 0x4f4, "f8aaeb9a2cea93ca2669bc842da34fbdf67aa67d04c83660"}, {0x38, 0x10f, 0xfffffffd, "87095671aeae3d5481a7abf802e6959b769ed6e6f188a00fb45c73a16c0656a254961cebe7bdd58c"}, {0x40, 0x11, 0xf5, "90ca00d514f3088e73d6e77e28bde4a5e0a1c1a7e44ed7c16f6c97368a4a155cf467d01116b24595a71d77"}, {0xf8, 0x10d, 0x6, "2f4099aa966934e6dc9efb3b1b02d7b7a13f8e23447552132aa4290ced4abf3d3a34e659cf0cb5ad4a996797030334c4b97f2467b1d9083b78bba0e1b55584e84d0c40e4701a4921b08cdeb17865524a6aba6e36db04a0980ee771263f6532a8bd76fe7441a7fe962b942c7aad4b5d9be17664c1b3b034f2128e8fd60fa20339700f8fc6f2df3287450fae3deb5467cd70870815c2a91c35e279cf45f794c76e5f29afb2bf27961863c4c69e69bdc44018aefe2e886127c645f2b6a07c9a5ba61c0a0ebaae9dc5133267fd8bd3b72a8c2c8f0c4be06af8e7e084b0c422060afaa50b86fc7019579a"}, {0x70, 0x107, 0x75e, "e71aa94d931b2ed63499528d76d180ae3f03f629392647fbb75af96450f838e7576c1ca8066e7a4ec4f50708aafb9ced5c34118db53958ee7bdef2fb01b84226eccfa995927cc0de0b9315b8db0b2fc50c2a4b56550cb08c769670"}, {0x28, 0x112, 0x2, "ddffc6b9ddafea4779052580cf736c1eae"}, {0x108, 0x104, 0x7, "4c48618baa3bd8d51d1195f3a158fb12760484151eb3eae253e6ab5dee692a20321a82ddb787053fb9e564837f5f1d01574daf8ca583962dd7f1da91e031963155f5e491b2a794dd12cff08916da80f356d000ef81a9f0749fc6f6a9e6983090399b2381b97606e883a6358a50a9a159576f053e2b84f902cc67605024f723ae0b38cbd5711408225b69d387ea82612242d8a34a5d4878a278a09fa930ca679d9a27c1cbb68205dc1b0108af4aa9590f4e82fce7a8dc826d575268ddf0282459d10114b24f5c1ea7c53c4e5f9237438c3c48c41065a4937324a13b32300649d2af49f1ee7cf2f5e0cd10410731834c195285eb4b19"}], 0x478}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000011c0)="f3", 0x1}, {&(0x7f0000001200)="30caaadb61b7deeb318995647616076b7a8fb4df658edf009255427946cda99473cd16e6396aa39c37ef93ca1b78388bdbac11ccfa4209d16ff9271c40881ff82be9c974eef1d82b53a4d6661b38dec8c1c6827091dd0f4275537690a3394acc9381e6a70f9284e260842e8ce888191f769fe8d80fd62044766f8bbbf8346ddf83d227b5fcd2f3f3582b7b1a", 0x8c}, {&(0x7f00000012c0)="108672d1d63493365521d05a985ce81148a614f97920e4b9ef94ac875a4d46f6de9a0497b29482e10f316b284de91a43903a94ff471fedb3d62779de4ed8f747c3ad75691da713c5bf8594b88c5a22de932aa7e696572c947ac80c772fb103b1b489d6a5732a14c3eead3bc6749100696aa3856e2ef2b9943859960d4fabeffc87e864db37909b10cc67107c91652e582e584a384a72e14fbd0c256afa5451fc6fa19e196c3c461b3013ce605b1981b4ec158adc28ded842d08b4c", 0xbb}, {&(0x7f0000001380)="b98d4579fa5c36939ce82cda5e4ae0b8da69d3150a280d1acdb6e56087e86a31fc345d429806fbc5c37c6636472f8c7b52b339529122c59096db60fd5cd40f3a58516e37d182b35a7f6920ca4a060cfa510eec667c566388dc271367f0c1e3ae366905", 0x63}], 0x4, &(0x7f0000001440)=[{0x88, 0xff, 0x7fff, "86183628196b0b89c992d7a1b39d93bb9ce7a99a3d72a3e6b5a38fda2f73d01af5cee5413f8ebc1ce71aef683f77dd8400d5024b30f39fa436f368ab205f7c6b4e4eb097702aad199f0aae4475bf3a5979b9268256d6cf3b0190acffeb40d4135658e9798e86ecb9b792a35fdb249c71e56ba00e48b016"}, {0xe0, 0x1, 0x1, "1eea8f07e82f3cfcfd2310678c9dcece3e9b762742c76ee3d7d34d9c72fd46bd1023d5beed71881ab66fc3c1f6bf45e462c9ea8d9cf9cd483aa2002f38db90a82a597f3f66695fb455c9124b04b4de8ee6635d1d089a674a59247814975a507d57004670a532abbdc4a1b02245d91ad0b2e8ece840981e9d66dd81651df902fc87861e247b7eac35b1bce78bb95a05ed26000e37f08c4fff391d939ae80b733f6f0f5f971065963fe11ea9faa72ee0a067a0bc75d3c5113eb87487c42889252a15ce7c6c14ac8f38e37ac3f867555a"}, {0xd0, 0xa, 0xb9, "ccc20720a24cab3f4b4a30bafd022f9c8d5137657444913dce59dd12a1dc0e24a6c45eba1bac1ee937c398a267f5087153acc969e1d6ffc87ae422f98b6e842e22eb5a6659fd3eef2b320028ef4fee9d2e9b145c6fecb7d96ea59c5581344b314644c6bb8681997383b5252ccdb8a0f419c28b3cf54a6af3970136dbcd24a0ca77b436d90d8e5f851c0f8168fcafac2fdadaf607b6f77e7e244f48b361525645958d81e4e8f8e5e37de14863de6d94577e48c69fcecbec4c5b0d2ccdf23979aa"}, {0xb8, 0x84, 0x100, "4cb61a471dbe034551fad8782e7a5836fa918ec5a22ab77636e9da1d9386ab05dededb723b7c00cf377dd54e22ade699c14c9fb23da7f6e0442a3f49f3559e6ea8fc7c65a60d0296ddbe34c62eb48aa7978203059fd8812b05197b84a67a793c8e0c2a5dd53d358868354b28987b3958ddc06ec298d5039f381cd790747ad063cd9fc4dd189b7ae15212b5d0938b0d25c56134593e3ce4c472e4ae9987cf42c7af1c046a"}, {0xa8, 0x3a, 0x7, "1db1c99b87de8f8feacd03642e42c6e59ea8d913e2b0ed4d72244b96a915f5dfd0772842930ff9c46793018440b820257e808ef2fa819f14cde74d48ac3bad8f2d4c17bcfb7abadc65ce3936164671d322c32843b7d1ab576268ecc2364a023a09717d6687cc2f09a744dd70983f56afdf7530fd8e154bc14f33f5e31e8bd97a116560e3cc01734ab4f05c867c0e6cb547cea435"}], 0x398}}], 0x5, 0x48004) 929.868958ms ago: executing program 4 (id=2668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) unshare(0x400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 925.031608ms ago: executing program 2 (id=2669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x7e2e0000) (async) sendto$inet6(r0, &(0x7f0000002380)="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", 0x1000, 0x400c881, 0x0, 0x0) (async) unshare(0x60480) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 903.34237ms ago: executing program 1 (id=2670): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xa2, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6d9ccfe1006c11fffc010000000000000000000000000000fe800000000000000000000000000000004e214e23006490780200000000000000020000007fbe0c3069d619f5f968ede8da60d2b4f59ddef3b7fe51bce8570542bbb6fb11bce5e0178cb67cbfdb396a61d8fe497d2a9955c0c8f9428f24bb0de580a1b2aa7143a439d64d106df21b62ed29676bd400000000000000"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000002d00)={'\x00', {0x2, 0x0, @empty}}) close(r7) socket$inet6(0xa, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r9 = accept$inet(r1, &(0x7f00000004c0), &(0x7f0000000500)=0x10) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000540)={'xfrm0\x00', {0x2, 0x0, @loopback}}) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0xd8, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pimreg\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 723.546206ms ago: executing program 4 (id=2671): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7a22804ada3fb9c97755f79e2bd2022170813af851b68e281085ddd87188afa1d42e1980c6265d33f235754dedce6b098675e62e77c0ea6e3a78a866eff2d73bd3dab3119b46d8f4ad5aeacd3581a7b255e1faff5eba351837df26c126b3b2c029159ad676a4e40eec32c09001fc1ca0716796463c34b3d21b5c21ee13ce532902f9b4e62af6865f777f5d0c8dbb0bbcba5f7cc060028b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "46ecff148f36a650", "1c0e9c5910990f347a8566bbb77a12ad", "a3ea9035", "f21a7c21f0d55855"}, 0x28) r7 = gettid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000280)=r7) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) 722.812424ms ago: executing program 2 (id=2672): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x83, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600150000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x20}}, 0x0) socket(0x10, 0x3, 0x0) (async) epoll_create1(0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) (async) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x83, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600150000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x20}}, 0x0) (async) 563.259408ms ago: executing program 3 (id=2673): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x1}, 0x14}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 32) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$kcm(0x10, 0x0, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x6c}}, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0xc) (async) sendmsg$inet6(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000740)={@initdev}, &(0x7f0000000780)=0x14) 464.765147ms ago: executing program 2 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$inet(0x2b, 0x4, 0x808c) listen(r1, 0x9) (async) r2 = socket(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000810) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x4, 0x1, 0x1, 0xd, 0x6, 0xfeff}, 0x20) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x40004000, 0x0, 0x0) (async) recvmsg(r5, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/38, 0x26}, 0x22) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'vlan0\x00', 0x6, 0xfdc}) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x0, 0x4, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x4]}}, 0x5c) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x1b) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 331.528105ms ago: executing program 3 (id=2675): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x3, 0x4, @local, 0x1}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r6, &(0x7f0000000200), &(0x7f0000000ec0)=""/99}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008144}, 0x4000000) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="3310eddb8d6c656eb525617facb08613d31a3443b02419c884d43564220cd78f9727b453ccb7b196e64f5cf613ec18a83d25d272339489104f1374a585b966c8cbc01979c869e0166b1d8ba6b5650857caddf6c1d0c863602bd03c1ac3ef696a6689826fea9e1361c02a10ee0eea6a579c9b24c98e2a682acacbdc5d88139b25d28e9f63a35da28b7e", 0x89}, {&(0x7f0000001fc0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffbc, &(0x7f0000000640), 0x18}}], 0x41, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xf7}, 0x10) 294.991903ms ago: executing program 2 (id=2676): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x27, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000004) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000380)='GPL\x00', 0x20, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) sendfile(r3, r3, 0x0, 0x200) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYBLOB="000000004232f3042c001280080001006772650020000080080005080004ff07000000000000007f0000000000554372bfb72b6aa6c0f3306de31a19391813fe2b0f0a5abe5d1a00be3688248273001ac8aa8419774183e3f403", @ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x854) r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x25, 0x80000, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r9, 0x0, 0x0, 0x4) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @private=0xa010101}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x14c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 266.043726ms ago: executing program 4 (id=2677): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x806, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @any, 0x8aa5, 0x2}, 0xe) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) (async) getpeername(r2, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x6) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a150f467dbdf46", 0x18, 0x0, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/226, 0x21000, 0x1400, 0x7fffffff, 0x1}, 0x20) (async, rerun: 64) recvmmsg(r1, 0x0, 0x0, 0x30, 0x0) (rerun: 64) sendmmsg(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, 0x0, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r6, 0x0, 0x20008880) (async) sendfile(r5, r7, 0x0, 0x100000002) 47.396728ms ago: executing program 4 (id=2678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x700, 0x8, 0xffff0320, 0xfffffff9, {{0x1d, 0x4, 0x2, 0x9, 0x74, 0x66, 0x0, 0xfc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, {[@end, @cipso={0x86, 0x31, 0x0, [{0x7, 0x4, "d325"}, {0x1, 0x3, "10"}, {0x1, 0xf, "7982984524d1eda9c8739f2b57"}, {0x3, 0x10, "e6d36f0a913f1689f3cca7ab6f1a"}, {0x5, 0x5, "1302e9"}]}, @ssrr={0x89, 0x7, 0x2b, [@broadcast]}, @timestamp={0x44, 0x14, 0x26, 0x0, 0x9, [0xbeb, 0x5, 0x2, 0x2]}, @end, @generic={0x83, 0xc, "59a77a584defc8d18bff"}, @generic={0x44, 0x5, "e856df"}]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @loopback, r2}, 0xc) socket$netlink(0x10, 0x3, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f00000004c0)={'b', ' *:* ', 'm\x00'}, 0x8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) 0s ago: executing program 4 (id=2679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000001ac0)={&(0x7f0000000180)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbf8, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x20040004) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffc}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x8}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@bcast, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @default]}) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x20, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, 0x0, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) kernel console output (not intermixed with test programs): .571614][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.598631][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.629026][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.643939][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.690211][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.749667][T12821] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 267.771363][T12821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1893'. [ 267.793860][T10405] hsr_slave_0: left promiscuous mode [ 267.808049][T10405] hsr_slave_1: left promiscuous mode [ 267.822391][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.829903][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.855868][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.871580][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.908470][T10405] veth1_macvtap: left promiscuous mode [ 267.921516][T10405] veth0_macvtap: left promiscuous mode [ 267.927134][T10405] veth1_vlan: left promiscuous mode [ 267.941558][T10405] veth0_vlan: left promiscuous mode [ 267.961829][ T5889] syz_tun: tun_net_xmit 110 [ 268.641338][T12836] xt_socket: unknown flags 0x8 [ 268.877201][T10405] team0 (unregistering): Port device team_slave_1 removed [ 268.933577][T10405] team0 (unregistering): Port device team_slave_0 removed [ 269.005483][ T5144] Bluetooth: hci3: command tx timeout [ 269.415011][T12821] veth0_vlan: left promiscuous mode [ 269.429894][T12821] veth0_vlan: entered promiscuous mode [ 269.438246][T12821] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 269.455206][ T61] syz_tun: tun_net_xmit 130 [ 269.501956][ T9] syz_tun: tun_net_xmit 90 [ 269.515261][T12741] hsr_slave_0: entered promiscuous mode [ 269.532094][T12741] hsr_slave_1: entered promiscuous mode [ 269.612198][T12849] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 269.632036][T12849] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1899'. [ 269.651781][ T5970] syz_tun: tun_net_xmit 90 [ 269.703682][T12850] lo speed is unknown, defaulting to 1000 [ 270.202422][ T5970] syz_tun: tun_net_xmit 130 [ 270.555298][T12868] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 270.778753][T12876] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 270.789656][T12876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1906'. [ 270.815145][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 270.860018][T12880] netlink: 'syz.1.1907': attribute type 11 has an invalid length. [ 270.870605][T12880] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1907'. [ 270.938640][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 271.053832][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 271.063427][T12890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1910'. [ 271.063458][T12890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1910'. [ 271.069324][T12741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.090510][ T5144] Bluetooth: hci3: command tx timeout [ 271.118532][T12741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.144950][T12741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.196773][T12741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.259296][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 271.363133][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.399863][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.418341][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.425548][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.457762][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.465016][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.655423][T12917] xt_NFQUEUE: number of total queues is 0 [ 271.658786][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'. [ 271.667180][T12919] xt_NFQUEUE: number of total queues is 0 [ 271.727678][T12741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.786876][T12923] netlink: 'syz.3.1920': attribute type 4 has an invalid length. [ 271.817299][T12741] veth0_vlan: entered promiscuous mode [ 271.833172][T12741] veth1_vlan: entered promiscuous mode [ 271.841137][T12928] sctp: [Deprecated]: syz.1.1919 (pid 12928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.841137][T12928] Use struct sctp_sack_info instead [ 271.875032][T12741] veth0_macvtap: entered promiscuous mode [ 271.885416][T12741] veth1_macvtap: entered promiscuous mode [ 271.927444][T12741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.938522][T12741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.952655][T12741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.962024][T12741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.970768][T12741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.979223][T12932] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 271.980054][T12741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.001941][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1921'. [ 272.119308][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.128252][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1923'. [ 272.132630][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.153005][T12934] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 272.206538][T12934] bond4 (unregistering): Released all slaves [ 272.270563][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.298186][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.397698][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 272.690752][T12966] netlink: 'syz.4.1929': attribute type 39 has an invalid length. [ 273.107902][T12982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.273473][T12989] tap0: tun_chr_ioctl cmd 1074025677 [ 273.279232][T12989] tap0: linktype set to 825 [ 273.589618][T13015] netlink: 'syz.1.1946': attribute type 10 has an invalid length. [ 273.603915][T13015] team0: entered promiscuous mode [ 273.621984][T13015] vlan2: entered promiscuous mode [ 273.633883][T13015] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.640909][T13015] bridge0: port 1(team0) entered blocking state [ 273.691196][T13015] bridge0: port 1(team0) entered disabled state [ 273.707409][T13015] team0: entered allmulticast mode [ 273.717356][T13015] vlan2: entered allmulticast mode [ 273.816609][T10405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.740967][T13038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 274.893936][T13040] lo speed is unknown, defaulting to 1000 [ 275.044822][T13054] netlink: zone id is out of range [ 275.067082][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.080964][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.090701][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.102422][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.112608][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.120109][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.138733][T13054] netlink: zone id is out of range [ 275.171782][T13054] netlink: get zone limit has 8 unknown bytes [ 275.254406][T10405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.306017][T13059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 275.396131][T13056] lo speed is unknown, defaulting to 1000 [ 275.685541][T10405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.798961][T10405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.099940][T13056] chnl_net:caif_netlink_parms(): no params data found [ 276.165017][T10405] bridge_slave_1: left allmulticast mode [ 276.181303][T10405] bridge_slave_1: left promiscuous mode [ 276.187214][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.236423][T10405] bridge_slave_0: left allmulticast mode [ 276.242258][T10405] bridge_slave_0: left promiscuous mode [ 276.248035][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.823672][T13108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.863934][T13110] __nla_validate_parse: 10 callbacks suppressed [ 276.863961][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 277.167474][ T5838] Bluetooth: hci3: command tx timeout [ 277.232609][T10405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.250100][T10405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.266369][T10405] bond0 (unregistering): Released all slaves [ 277.697034][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.708668][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.716983][T13056] bridge_slave_0: entered allmulticast mode [ 277.724819][T13056] bridge_slave_0: entered promiscuous mode [ 277.752259][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.781217][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.793259][T13056] bridge_slave_1: entered allmulticast mode [ 277.810059][T13056] bridge_slave_1: entered promiscuous mode [ 277.958236][T13140] sctp: [Deprecated]: syz.3.1978 (pid 13140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.958236][T13140] Use struct sctp_sack_info instead [ 277.983634][T10405] hsr_slave_0: left promiscuous mode [ 277.989878][T10405] hsr_slave_1: left promiscuous mode [ 277.996330][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.004051][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.012371][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.019903][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.035030][T13141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.052207][T13141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.053445][T10405] veth1_macvtap: left promiscuous mode [ 278.068053][T10405] veth0_macvtap: left promiscuous mode [ 278.073970][T10405] veth1_vlan: left promiscuous mode [ 278.079399][T10405] veth0_vlan: left promiscuous mode [ 278.264859][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 278.710019][T10405] team0 (unregistering): Port device team_slave_1 removed [ 278.764810][T10405] team0 (unregistering): Port device team_slave_0 removed [ 279.242172][ T5838] Bluetooth: hci3: command tx timeout [ 279.375746][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.386085][T13145] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 279.446826][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.512403][T13148] lo speed is unknown, defaulting to 1000 [ 279.558459][T13155] netlink: zone id is out of range [ 279.579456][T13056] team0: Port device team_slave_0 added [ 279.586466][T13155] netlink: zone id is out of range [ 279.593451][T13149] lo speed is unknown, defaulting to 1000 [ 279.606847][T13155] netlink: zone id is out of range [ 279.620183][T13056] team0: Port device team_slave_1 added [ 279.630728][T13155] netlink: zone id is out of range [ 279.640940][T13155] netlink: zone id is out of range [ 279.658665][T13155] netlink: zone id is out of range [ 279.662287][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 279.671568][T13155] netlink: zone id is out of range [ 279.680178][T13155] netlink: zone id is out of range [ 279.685850][T13155] netlink: zone id is out of range [ 279.691330][T13155] netlink: zone id is out of range [ 279.711901][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 279.723309][T13161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1984'. [ 279.735168][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.747654][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.789935][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.817211][ T5838] block nbd0: Receive control failed (result -107) [ 279.853184][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.869597][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.873136][T13161] nbd0: detected capacity change from 0 to 256 [ 279.916204][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.109942][T13056] hsr_slave_0: entered promiscuous mode [ 280.117578][T13178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1989'. [ 280.133673][T13056] hsr_slave_1: entered promiscuous mode [ 280.141119][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1989'. [ 280.842589][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 280.914593][T13056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.948904][T13056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.981180][T13056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.030677][T13199] syz.1.1996[13199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.030786][T13199] syz.1.1996[13199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.061797][T13199] syz.1.1996[13199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.186840][T13056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.211268][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1997'. [ 281.225146][T13200] tipc: Enabling of bearer rejected, already enabled [ 281.305306][T13198] netlink: 'syz.3.1997': attribute type 126 has an invalid length. [ 281.322629][ T5838] Bluetooth: hci3: command tx timeout [ 281.438264][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.489101][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.518306][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.525542][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.573642][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.580819][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.656369][T13217] lo speed is unknown, defaulting to 1000 [ 281.684796][T13222] tap0: tun_chr_ioctl cmd 1074025677 [ 281.703448][T13222] tap0: linktype set to 256 [ 281.706596][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2000'. [ 281.898912][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2003'. [ 281.976579][T13233] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 282.224869][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.329764][T13056] veth0_vlan: entered promiscuous mode [ 282.376534][T13056] veth1_vlan: entered promiscuous mode [ 282.401174][T13220] lo speed is unknown, defaulting to 1000 [ 282.416126][T13217] lo speed is unknown, defaulting to 1000 [ 282.509668][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 282.546821][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 282.591018][T13056] veth0_macvtap: entered promiscuous mode [ 282.703318][T13056] veth1_macvtap: entered promiscuous mode [ 282.737031][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 282.776405][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.788761][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.831290][T13056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.860905][T13056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.880814][T13056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.911584][T13056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.963212][T13262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.085495][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.093845][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.128951][T10406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.139007][T10406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.911653][T13307] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2027'. [ 284.443711][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 284.570240][ T3510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.572318][T13348] syz_tun: tun_net_xmit 42 [ 285.608614][ T3510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.621721][T13361] xt_hashlimit: invalid rate [ 285.641637][ C0] syz_tun: tun_net_xmit 42 [ 285.701868][T13357] netlink: 'syz.2.2041': attribute type 4 has an invalid length. [ 285.777242][ T3510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.848269][ T5970] lo speed is unknown, defaulting to 1000 [ 285.941013][ T3510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.965274][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 285.993766][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 286.040998][T13376] lo speed is unknown, defaulting to 1000 [ 286.093469][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.105191][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.114897][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.133023][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.144324][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.152118][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.182761][T13377] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 286.203148][T13381] 0ªX¹¦Dö»: left allmulticast mode [ 286.280837][T13377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.289371][ T3510] bridge_slave_1: left allmulticast mode [ 286.298593][ T3510] bridge_slave_1: left promiscuous mode [ 286.305299][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.316896][ T3510] bridge_slave_0: left allmulticast mode [ 286.323451][ T3510] bridge_slave_0: left promiscuous mode [ 286.329493][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.548096][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 286.691919][ C0] syz_tun: tun_net_xmit 42 [ 286.869506][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.887121][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.899116][ T3510] bond0 (unregistering): Released all slaves [ 286.926192][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.933680][T13382] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 286.946749][T13382] bond0: (slave vcan1): Error -95 calling set_mac_address [ 286.988014][T13388] netlink: 'syz.1.2050': attribute type 6 has an invalid length. [ 287.208242][T13378] lo speed is unknown, defaulting to 1000 [ 287.567371][ T3510] hsr_slave_0: left promiscuous mode [ 287.587206][ T3510] hsr_slave_1: left promiscuous mode [ 287.607566][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.619712][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.632492][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.640205][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.670640][ T3510] veth1_macvtap: left promiscuous mode [ 287.676580][ T3510] veth0_macvtap: left promiscuous mode [ 287.682809][ T3510] veth1_vlan: left promiscuous mode [ 287.688121][ T3510] veth0_vlan: left promiscuous mode [ 288.202322][ T5838] Bluetooth: hci3: command tx timeout [ 288.227132][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 288.287798][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 288.841242][T13449] xt_policy: output policy not valid in PREROUTING and INPUT [ 288.991994][T13448] lo speed is unknown, defaulting to 1000 [ 289.073268][T13378] chnl_net:caif_netlink_parms(): no params data found [ 289.255522][T13465] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2065'. [ 289.376014][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.405395][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.413019][T13378] bridge_slave_0: entered allmulticast mode [ 289.420208][T13378] bridge_slave_0: entered promiscuous mode [ 289.502210][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.539368][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.556130][T13378] bridge_slave_1: entered allmulticast mode [ 289.566208][T13378] bridge_slave_1: entered promiscuous mode [ 289.574406][T13476] netlink: 'syz.3.2070': attribute type 13 has an invalid length. [ 289.583341][T13478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2071'. [ 289.652907][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.670418][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.754083][T13378] team0: Port device team_slave_0 added [ 289.784158][T13489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2074'. [ 289.836070][T13493] net_ratelimit: 79 callbacks suppressed [ 289.836295][T13493] openvswitch: netlink: IP tunnel dst address not specified [ 289.881374][T13378] team0: Port device team_slave_1 added [ 290.013960][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.026012][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.079254][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.119946][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.127875][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.157622][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.215691][T13502] delete_channel: no stack [ 290.230610][T13502] delete_channel: no stack [ 290.239300][T13501] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2076'. [ 290.260639][T13504] batadv_slave_0: entered promiscuous mode [ 290.282025][T13504] batadv_slave_0: left allmulticast mode [ 290.282981][ T5838] Bluetooth: hci3: command tx timeout [ 290.287954][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 290.341823][T13504] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 290.429618][T13378] hsr_slave_0: entered promiscuous mode [ 290.449069][T13378] hsr_slave_1: entered promiscuous mode [ 290.679589][T13517] lo speed is unknown, defaulting to 1000 [ 291.669313][T13545] netlink: 'syz.2.2090': attribute type 64 has an invalid length. [ 291.688721][T13545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2090'. [ 291.704792][T13378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.739697][T13378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.774390][T13378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.816919][T13378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.917146][T13561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.918011][T13560] SET target dimension over the limit! [ 291.982862][T13563] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 291.993534][T13563] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2096'. [ 292.016261][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.037029][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.050814][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.058057][T10412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.107983][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'. [ 292.127485][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.134834][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.166441][T13566] ip6gretap0: entered promiscuous mode [ 292.183332][T13566] batadv_slave_0: entered promiscuous mode [ 292.191270][T13566] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 292.199461][T13566] Cannot create hsr debugfs directory [ 292.361718][ T5838] Bluetooth: hci3: command tx timeout [ 292.374038][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'. [ 292.396528][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'. [ 292.462311][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.513761][T13378] veth0_vlan: entered promiscuous mode [ 292.526361][T13378] veth1_vlan: entered promiscuous mode [ 292.554287][T13378] veth0_macvtap: entered promiscuous mode [ 292.563686][T13378] veth1_macvtap: entered promiscuous mode [ 292.579505][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.590284][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.600607][T13378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.609778][T13378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.618798][T13378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.628128][T13378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.757609][T10405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.777805][T10405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.825599][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.850210][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.160289][T13600] can: request_module (can-proto-4) failed. [ 293.180026][T13605] can: request_module (can-proto-4) failed. [ 293.392741][T13617] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 293.526818][T13625] netlink: 'syz.1.2115': attribute type 7 has an invalid length. [ 293.584009][T13626] : renamed from ipvlan1 [ 294.158851][T13637] veth0_to_batadv: left promiscuous mode [ 294.178761][T13637] bond1: left promiscuous mode [ 294.184103][T13637] bond1: left allmulticast mode [ 294.190824][T13637] macsec1: left promiscuous mode [ 294.198872][T13637] macsec1: left allmulticast mode [ 294.205527][T13637] bond2: left promiscuous mode [ 294.210641][T13637] bond3: left promiscuous mode [ 294.220657][T13637] xfrm1: left allmulticast mode [ 294.237177][T13637] macvlan0: left allmulticast mode [ 294.243234][T13637] ip6tnl2: left allmulticast mode [ 294.401103][T13651] sit0: entered promiscuous mode [ 294.422182][T13651] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 294.719505][T10408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.944444][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.957633][T13682] __nla_validate_parse: 10 callbacks suppressed [ 295.957654][T13682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2131'. [ 295.974678][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.993462][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.007970][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.024955][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.033222][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.085051][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.098932][T13684] lo speed is unknown, defaulting to 1000 [ 296.117414][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.133141][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.172652][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.240568][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.253831][T13697] netlink: 'syz.2.2138': attribute type 4 has an invalid length. [ 296.263459][T13697] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2138'. [ 296.273047][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.302151][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.317360][T13690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2136'. [ 296.344069][T10408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.388045][T13706] lo speed is unknown, defaulting to 1000 [ 296.462720][T13709] x_tables: unsorted entry at hook 3 [ 296.505080][T10408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.556473][T13684] chnl_net:caif_netlink_parms(): no params data found [ 296.567117][T13697] ipt_rpfilter: unknown options [ 296.624822][T10408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.895764][T13684] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.911989][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.933972][T13684] bridge_slave_0: entered allmulticast mode [ 296.950491][T13684] bridge_slave_0: entered promiscuous mode [ 297.005453][T13724] netlink: 'syz.3.2143': attribute type 7 has an invalid length. [ 297.031034][T13684] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.056667][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.082429][T13684] bridge_slave_1: entered allmulticast mode [ 297.104640][T13684] bridge_slave_1: entered promiscuous mode [ 297.299244][T10408] bridge_slave_1: left allmulticast mode [ 297.321767][T10408] bridge_slave_1: left promiscuous mode [ 297.327583][T10408] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.395406][T10408] bridge_slave_0: left allmulticast mode [ 297.406646][T10408] bridge_slave_0: left promiscuous mode [ 297.418267][T10408] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.111715][T10408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.130853][ T5144] Bluetooth: hci3: command tx timeout [ 298.145716][T10408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.164331][T10408] bond0 (unregistering): Released all slaves [ 298.188954][T13684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.211356][T13684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.428770][T13684] team0: Port device team_slave_0 added [ 298.550630][T13684] team0: Port device team_slave_1 added [ 298.709800][T13684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.721876][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.755807][T13684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.769385][T13684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.790550][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.840781][T13684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.952693][T13684] hsr_slave_0: entered promiscuous mode [ 298.985760][T13684] hsr_slave_1: entered promiscuous mode [ 299.022304][T13684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.031999][T13684] Cannot create hsr debugfs directory [ 299.054780][T10408] hsr_slave_0: left promiscuous mode [ 299.063861][T10408] hsr_slave_1: left promiscuous mode [ 299.072034][T13765] nbd: nbd0 already in use [ 299.076928][T13766] nbd: nbd0 already in use [ 299.082055][T10408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.089616][T10408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.114127][T10408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.122395][T10408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.178908][T10408] veth1_macvtap: left promiscuous mode [ 299.185267][T10408] veth0_macvtap: left promiscuous mode [ 299.191546][T10408] veth1_vlan: left promiscuous mode [ 299.202706][T10408] veth0_vlan: left promiscuous mode [ 300.184681][T10408] team0 (unregistering): Port device team_slave_1 removed [ 300.215523][ T5144] Bluetooth: hci3: command tx timeout [ 300.275221][T10408] team0 (unregistering): Port device team_slave_0 removed [ 301.085272][T13785] __nla_validate_parse: 65 callbacks suppressed [ 301.085295][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 301.278914][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 301.442189][T13795] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2165'. [ 301.472139][T13795] openvswitch: netlink: Missing key (keys=40, expected=80) [ 302.003098][T13684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.018840][T13820] lo: entered promiscuous mode [ 302.025826][T13684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.057271][T13684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.076542][T13684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.135433][T13819] lo: left promiscuous mode [ 302.208667][T13684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.232897][T13684] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.249411][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.256643][T10406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.274013][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.281280][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.286188][ T5144] Bluetooth: hci3: command tx timeout [ 302.321827][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'. [ 302.382848][T13829] bridge0 (unregistering): left allmulticast mode [ 302.452420][T13833] netlink: 'syz.1.2177': attribute type 2 has an invalid length. [ 302.460242][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 302.677082][T13840] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2179'. [ 302.711145][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 302.731248][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.827635][T13684] veth0_vlan: entered promiscuous mode [ 302.861047][T13684] veth1_vlan: entered promiscuous mode [ 302.925139][T13684] veth0_macvtap: entered promiscuous mode [ 302.965157][T13684] veth1_macvtap: entered promiscuous mode [ 303.025640][T13684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.048426][T13855] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 303.054012][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 303.070568][T13856] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 303.088379][T13684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.127217][T13684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.162139][T13684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.179765][T13684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.196970][T13684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.215551][T13861] Bluetooth: MGMT ver 1.23 [ 303.384610][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 303.390940][T13871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2187'. [ 303.414069][T10405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.425289][T10405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.492274][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.515663][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.759266][T13888] macsec0: entered promiscuous mode [ 303.767008][T13888] macsec0: left promiscuous mode [ 304.403748][T13921] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 304.412955][T13921] bond0: (slave netdevsim0): Releasing backup interface [ 304.420905][T13921] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 304.432395][T13921] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 304.747559][T13932] netlink: 'syz.2.2206': attribute type 5 has an invalid length. [ 304.839944][T10405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.900476][T10405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.950062][T10405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.134376][T10405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.197134][T13945] lo speed is unknown, defaulting to 1000 [ 306.371965][T13952] sctp: [Deprecated]: syz.3.2212 (pid 13952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.371965][T13952] Use struct sctp_sack_info instead [ 306.403048][T13954] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.412270][T13954] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.420515][T13954] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.428919][T13954] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.569783][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.580709][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.597131][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.623529][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.652374][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.669201][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.676825][T10405] bridge_slave_1: left allmulticast mode [ 306.685645][T10405] bridge_slave_1: left promiscuous mode [ 306.692124][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.705045][T10405] bridge_slave_0: left allmulticast mode [ 306.722213][T10405] bridge_slave_0: left promiscuous mode [ 306.728179][T13966] __nla_validate_parse: 4 callbacks suppressed [ 306.728199][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 306.751636][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.995013][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 307.682621][T10405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.695959][T10405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.708378][T10405] bond0 (unregistering): Released all slaves [ 307.769846][T13962] lo speed is unknown, defaulting to 1000 [ 308.015474][T14001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2220'. [ 308.036355][T14000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2220'. [ 308.178326][T13962] chnl_net:caif_netlink_parms(): no params data found [ 308.336260][T10405] hsr_slave_0: left promiscuous mode [ 308.357140][T10405] hsr_slave_1: left promiscuous mode [ 308.394896][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.413064][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.432676][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.460789][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.509518][T14037] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2228'. [ 308.541950][T14034] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.546992][T10405] veth1_macvtap: left promiscuous mode [ 308.551557][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 308.572752][T10405] veth0_macvtap: left promiscuous mode [ 308.582510][T10405] veth1_vlan: left promiscuous mode [ 308.588787][T10405] veth0_vlan: left promiscuous mode [ 308.765754][ T5144] Bluetooth: hci3: command tx timeout [ 308.899310][T14051] raw_sendmsg: syz.4.2233 forgot to set AF_INET. Fix it! [ 308.917295][T14051] netlink: 'syz.4.2233': attribute type 9 has an invalid length. [ 309.658150][T10405] team0 (unregistering): Port device team_slave_1 removed [ 309.757313][T10405] team0 (unregistering): Port device team_slave_0 removed [ 310.359788][T14064] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2237'. [ 310.377556][T14077] netlink: 'syz.2.2240': attribute type 12 has an invalid length. [ 310.445911][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.454853][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.462857][T13962] bridge_slave_0: entered allmulticast mode [ 310.470328][T13962] bridge_slave_0: entered promiscuous mode [ 310.485098][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.492555][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.505987][T13962] bridge_slave_1: entered allmulticast mode [ 310.523244][T13962] bridge_slave_1: entered promiscuous mode [ 310.577205][T14084] netlink: zone id is out of range [ 310.590485][T14084] netlink: set zone limit has 8 unknown bytes [ 310.613251][T13962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.663537][T13962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.817042][T14092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 310.829853][T13962] team0: Port device team_slave_0 added [ 310.841777][ T5144] Bluetooth: hci3: command tx timeout [ 310.880196][T14093] veth4: entered allmulticast mode [ 310.939569][T13962] team0: Port device team_slave_1 added [ 311.016806][T13962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.031317][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.089055][T13962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.101052][T14098] netlink: zone id is out of range [ 311.125027][T14098] netlink: zone id is out of range [ 311.137667][T14098] netlink: zone id is out of range [ 311.143252][T14098] netlink: zone id is out of range [ 311.183514][T13962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.190724][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.218333][T13962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.234984][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2249'. [ 311.241932][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2249'. [ 311.314245][T13962] hsr_slave_0: entered promiscuous mode [ 311.364453][T13962] hsr_slave_1: entered promiscuous mode [ 311.833352][T14128] __nla_validate_parse: 1 callbacks suppressed [ 311.833375][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'. [ 311.845219][T14131] xt_HMARK: spi-set and port-set can't be combined [ 311.851280][T14128] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2258'. [ 311.969890][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 312.142879][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 312.414875][T13962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.426156][T13962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.439032][T13962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.465076][T13962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.587801][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 312.616489][T13962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.656706][T13962] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.680664][T10408] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.687868][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.726244][T10408] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.733462][T10408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.924881][ T5144] Bluetooth: hci3: command tx timeout [ 312.943578][T14177] x_tables: duplicate underflow at hook 1 [ 313.197417][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 313.221895][T14187] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 313.299692][T13962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.395911][T13962] veth0_vlan: entered promiscuous mode [ 313.419887][T13962] veth1_vlan: entered promiscuous mode [ 313.430103][T14194] syzkaller0: entered promiscuous mode [ 313.437830][T14194] syzkaller0: entered allmulticast mode [ 313.465360][T14194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2277'. [ 313.524544][T13962] veth0_macvtap: entered promiscuous mode [ 313.531204][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2277'. [ 313.562530][T13962] veth1_macvtap: entered promiscuous mode [ 313.590365][T13962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.650080][T13962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.682142][T13962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.690958][T13962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.701074][T13962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.711707][T13962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.922543][T14208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2280'. [ 313.934936][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.963607][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.020279][T10406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.029887][T10406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.042414][T14208] xt_l2tp: wrong L2TP version: 0 [ 314.327932][T14230] netlink: 'syz.4.2288': attribute type 11 has an invalid length. [ 314.412336][T14230] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2288'. [ 314.923029][T14275] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 315.548594][T10406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.594365][T14311] vlan4: entered promiscuous mode [ 315.726650][T14313] x_tables: duplicate underflow at hook 1 [ 316.541253][T10406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.902597][T10406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.174609][T10406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.217799][T14338] __nla_validate_parse: 4 callbacks suppressed [ 317.217823][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 317.249806][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.266917][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.276079][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.283868][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'. [ 317.296994][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.304958][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.315605][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.372658][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 317.389648][T14344] lo speed is unknown, defaulting to 1000 [ 317.772432][T14369] xt_HMARK: spi-set and port-set can't be combined [ 317.781645][T10406] bridge_slave_1: left allmulticast mode [ 317.787613][T10406] bridge_slave_1: left promiscuous mode [ 317.802476][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.824385][T10406] bridge_slave_0: left allmulticast mode [ 317.830147][T10406] bridge_slave_0: left promiscuous mode [ 317.836370][T14373] netlink: 1292 bytes leftover after parsing attributes in process `syz.4.2325'. [ 317.861949][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.989026][T14368] netlink: 'syz.1.2322': attribute type 11 has an invalid length. [ 318.485511][T10406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.496888][T10406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.507499][T10406] bond0 (unregistering): Released all slaves [ 318.518388][T14344] chnl_net:caif_netlink_parms(): no params data found [ 318.879229][T14409] netlink: 'syz.3.2334': attribute type 11 has an invalid length. [ 318.951607][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2336'. [ 319.176929][T10406] hsr_slave_0: left promiscuous mode [ 319.195817][T10406] hsr_slave_1: left promiscuous mode [ 319.213317][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.220857][T10406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.240334][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.256127][T10406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.337339][T10406] veth1_macvtap: left promiscuous mode [ 319.351685][T10406] veth0_macvtap: left promiscuous mode [ 319.374359][T10406] veth1_vlan: left promiscuous mode [ 319.397845][T10406] veth0_vlan: left promiscuous mode [ 319.403566][ T5838] Bluetooth: hci3: command tx timeout [ 319.557314][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 319.597239][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 319.610133][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 319.620087][T14455] netlink: 'syz.4.2343': attribute type 20 has an invalid length. [ 320.054060][T10406] team0 (unregistering): Port device team_slave_1 removed [ 320.105791][T10406] team0 (unregistering): Port device team_slave_0 removed [ 320.599117][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.608948][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.616832][T14344] bridge_slave_0: entered allmulticast mode [ 320.629121][T14344] bridge_slave_0: entered promiscuous mode [ 320.637029][T14450] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 320.663882][T14453] gre1: entered promiscuous mode [ 320.705437][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.723044][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.730354][T14344] bridge_slave_1: entered allmulticast mode [ 320.763413][T14344] bridge_slave_1: entered promiscuous mode [ 320.803382][T14461] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2345'. [ 320.823263][T14463] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2346'. [ 320.874836][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.923965][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.183462][T14344] team0: Port device team_slave_0 added [ 321.427541][T14344] team0: Port device team_slave_1 added [ 321.481798][ T5838] Bluetooth: hci3: command 0x041b tx timeout [ 321.501362][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.519275][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.589789][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.623450][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.630451][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.660158][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.740236][T14492] syzkaller0: entered promiscuous mode [ 321.747311][T14492] syzkaller0: entered allmulticast mode [ 321.769457][T14501] netlink: 'syz.4.2356': attribute type 4 has an invalid length. [ 321.781550][T14344] hsr_slave_0: entered promiscuous mode [ 321.788337][T14344] hsr_slave_1: entered promiscuous mode [ 321.927466][T14501] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 322.055356][T14504] team0: left allmulticast mode [ 322.060326][T14504] vlan2: left allmulticast mode [ 322.067954][T14504] team0: left promiscuous mode [ 322.073317][T14504] vlan2: left promiscuous mode [ 322.078687][T14504] bridge0: port 1(team0) entered disabled state [ 322.089824][T14504] bond3: (slave ipip0): Releasing backup interface [ 322.101049][T14504] team0: Port device vlan2 removed [ 323.561846][ T5144] Bluetooth: hci3: command 0x041b tx timeout [ 324.439267][T14507] netlink: 'syz.4.2358': attribute type 21 has an invalid length. [ 324.449981][T14507] __nla_validate_parse: 3 callbacks suppressed [ 324.450003][T14507] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2358'. [ 324.466659][T14507] netlink: 'syz.4.2358': attribute type 5 has an invalid length. [ 324.475297][T14507] netlink: 'syz.4.2358': attribute type 6 has an invalid length. [ 324.484234][T14507] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2358'. [ 324.914715][T14550] sctp: [Deprecated]: syz.4.2368 (pid 14550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.914715][T14550] Use struct sctp_sack_info instead [ 325.174931][T14554] ipip0: entered promiscuous mode [ 325.242658][T14344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.265760][T14344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.288102][T14344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.318697][T14344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.470154][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.490382][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.503310][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.510525][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.523541][T14566] ebt_among: src integrity fail: 30a [ 325.587342][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.594599][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.649416][ T5144] Bluetooth: hci3: command 0x041b tx timeout [ 325.917365][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.956411][T14344] veth0_vlan: entered promiscuous mode [ 325.969279][T14344] veth1_vlan: entered promiscuous mode [ 326.008291][T14344] veth0_macvtap: entered promiscuous mode [ 326.023751][T14344] veth1_macvtap: entered promiscuous mode [ 326.063704][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.092560][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.108322][T14344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.117547][T14344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.126632][T14344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.135819][T14344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.386094][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 326.403952][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.423449][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.494844][T10410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.502104][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 326.516217][T14603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2385'. [ 326.529489][T10410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.730546][T14615] ax25_connect(): syz.1.2388 uses autobind, please contact jreuter@yaina.de [ 326.948484][T14620] lo speed is unknown, defaulting to 1000 [ 326.951116][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 326.997665][T14632] netlink: 'syz.3.2393': attribute type 10 has an invalid length. [ 327.022608][T14632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2393'. [ 327.565449][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 327.598959][T14649] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 327.602609][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 327.611798][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 327.739225][T14661] netlink: 'syz.3.2400': attribute type 1 has an invalid length. [ 328.261129][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.428094][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.486878][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.587193][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.691056][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.701667][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.709314][ T61] bridge_slave_1: left allmulticast mode [ 329.712756][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.722665][ T61] bridge_slave_1: left promiscuous mode [ 329.728481][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.729431][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.744062][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 329.744709][ T61] bridge_slave_0: left allmulticast mode [ 329.757063][ T61] bridge_slave_0: left promiscuous mode [ 329.763283][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.765432][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.137884][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.149270][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.159994][ T61] bond0 (unregistering): Released all slaves [ 330.185419][T14684] lo speed is unknown, defaulting to 1000 [ 330.330729][T14684] chnl_net:caif_netlink_parms(): no params data found [ 330.420378][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.427853][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.435968][T14684] bridge_slave_0: entered allmulticast mode [ 330.444447][T14684] bridge_slave_0: entered promiscuous mode [ 330.452424][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.459681][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.467240][T14684] bridge_slave_1: entered allmulticast mode [ 330.474714][T14684] bridge_slave_1: entered promiscuous mode [ 330.497452][ T61] hsr_slave_0: left promiscuous mode [ 330.503846][ T61] hsr_slave_1: left promiscuous mode [ 330.509857][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.517607][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.527329][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.534885][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.558849][ T61] veth1_macvtap: left promiscuous mode [ 330.564673][ T61] veth0_macvtap: left promiscuous mode [ 330.570231][ T61] veth1_vlan: left promiscuous mode [ 330.575654][ T61] veth0_vlan: left promiscuous mode [ 331.038206][ T61] team0 (unregistering): Port device team_slave_1 removed [ 331.089095][ T61] team0 (unregistering): Port device team_slave_0 removed [ 331.579260][T14684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.594084][T14684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.634827][T14684] team0: Port device team_slave_0 added [ 331.667200][T14684] team0: Port device team_slave_1 added [ 331.715217][T14684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.724682][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.751612][T14684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.764976][T14684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.772226][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.798894][T14684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.809641][ T5144] Bluetooth: hci3: command tx timeout [ 331.868695][T14684] hsr_slave_0: entered promiscuous mode [ 331.875528][T14684] hsr_slave_1: entered promiscuous mode [ 332.190681][T14684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.200179][T14684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.209558][T14684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.219212][T14684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.281584][T14684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.307504][T14684] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.324163][T10405] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.331341][T10405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.346415][T10405] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.353599][T10405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.507591][T14684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.546792][T14684] veth0_vlan: entered promiscuous mode [ 332.558720][T14684] veth1_vlan: entered promiscuous mode [ 332.585587][T14684] veth0_macvtap: entered promiscuous mode [ 332.596330][T14684] veth1_macvtap: entered promiscuous mode [ 332.612971][T14684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.627655][T14684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.638732][T14684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.648830][T14684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.658052][T14684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.667138][T14684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.737608][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.745662][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.778830][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.786925][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.816552][T10408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.268671][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.277231][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.285536][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.298265][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.306247][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.316219][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.339555][T10408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.378100][T14697] lo speed is unknown, defaulting to 1000 [ 336.425030][T10408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.502605][T10408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.545215][T14697] chnl_net:caif_netlink_parms(): no params data found [ 336.623534][T14697] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.630774][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.638476][T14697] bridge_slave_0: entered allmulticast mode [ 336.645456][T14697] bridge_slave_0: entered promiscuous mode [ 336.654027][T14697] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.661305][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.669404][T14697] bridge_slave_1: entered allmulticast mode [ 336.676325][T14697] bridge_slave_1: entered promiscuous mode [ 336.716151][T10408] bridge_slave_1: left allmulticast mode [ 336.722810][T10408] bridge_slave_1: left promiscuous mode [ 336.728603][T10408] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.738462][T10408] bridge_slave_0: left allmulticast mode [ 336.744895][T10408] bridge_slave_0: left promiscuous mode [ 336.750693][T10408] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.117296][T10408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.129429][T10408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.140200][T10408] bond0 (unregistering): Released all slaves [ 337.163268][T14697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.175085][T14697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.210123][T14697] team0: Port device team_slave_0 added [ 337.237349][T14697] team0: Port device team_slave_1 added [ 337.300465][T14697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.308693][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.337523][T14697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.352937][T14697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.359952][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.386619][T14697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.447105][T14697] hsr_slave_0: entered promiscuous mode [ 337.454602][T14697] hsr_slave_1: entered promiscuous mode [ 337.460809][T14697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.468872][T14697] Cannot create hsr debugfs directory [ 337.503021][T10408] hsr_slave_0: left promiscuous mode [ 337.509160][T10408] hsr_slave_1: left promiscuous mode [ 337.518027][T10408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.525961][T10408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.536292][T10408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.543909][T10408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.565891][T10408] veth1_macvtap: left promiscuous mode [ 337.572966][T10408] veth0_macvtap: left promiscuous mode [ 337.578610][T10408] veth1_vlan: left promiscuous mode [ 337.584377][T10408] veth0_vlan: left promiscuous mode [ 338.070269][T10408] team0 (unregistering): Port device team_slave_1 removed [ 338.118654][T10408] team0 (unregistering): Port device team_slave_0 removed [ 338.453516][ T5144] Bluetooth: hci3: command tx timeout [ 339.144009][T14697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.163817][T14697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.173404][T14697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.183243][T14697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.245650][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.267625][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.279438][T10408] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.286628][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.302423][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.309552][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.456244][T14697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.496104][T14697] veth0_vlan: entered promiscuous mode [ 339.506909][T14697] veth1_vlan: entered promiscuous mode [ 339.535183][T14697] veth0_macvtap: entered promiscuous mode [ 339.545178][T14697] veth1_macvtap: entered promiscuous mode [ 339.562728][T14697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.577016][T14697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.588239][T14697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.597913][T14697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.607359][T14697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.616426][T14697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.674620][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.683082][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.710369][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.722600][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.494751][ T3510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.945823][ T3510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.113278][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.126866][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.146842][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.150682][ T3510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.167921][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.177311][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.186126][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.219693][ T3510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.249151][T14710] lo speed is unknown, defaulting to 1000 [ 343.364125][ T3510] bridge_slave_1: left allmulticast mode [ 343.369854][ T3510] bridge_slave_1: left promiscuous mode [ 343.376086][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.385539][ T3510] bridge_slave_0: left allmulticast mode [ 343.391213][ T3510] bridge_slave_0: left promiscuous mode [ 343.399271][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.785050][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.797154][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.808441][ T3510] bond0 (unregistering): Released all slaves [ 343.822847][T14710] chnl_net:caif_netlink_parms(): no params data found [ 343.948210][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.955901][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.964493][T14710] bridge_slave_0: entered allmulticast mode [ 343.971312][T14710] bridge_slave_0: entered promiscuous mode [ 343.979611][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.986830][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.994908][T14710] bridge_slave_1: entered allmulticast mode [ 344.002866][T14710] bridge_slave_1: entered promiscuous mode [ 344.059544][T14710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.071746][T14710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.115959][T14710] team0: Port device team_slave_0 added [ 344.126429][ T3510] hsr_slave_0: left promiscuous mode [ 344.134868][ T3510] hsr_slave_1: left promiscuous mode [ 344.140928][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.149262][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.159706][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.168236][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.192563][ T3510] veth1_macvtap: left promiscuous mode [ 344.198111][ T3510] veth0_macvtap: left promiscuous mode [ 344.203838][ T3510] veth1_vlan: left promiscuous mode [ 344.209148][ T3510] veth0_vlan: left promiscuous mode [ 344.668965][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 344.719176][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 345.179374][T14710] team0: Port device team_slave_1 added [ 345.228592][T14710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.236208][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.261600][ T5838] Bluetooth: hci3: command tx timeout [ 345.263209][T14710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.281010][T14710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.288085][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.321980][T14710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.384429][T14710] hsr_slave_0: entered promiscuous mode [ 345.390869][T14710] hsr_slave_1: entered promiscuous mode [ 345.689492][T14710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.698777][T14710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.709435][T14710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.720140][T14710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.783682][T14710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.804081][T14710] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.816647][T10405] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.823864][T10405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.837398][T10408] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.844531][T10408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.995633][T14710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.033147][T14710] veth0_vlan: entered promiscuous mode [ 346.045367][T14710] veth1_vlan: entered promiscuous mode [ 346.070692][T14710] veth0_macvtap: entered promiscuous mode [ 346.080118][T14710] veth1_macvtap: entered promiscuous mode [ 346.097351][T14710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.115191][T14710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.127939][T14710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.137722][T14710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.147217][T14710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.156080][T14710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.227633][T10406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.247573][T10406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.266701][T10408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.275684][T10408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.115187][T10406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.624778][T10406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.711938][T10406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.795493][T10406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.826597][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.836081][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.851298][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.862331][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.870177][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.878270][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.906297][T10406] bridge_slave_1: left allmulticast mode [ 349.912795][T10406] bridge_slave_1: left promiscuous mode [ 349.918496][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.927411][T10406] bridge_slave_0: left allmulticast mode [ 349.933644][T10406] bridge_slave_0: left promiscuous mode [ 349.939330][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.306198][T10406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.317499][T10406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.328487][T10406] bond0 (unregistering): Released all slaves [ 350.355017][T14723] lo speed is unknown, defaulting to 1000 [ 350.537114][T14723] chnl_net:caif_netlink_parms(): no params data found [ 350.586300][T10406] hsr_slave_0: left promiscuous mode [ 350.593200][T10406] hsr_slave_1: left promiscuous mode [ 350.599209][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.606898][T10406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.615330][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.623290][T10406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.647509][T10406] veth1_macvtap: left promiscuous mode [ 350.653549][T10406] veth0_macvtap: left promiscuous mode [ 350.659220][T10406] veth1_vlan: left promiscuous mode [ 350.664651][T10406] veth0_vlan: left promiscuous mode [ 351.132380][T10406] team0 (unregistering): Port device team_slave_1 removed [ 351.189204][T10406] team0 (unregistering): Port device team_slave_0 removed [ 351.677899][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.685418][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.692938][T14723] bridge_slave_0: entered allmulticast mode [ 351.699717][T14723] bridge_slave_0: entered promiscuous mode [ 351.709582][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.717649][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.725385][T14723] bridge_slave_1: entered allmulticast mode [ 351.734988][T14723] bridge_slave_1: entered promiscuous mode [ 351.778908][T14723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.790392][T14723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.868287][T14723] team0: Port device team_slave_0 added [ 351.886714][T14723] team0: Port device team_slave_1 added [ 351.910389][T14723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.917508][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.943825][T14723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.957333][T14723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.962099][ T5144] Bluetooth: hci3: command tx timeout [ 351.966966][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.996909][T14723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.042731][T14723] hsr_slave_0: entered promiscuous mode [ 352.049143][T14723] hsr_slave_1: entered promiscuous mode [ 352.411028][T14723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.420380][T14723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.429722][T14723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.439400][T14723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.459892][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.467179][T14723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.474642][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.481804][T14723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.535198][T14723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.550303][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.560762][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.583693][T14723] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.598891][T10405] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.606055][T10405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.618685][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.625886][T10406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.775372][T14723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.810321][T14723] veth0_vlan: entered promiscuous mode [ 352.823398][T14723] veth1_vlan: entered promiscuous mode [ 352.847963][T14723] veth0_macvtap: entered promiscuous mode [ 352.857577][T14723] veth1_macvtap: entered promiscuous mode [ 352.874221][T14723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.887121][T14723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.902601][T14723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.912994][T14723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.922051][T14723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.930841][T14723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.159551][T14751] __nla_validate_parse: 2 callbacks suppressed [ 353.159573][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 353.186724][T10410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.197861][T10410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.305844][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.327239][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.350186][T14759] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 353.495002][T14767] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 353.634640][T14771] sit0: left promiscuous mode [ 353.644942][T14771] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 353.706675][T14774] netlink: 'syz.4.2414': attribute type 27 has an invalid length. [ 353.949798][T14785] syz.4.2417 uses old SIOCAX25GETINFO [ 353.969385][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.988246][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.495959][T14798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2421'. [ 354.521792][T14798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2421'. [ 354.530879][T14798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2421'. [ 354.551509][T14798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2421'. [ 354.560516][T14798] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 354.624715][T14800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2420'. [ 355.370873][T10410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.929854][T10410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.995484][T10410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.081503][T10410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.326910][T14835] lo speed is unknown, defaulting to 1000 [ 357.342219][T14843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2433'. [ 357.419354][T10410] bridge_slave_1: left allmulticast mode [ 357.435157][T10410] bridge_slave_1: left promiscuous mode [ 357.456378][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.477777][T10410] bridge_slave_0: left allmulticast mode [ 357.488882][T10410] bridge_slave_0: left promiscuous mode [ 357.504748][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.512399][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 357.629852][T14856] sctp: [Deprecated]: syz.3.2435 (pid 14856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.629852][T14856] Use struct sctp_sack_info instead [ 357.683780][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.714213][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.728269][T14860] sctp: [Deprecated]: syz.1.2438 (pid 14860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.728269][T14860] Use struct sctp_sack_info instead [ 357.760956][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.778377][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.789699][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.797349][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.066584][T10410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.078242][T10410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.089185][T10410] bond0 (unregistering): Released all slaves [ 358.115717][T14855] bridge0: entered allmulticast mode [ 358.295551][T14857] lo speed is unknown, defaulting to 1000 [ 358.464062][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 358.530673][T10410] hsr_slave_0: left promiscuous mode [ 358.543619][T10410] hsr_slave_1: left promiscuous mode [ 358.551290][T10410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.559126][T10410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.567473][T10410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.575885][T10410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.575896][T14874] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2441'. [ 358.612310][T10410] veth1_macvtap: left promiscuous mode [ 358.617917][T10410] veth0_macvtap: left promiscuous mode [ 358.623641][T10410] veth1_vlan: left promiscuous mode [ 358.628927][T10410] veth0_vlan: left promiscuous mode [ 359.135988][T10410] team0 (unregistering): Port device team_slave_1 removed [ 359.182825][T10410] team0 (unregistering): Port device team_slave_0 removed [ 359.651249][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2441'. [ 359.660984][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2441'. [ 359.670085][T14871] netlink: 'syz.3.2441': attribute type 6 has an invalid length. [ 359.861979][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2445'. [ 359.891952][ T5144] Bluetooth: hci3: command tx timeout [ 359.913751][T14857] chnl_net:caif_netlink_parms(): no params data found [ 359.922610][T14886] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2445'. [ 360.127085][T14857] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.141946][T14857] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.149341][T14857] bridge_slave_0: entered allmulticast mode [ 360.159997][T14857] bridge_slave_0: entered promiscuous mode [ 360.182125][T14857] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.189391][T14857] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.207034][T14857] bridge_slave_1: entered allmulticast mode [ 360.234416][ T9] hid-generic 0005:0B57:0058.0001: item fetching failed at offset 0/1 [ 360.245068][T14857] bridge_slave_1: entered promiscuous mode [ 360.276490][ T9] hid-generic 0005:0B57:0058.0001: probe with driver hid-generic failed with error -22 [ 360.314597][T14897] pimreg3: entered allmulticast mode [ 360.360303][T14857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.382731][T14897] pimreg3: left allmulticast mode [ 360.437086][T14857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.485954][T14914] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 360.494088][T14913] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 360.502707][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.514219][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.536393][T14907] lo speed is unknown, defaulting to 1000 [ 360.536616][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.565711][T14857] team0: Port device team_slave_0 added [ 360.583927][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.595796][T14857] team0: Port device team_slave_1 added [ 360.694229][T14857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.708171][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.735785][T14857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.806867][T14857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.821602][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.848074][T14857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.107779][T14857] hsr_slave_0: entered promiscuous mode [ 361.134066][T14857] hsr_slave_1: entered promiscuous mode [ 361.178497][T14940] xt_TCPMSS: Only works on TCP SYN packets [ 361.195649][T14940] netlink: 'syz.3.2460': attribute type 10 has an invalid length. [ 361.214471][T14926] lo speed is unknown, defaulting to 1000 [ 361.266295][T14946] netlink: 'syz.2.2461': attribute type 12 has an invalid length. [ 361.306834][T14946] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 361.461333][T14952] bridge_slave_0: mtu greater than device maximum [ 361.981811][ T5144] Bluetooth: hci3: command tx timeout [ 362.134947][T14857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.203438][T14986] pim6reg: entered allmulticast mode [ 362.218164][T14857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.261956][T14857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.286687][T14857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.596545][T14857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.662322][T14857] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.696844][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.704140][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.775597][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.782927][T10410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.836165][T15003] ax25_connect(): syz.1.2479 uses autobind, please contact jreuter@yaina.de [ 362.856835][T15003] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 362.884183][T15003] team0: Port device wlan1 added [ 362.974023][T15003] sctp: [Deprecated]: syz.1.2479 (pid 15003) Use of int in maxseg socket option. [ 362.974023][T15003] Use struct sctp_assoc_value instead [ 363.287544][T15020] macsec0: entered promiscuous mode [ 363.301971][T15020] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 363.312960][T15020] macsec0: entered allmulticast mode [ 363.318330][T15020] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 363.345585][T14857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.423372][T14857] veth0_vlan: entered promiscuous mode [ 363.434642][T14857] veth1_vlan: entered promiscuous mode [ 363.459565][T14857] veth0_macvtap: entered promiscuous mode [ 363.460065][T15024] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 363.469141][T14857] veth1_macvtap: entered promiscuous mode [ 363.492492][T14857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.529942][T14857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.537881][T15022] __nla_validate_parse: 5 callbacks suppressed [ 363.537902][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2485'. [ 363.558610][T14857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.594035][T14857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.614403][T14857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.634506][T14857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.646432][T15030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2489'. [ 363.809496][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.841740][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.906848][T10406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.927709][T10406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.000103][T15045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.046935][ T5144] Bluetooth: hci3: command tx timeout [ 364.190132][T15057] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2494'. [ 364.223804][T15056] lo speed is unknown, defaulting to 1000 [ 364.272525][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 364.291276][T15060] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024) [ 364.444823][T15068] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2498'. [ 364.538280][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2498'. [ 364.548121][T15069] netlink: 'syz.1.2498': attribute type 7 has an invalid length. [ 364.562070][T15069] netlink: 'syz.1.2498': attribute type 8 has an invalid length. [ 364.581993][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'. [ 364.648615][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'. [ 364.660730][T15074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2499'. [ 364.671024][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2498'. [ 364.685068][T15069] netlink: 'syz.1.2498': attribute type 7 has an invalid length. [ 364.694501][T15069] netlink: 'syz.1.2498': attribute type 8 has an invalid length. [ 364.700970][T15071] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024) [ 364.772041][T15076] netlink: 'syz.3.2500': attribute type 1 has an invalid length. [ 365.157883][ T3510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.870899][ T3510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.678842][ T3510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.742054][ T3510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.838773][ T3510] bridge_slave_1: left allmulticast mode [ 366.846233][ T3510] bridge_slave_1: left promiscuous mode [ 366.852349][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.861194][ T3510] bridge_slave_0: left allmulticast mode [ 366.868178][ T3510] bridge_slave_0: left promiscuous mode [ 366.875712][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.457802][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.474507][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.490172][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.523452][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.539407][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.547184][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.734268][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.755964][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.777641][ T3510] bond0 (unregistering): Released all slaves [ 367.875846][T15104] lo speed is unknown, defaulting to 1000 [ 367.901133][T15119] lo: entered allmulticast mode [ 367.917007][T15119] bridge2: entered allmulticast mode [ 367.923223][T15119] vlan2: entered allmulticast mode [ 367.928506][T15119] bridge3: entered allmulticast mode [ 367.934201][T15119] bridge4: entered allmulticast mode [ 367.939616][T15119] veth4: entered allmulticast mode [ 367.946395][T15119] veth5: entered allmulticast mode [ 367.952804][T15119] vlan3: entered allmulticast mode [ 367.958081][T15119] xfrm2: entered allmulticast mode [ 367.963579][T15119] bridge0: entered allmulticast mode [ 367.969015][T15119] gretap2: entered allmulticast mode [ 367.974527][T15119] ÿÿ: entered allmulticast mode [ 367.979520][T15119] bond2: entered allmulticast mode [ 367.985265][T15119] veth6: entered allmulticast mode [ 367.990644][T15119] veth7: entered allmulticast mode [ 367.995931][T15119] : entered allmulticast mode [ 368.000784][T15119] ip6_vti1: entered allmulticast mode [ 368.006601][T15119] bridge5: entered allmulticast mode [ 368.014174][T15119] gre1: left promiscuous mode [ 368.018904][T15119] gre1: entered allmulticast mode [ 368.025682][T15119] gre0.0: entered allmulticast mode [ 368.031018][T15119] bridge6: entered allmulticast mode [ 368.036536][T15119] netdevsim netdevsim3 eth0: entered allmulticast mode [ 368.044848][T15119] netdevsim netdevsim3 eth1: entered allmulticast mode [ 368.052158][T15119] netdevsim netdevsim3 eth2: entered allmulticast mode [ 368.059415][T15119] netdevsim netdevsim3 eth3: entered allmulticast mode [ 368.205112][T15122] lo speed is unknown, defaulting to 1000 [ 368.301733][T15135] sctp: [Deprecated]: syz.4.2512 (pid 15135) Use of int in maxseg socket option. [ 368.301733][T15135] Use struct sctp_assoc_value instead [ 368.496780][ T3510] hsr_slave_0: left promiscuous mode [ 368.504276][ T3510] hsr_slave_1: left promiscuous mode [ 368.524345][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.532479][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.540740][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.548752][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.579414][ T3510] veth1_macvtap: left promiscuous mode [ 368.585496][ T3510] veth0_macvtap: left promiscuous mode [ 368.593358][ T3510] veth1_vlan: left promiscuous mode [ 368.598839][ T3510] veth0_vlan: left promiscuous mode [ 369.099322][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 369.149959][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 369.725220][ T5144] Bluetooth: hci3: command tx timeout [ 369.812104][T15122] chnl_net:caif_netlink_parms(): no params data found [ 370.121880][T15170] __nla_validate_parse: 3 callbacks suppressed [ 370.121902][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 370.288871][T15122] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.313333][T15122] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.320675][T15122] bridge_slave_0: entered allmulticast mode [ 370.342840][T15122] bridge_slave_0: entered promiscuous mode [ 370.353367][T15122] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.360641][T15122] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.382512][T15122] bridge_slave_1: entered allmulticast mode [ 370.389751][T15122] bridge_slave_1: entered promiscuous mode [ 370.490541][T15122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.504452][T15122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.569776][T15122] team0: Port device team_slave_0 added [ 370.604173][T15122] team0: Port device team_slave_1 added [ 370.650076][T15122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.658735][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.694374][T15122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.717178][T15122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.724974][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.753294][T15192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2525'. [ 370.754688][T15122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.814318][T15122] hsr_slave_0: entered promiscuous mode [ 370.820979][T15122] hsr_slave_1: entered promiscuous mode [ 370.829168][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 370.883765][T15192] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2525'. [ 370.920787][T15198] bridge7: entered promiscuous mode [ 370.926341][T15198] bridge7: entered allmulticast mode [ 370.969527][T15194] bridge0: port 2(ip6gretap0) entered blocking state [ 370.977476][T15194] bridge0: port 2(ip6gretap0) entered disabled state [ 370.984930][T15194] ip6gretap0: entered allmulticast mode [ 370.992153][T15194] ip6gretap0: entered promiscuous mode [ 371.317249][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 371.337045][T15216] IPVS: Unknown mcast interface: batadv0 [ 371.385358][T15219] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 371.581827][T15232] netlink: 'syz.4.2535': attribute type 2 has an invalid length. [ 371.623422][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2535'. [ 371.710369][T15241] lo speed is unknown, defaulting to 1000 [ 371.801573][ T5144] Bluetooth: hci3: command tx timeout [ 371.811010][T15122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.889457][T15122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.914802][T15122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.968390][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 372.018516][T15122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.138608][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2541'. [ 372.326745][T15122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.394389][T15122] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.417643][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.424879][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.465732][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.472960][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.518195][T15241] xt_policy: output policy not valid in PREROUTING and INPUT [ 372.540570][T15272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2545'. [ 372.716621][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 372.833051][T15275] tc_dump_action: action bad kind [ 372.865772][T15122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.991196][T15286] pimreg: entered allmulticast mode [ 373.019276][T15286] pimreg: left allmulticast mode [ 373.065064][T15287] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.109902][T15122] veth0_vlan: entered promiscuous mode [ 373.144453][T15122] veth1_vlan: entered promiscuous mode [ 373.175985][T15287] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.254624][T15287] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.357026][T15287] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.414937][T15122] veth0_macvtap: entered promiscuous mode [ 373.434107][T15122] veth1_macvtap: entered promiscuous mode [ 373.470265][T15122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.504077][T15122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.533325][T15122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.573227][T15122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.594166][T15122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.614549][T15122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.646879][T15287] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.684567][T15287] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.716981][T15287] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.784568][T15287] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.852249][T10410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.882294][ T5144] Bluetooth: hci3: command tx timeout [ 373.893000][T10410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.962889][T10410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.970843][T10410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.050928][T15327] lo speed is unknown, defaulting to 1000 [ 374.503852][T15327] lo speed is unknown, defaulting to 1000 [ 374.545952][T15347] gretap2: entered allmulticast mode [ 375.314996][T15378] xt_nfacct: accounting object `sy' does not exists [ 375.414351][T15358] bond0: (slave netdevsim0): Releasing backup interface [ 375.648429][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.258557][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.307170][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.391229][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.471222][ T61] bridge_slave_1: left allmulticast mode [ 376.477044][ T61] bridge_slave_1: left promiscuous mode [ 376.483074][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.492638][ T61] bridge_slave_0: left allmulticast mode [ 376.498359][ T61] bridge_slave_0: left promiscuous mode [ 376.504523][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.909355][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.920658][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.932314][ T61] bond0 (unregistering): Released all slaves [ 377.184886][ T61] hsr_slave_0: left promiscuous mode [ 377.190929][ T61] hsr_slave_1: left promiscuous mode [ 377.197269][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.206615][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.214942][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.222809][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.246217][ T61] veth1_macvtap: left promiscuous mode [ 377.251899][ T61] veth0_macvtap: left promiscuous mode [ 377.257464][ T61] veth1_vlan: left promiscuous mode [ 377.263174][ T61] veth0_vlan: left promiscuous mode [ 377.408768][T15392] __nla_validate_parse: 5 callbacks suppressed [ 377.408790][T15392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2577'. [ 377.472778][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 377.709486][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.736436][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.747969][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.758705][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.773087][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.781484][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.031054][ T61] team0 (unregistering): Port device team_slave_1 removed [ 378.089251][ T61] team0 (unregistering): Port device team_slave_0 removed [ 378.604518][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 378.615048][T15399] tap0: tun_chr_ioctl cmd 1074025677 [ 378.620594][T15399] tap0: linktype set to 781 [ 378.710213][T15404] lo speed is unknown, defaulting to 1000 [ 379.003482][T15427] netlink: 'syz.3.2585': attribute type 2 has an invalid length. [ 379.034652][T15404] chnl_net:caif_netlink_parms(): no params data found [ 379.511780][T15430] lo speed is unknown, defaulting to 1000 [ 379.596761][T15404] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.604740][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.622055][T15404] bridge_slave_0: entered allmulticast mode [ 379.629989][T15404] bridge_slave_0: entered promiscuous mode [ 379.670400][T15404] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.681028][T15404] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.688553][T15404] bridge_slave_1: entered allmulticast mode [ 379.699589][T15404] bridge_slave_1: entered promiscuous mode [ 379.842468][T15404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.881625][ T5144] Bluetooth: hci3: command tx timeout [ 379.890378][T15404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.988310][T15404] team0: Port device team_slave_0 added [ 380.015466][T15404] team0: Port device team_slave_1 added [ 380.046141][T15464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2593'. [ 380.128005][T15404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.136346][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.165141][T15404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.180270][T15404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.188966][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.237318][T15404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.353720][T15404] hsr_slave_0: entered promiscuous mode [ 380.374154][T15404] hsr_slave_1: entered promiscuous mode [ 380.493767][T15478] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.708609][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 380.930435][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'. [ 380.967960][T15512] sctp: [Deprecated]: syz.1.2605 (pid 15512) Use of int in max_burst socket option. [ 380.967960][T15512] Use struct sctp_assoc_value instead [ 381.295255][T15404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.313464][T15404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.340917][T15404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.357299][T15532] openvswitch: netlink: Tunnel attr 308 out of range max 16 [ 381.372751][T15404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.386629][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 381.451798][T15534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.498908][T15538] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 381.616455][T15404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.642233][T15538] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 381.646555][T15404] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.673894][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.681115][T10410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.710472][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.717715][T10410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.852713][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 381.865705][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 381.920448][T15545] bond5: entered promiscuous mode [ 381.928245][T15545] bond5: entered allmulticast mode [ 381.933936][T15545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.961957][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 381.973105][ T5144] Bluetooth: hci3: command tx timeout [ 382.046718][T15552] veth0_to_bridge: entered promiscuous mode [ 382.090151][T15404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.153116][T15550] veth0_to_bridge: left promiscuous mode [ 382.174817][T15404] veth0_vlan: entered promiscuous mode [ 382.194341][T15404] veth1_vlan: entered promiscuous mode [ 382.194667][T15560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.226241][T15404] veth0_macvtap: entered promiscuous mode [ 382.235713][T15404] veth1_macvtap: entered promiscuous mode [ 382.253486][T15404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.265247][T15404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.276474][T15404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.286953][T15404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.296421][T15404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.305340][T15404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.466386][T15569] __nla_validate_parse: 1 callbacks suppressed [ 382.466408][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 382.486154][T10405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.496263][T10405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.522161][T15573] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2620'. [ 382.563409][T10408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.572277][T10408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.804525][T15586] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2624'. [ 382.827082][T15585] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2624'. [ 382.835885][T15590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2626'. [ 382.838930][T15585] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2624'. [ 382.861659][T15586] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2624'. [ 383.027104][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2627'. [ 383.046734][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2628'. [ 383.057017][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2627'. [ 383.090475][T15602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 383.193101][T15607] netlink: 'syz.3.2630': attribute type 10 has an invalid length. [ 383.493686][T15632] erspan1: entered promiscuous mode [ 383.499179][T15632] erspan1: entered allmulticast mode [ 383.502448][T15634] xt_hashlimit: overflow, try lower: 0/0 [ 384.120958][T15667] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 384.356728][T10412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.933016][T10412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.000594][T10412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.060958][T10412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.156865][T10412] bridge_slave_1: left allmulticast mode [ 386.163729][T10412] bridge_slave_1: left promiscuous mode [ 386.169468][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.178292][T10412] bridge_slave_0: left allmulticast mode [ 386.184552][T10412] bridge_slave_0: left promiscuous mode [ 386.190277][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.844763][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.861092][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.882683][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.945723][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.954550][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.963812][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.020608][T15711] xt_nfacct: accounting object `sy' does not exists [ 387.083842][T10412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.095900][T10412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.106871][T10412] bond0 (unregistering): Released all slaves [ 387.129066][T15703] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 387.137532][T15703] netlink: 'syz.2.2657': attribute type 4 has an invalid length. [ 387.152274][T15703] netlink: 'syz.2.2657': attribute type 5 has an invalid length. [ 387.171574][T15702] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 387.205043][T15702] netlink: 'syz.2.2657': attribute type 4 has an invalid length. [ 387.213108][T15702] netlink: 'syz.2.2657': attribute type 5 has an invalid length. [ 387.271305][T15717] tap0: tun_chr_ioctl cmd 1074025677 [ 387.283481][T15717] tap0: linktype set to 256 [ 387.288655][T15718] tap0: tun_chr_ioctl cmd 1074025698 [ 387.339520][T15725] sctp: [Deprecated]: syz.1.2660 (pid 15725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.339520][T15725] Use struct sctp_sack_info instead [ 387.370476][T15706] lo speed is unknown, defaulting to 1000 [ 387.539287][T10412] hsr_slave_0: left promiscuous mode [ 387.545974][T10412] hsr_slave_1: left promiscuous mode [ 387.555029][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.569109][T10412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.578922][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.586857][T10412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.613203][T10412] veth1_macvtap: left promiscuous mode [ 387.620594][T10412] veth0_macvtap: left promiscuous mode [ 387.626510][T10412] veth1_vlan: left promiscuous mode [ 387.633633][T10412] veth0_vlan: left promiscuous mode [ 388.239529][T10412] team0 (unregistering): Port device team_slave_1 removed [ 388.250068][T15740] __nla_validate_parse: 13 callbacks suppressed [ 388.250094][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 388.299826][T10412] team0 (unregistering): Port device team_slave_0 removed [ 389.082465][ T5144] Bluetooth: hci3: command tx timeout [ 389.119949][T15706] chnl_net:caif_netlink_parms(): no params data found [ 389.209470][T15760] ªªªªªª: renamed from syzkaller0 (while UP) [ 389.285757][T15763] netlink: 'syz.2.2672': attribute type 3 has an invalid length. [ 389.411348][T15764] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 389.429752][T15766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.432053][T15764] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 389.470647][T15706] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.482519][T15706] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.490480][T15706] bridge_slave_0: entered allmulticast mode [ 389.499047][T15706] bridge_slave_0: entered promiscuous mode [ 389.534340][T15706] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.551236][T15706] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.562656][T15706] bridge_slave_1: entered allmulticast mode [ 389.570001][T15706] bridge_slave_1: entered promiscuous mode [ 389.660978][T15792] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2677'. [ 389.703233][T15799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2676'. [ 389.793774][T15802] netlink: 'syz.4.2678': attribute type 27 has an invalid length. [ 389.852246][T15788] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 389.863241][T15788] ------------[ cut here ]------------ [ 389.868772][T15788] WARNING: CPU: 0 PID: 15788 at net/core/dev.c:9575 unregister_netdevice_many_notify+0x18c8/0x1da0 [ 389.879875][T15788] Modules linked in: [ 389.883998][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.3.2675 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 389.895227][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.905486][T15788] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 389.912806][T15788] Code: 08 f8 90 0f 0b 90 e9 4f ff ff ff e8 62 9d 08 f8 90 0f 0b 90 eb 9d e8 57 9d 08 f8 90 0f 0b 90 e9 e8 f1 ff ff e8 49 9d 08 f8 90 <0f> 0b 90 e9 5a f3 ff ff e8 3b 9d 08 f8 90 0f 0b 90 e9 cd f4 ff ff [ 389.932836][T15788] RSP: 0018:ffffc900042f6fa0 EFLAGS: 00010287 [ 389.939011][T15788] RAX: ffffffff8996d6a7 RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 389.947067][T15788] RDX: ffffc9000d0ec000 RSI: 0000000000003699 RDI: 000000000000369a [ 389.955201][T15788] RBP: ffffc900042f7190 R08: ffffffff8996c9fd R09: fffffbfff1cfa210 [ 389.963477][T15788] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffffc900099d1000 [ 389.971569][T15788] R13: 1ffff1100e7f4184 R14: ffff888073fa0c20 R15: ffff888073fa0c18 [ 389.979590][T15788] FS: 00007facac8f96c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 389.988616][T15788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.995610][T15788] CR2: 000000110c3a1a49 CR3: 0000000024c3c000 CR4: 00000000003526f0 [ 390.003816][T15788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.011916][T15788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.019941][T15788] Call Trace: [ 390.023610][T15788] [ 390.026562][T15788] ? __warn+0x165/0x4d0 [ 390.030740][T15788] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.037423][T15788] ? report_bug+0x2b3/0x500 [ 390.042053][T15788] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.048714][T15788] ? handle_bug+0x60/0x90 [ 390.053489][T15788] ? exc_invalid_op+0x1a/0x50 [ 390.057362][T15809] netlink: 'syz.4.2679': attribute type 1 has an invalid length. [ 390.058209][T15788] ? asm_exc_invalid_op+0x1a/0x20 [ 390.058261][T15788] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 390.077688][T15788] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 390.084641][T15788] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.091283][T15788] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 390.098175][T15788] ? rtnl_dellink+0x394/0x8d0 [ 390.102944][T15788] ? unregister_netdevice_queue+0x26b/0x370 [ 390.108915][T15788] ? __nla_parse+0x40/0x60 [ 390.113622][T15788] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 390.119910][T15788] rtnl_dellink+0x52b/0x8d0 [ 390.124649][T15788] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.129752][T15788] ? validate_chain+0x11e/0x5920 [ 390.134823][T15788] ? __pfx_lock_acquire+0x10/0x10 [ 390.139912][T15788] ? __pfx_lock_release+0x10/0x10 [ 390.145338][T15788] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.150494][T15788] rtnetlink_rcv_msg+0x791/0xcf0 [ 390.155558][T15788] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 390.160704][T15788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.166238][T15788] netlink_rcv_skb+0x1e3/0x430 [ 390.171037][T15788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.176781][T15788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.182169][T15788] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.187420][T15788] netlink_unicast+0x7f6/0x990 [ 390.192755][T15788] ? __pfx_netlink_unicast+0x10/0x10 [ 390.198105][T15788] ? __virt_addr_valid+0x45f/0x530 [ 390.203641][T15788] ? __phys_addr_symbol+0x2f/0x70 [ 390.208727][T15788] ? __check_object_size+0x47a/0x730 [ 390.214169][T15788] netlink_sendmsg+0x8e4/0xcb0 [ 390.219015][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.224456][T15788] ? aa_sock_msg_perm+0x91/0x160 [ 390.229447][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.235090][T15788] __sock_sendmsg+0x221/0x270 [ 390.239840][T15788] ____sys_sendmsg+0x52a/0x7e0 [ 390.244711][T15788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.250049][T15788] ? __fget_files+0x2a/0x410 [ 390.254805][T15788] ? __fget_files+0x2a/0x410 [ 390.259477][T15788] __sys_sendmsg+0x269/0x350 [ 390.264370][T15788] ? __pfx_futex_wake+0x10/0x10 [ 390.269384][T15788] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.274712][T15788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.281107][T15788] ? do_syscall_64+0x100/0x230 [ 390.286016][T15788] ? do_syscall_64+0xb6/0x230 [ 390.290762][T15788] do_syscall_64+0xf3/0x230 [ 390.295634][T15788] ? clear_bhb_loop+0x35/0x90 [ 390.300343][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.306307][T15788] RIP: 0033:0x7facabb85d29 [ 390.310744][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.330735][T15788] RSP: 002b:00007facac8f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.339368][T15788] RAX: ffffffffffffffda RBX: 00007facabd75fa0 RCX: 00007facabb85d29 [ 390.347425][T15788] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000a [ 390.355763][T15788] RBP: 00007facabc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 390.363837][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.371912][T15788] R13: 0000000000000000 R14: 00007facabd75fa0 R15: 00007ffc3e10bb58 [ 390.380060][T15788] [ 390.383556][T15788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.390882][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.3.2675 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 390.401676][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.411756][T15788] Call Trace: [ 390.415072][T15788] [ 390.418032][T15788] dump_stack_lvl+0x241/0x360 [ 390.422754][T15788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.427990][T15788] ? __pfx__printk+0x10/0x10 [ 390.432605][T15788] ? _printk+0xd5/0x120 [ 390.436789][T15788] ? __init_begin+0x41000/0x41000 [ 390.441833][T15788] ? vscnprintf+0x5d/0x90 [ 390.446190][T15788] panic+0x349/0x880 [ 390.450143][T15788] ? __warn+0x174/0x4d0 [ 390.454329][T15788] ? __pfx_panic+0x10/0x10 [ 390.458782][T15788] __warn+0x344/0x4d0 [ 390.462804][T15788] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.469417][T15788] report_bug+0x2b3/0x500 [ 390.473769][T15788] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.480381][T15788] handle_bug+0x60/0x90 [ 390.484557][T15788] exc_invalid_op+0x1a/0x50 [ 390.489100][T15788] asm_exc_invalid_op+0x1a/0x20 [ 390.493967][T15788] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 390.501186][T15788] Code: 08 f8 90 0f 0b 90 e9 4f ff ff ff e8 62 9d 08 f8 90 0f 0b 90 eb 9d e8 57 9d 08 f8 90 0f 0b 90 e9 e8 f1 ff ff e8 49 9d 08 f8 90 <0f> 0b 90 e9 5a f3 ff ff e8 3b 9d 08 f8 90 0f 0b 90 e9 cd f4 ff ff [ 390.520813][T15788] RSP: 0018:ffffc900042f6fa0 EFLAGS: 00010287 [ 390.526908][T15788] RAX: ffffffff8996d6a7 RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 390.534893][T15788] RDX: ffffc9000d0ec000 RSI: 0000000000003699 RDI: 000000000000369a [ 390.542876][T15788] RBP: ffffc900042f7190 R08: ffffffff8996c9fd R09: fffffbfff1cfa210 [ 390.550863][T15788] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffffc900099d1000 [ 390.558847][T15788] R13: 1ffff1100e7f4184 R14: ffff888073fa0c20 R15: ffff888073fa0c18 [ 390.566844][T15788] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 390.573379][T15788] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 390.580015][T15788] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 390.586809][T15788] ? rtnl_dellink+0x394/0x8d0 [ 390.591525][T15788] ? unregister_netdevice_queue+0x26b/0x370 [ 390.597474][T15788] ? __nla_parse+0x40/0x60 [ 390.601911][T15788] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 390.608173][T15788] rtnl_dellink+0x52b/0x8d0 [ 390.612706][T15788] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.617778][T15788] ? validate_chain+0x11e/0x5920 [ 390.622765][T15788] ? __pfx_lock_acquire+0x10/0x10 [ 390.627817][T15788] ? __pfx_lock_release+0x10/0x10 [ 390.632912][T15788] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.637963][T15788] rtnetlink_rcv_msg+0x791/0xcf0 [ 390.642921][T15788] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 390.648074][T15788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.653652][T15788] netlink_rcv_skb+0x1e3/0x430 [ 390.658435][T15788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.663923][T15788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.669256][T15788] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.674480][T15788] netlink_unicast+0x7f6/0x990 [ 390.679264][T15788] ? __pfx_netlink_unicast+0x10/0x10 [ 390.684564][T15788] ? __virt_addr_valid+0x45f/0x530 [ 390.689695][T15788] ? __phys_addr_symbol+0x2f/0x70 [ 390.694738][T15788] ? __check_object_size+0x47a/0x730 [ 390.700048][T15788] netlink_sendmsg+0x8e4/0xcb0 [ 390.704840][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.710147][T15788] ? aa_sock_msg_perm+0x91/0x160 [ 390.715108][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.720412][T15788] __sock_sendmsg+0x221/0x270 [ 390.725123][T15788] ____sys_sendmsg+0x52a/0x7e0 [ 390.729915][T15788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.735218][T15788] ? __fget_files+0x2a/0x410 [ 390.739835][T15788] ? __fget_files+0x2a/0x410 [ 390.744454][T15788] __sys_sendmsg+0x269/0x350 [ 390.749067][T15788] ? __pfx_futex_wake+0x10/0x10 [ 390.753941][T15788] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.759106][T15788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.765453][T15788] ? do_syscall_64+0x100/0x230 [ 390.770246][T15788] ? do_syscall_64+0xb6/0x230 [ 390.774946][T15788] do_syscall_64+0xf3/0x230 [ 390.779471][T15788] ? clear_bhb_loop+0x35/0x90 [ 390.784174][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.790089][T15788] RIP: 0033:0x7facabb85d29 [ 390.794524][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.814233][T15788] RSP: 002b:00007facac8f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.822666][T15788] RAX: ffffffffffffffda RBX: 00007facabd75fa0 RCX: 00007facabb85d29 [ 390.830669][T15788] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000a [ 390.838651][T15788] RBP: 00007facabc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 390.846633][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.854613][T15788] R13: 0000000000000000 R14: 00007facabd75fa0 R15: 00007ffc3e10bb58 [ 390.862612][T15788] [ 390.865990][T15788] Kernel Offset: disabled [ 390.870329][T15788] Rebooting in 86400 seconds..