last executing test programs: 47.682471782s ago: executing program 0 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "57fe14515924"}}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xf3}]}, 0x24}}, 0x0) 47.331542585s ago: executing program 0 (id=1131): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x0, 0x1, '4'}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x4008804) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x880) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x2a, 0x200, 0x2, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x76, 0x54, 0x0, 0x0, @binary="7c48b54cf0cf46871364589164ffcf9fc15a5ce60f7af15bf46863470ce209e1ff6067e89c99e0e9cd7cc8f65d93c565b8089d4144f845a99627406353552dc524c3bd9da1fa6ff81e721425beda2e56793764d20a81072cdc2dc23244714c177cb0af0894142ad7e70447e3dd9e5fc07885"}]}, 0x8c}, 0x1, 0x3000000}, 0x4004895) 36.540637029s ago: executing program 0 (id=1131): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x0, 0x1, '4'}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x4008804) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x880) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x2a, 0x200, 0x2, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x76, 0x54, 0x0, 0x0, @binary="7c48b54cf0cf46871364589164ffcf9fc15a5ce60f7af15bf46863470ce209e1ff6067e89c99e0e9cd7cc8f65d93c565b8089d4144f845a99627406353552dc524c3bd9da1fa6ff81e721425beda2e56793764d20a81072cdc2dc23244714c177cb0af0894142ad7e70447e3dd9e5fc07885"}]}, 0x8c}, 0x1, 0x3000000}, 0x4004895) 27.945718686s ago: executing program 0 (id=1131): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x0, 0x1, '4'}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x4008804) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x880) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x2a, 0x200, 0x2, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x76, 0x54, 0x0, 0x0, @binary="7c48b54cf0cf46871364589164ffcf9fc15a5ce60f7af15bf46863470ce209e1ff6067e89c99e0e9cd7cc8f65d93c565b8089d4144f845a99627406353552dc524c3bd9da1fa6ff81e721425beda2e56793764d20a81072cdc2dc23244714c177cb0af0894142ad7e70447e3dd9e5fc07885"}]}, 0x8c}, 0x1, 0x3000000}, 0x4004895) 18.351761095s ago: executing program 3 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x5c, r4, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000001"], 0x38}}, 0x0) 18.123341296s ago: executing program 3 (id=1450): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4008, 0x3, 0x240, 0xd8, 0x500b, 0x148, 0xd8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x6) recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001000ff10ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c0002"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(r6, 0x80) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) write$binfmt_elf64(r5, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x36, 0xe, 0x9, 0x2, 0x2, 0x3, 0x5, 0x5, 0x2d0, 0x40, 0x24f, 0x2, 0x5, 0x38, 0x2, 0xfffb, 0x0, 0x80}, [{0x60000000, 0x347f, 0x3, 0x1, 0x3, 0x8000, 0xfff, 0x6}], "75da1b6cc5afad1ea9cb16599c6ead5349c2e2827e0d59a5e0e420e74931b0a2aab87a3faf86f38eba718edc1a7bc13011d7df6fdc98e299574456ecd1b13d883212789c673cb956dd8e09d793c365f524c31cba6aecaab447e16741a1ac322f13695b8b0d42e9ae1f5851348a0d59935063aa944b92159953f148f9c0e1c6479db00c7a2783e0541dd5847d4af60069a988e9fc0d63377a1295eaea", ['\x00']}, 0x214) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 18.078438248s ago: executing program 0 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES64=r2], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x80000000}, {0x8, 0x12, 0x0, 0x0, 0x4}, {0x8, 0x3, 0x0, 0x0, 0x1000}, {0x8, 0xf, 0x0, 0x0, 0x5}, {0x8, 0x1d, 0x0, 0x0, 0xa}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x840}, 0x0) 15.451597574s ago: executing program 3 (id=1455): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6}, 0x48) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000885}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000020850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000fcffffff000000", @ANYRES16=r6, @ANYBLOB="0001000000000000000007000000080001006a00000008000300", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x8000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x9c) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000c00)={0x0, 0xfc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010900000000000000000218000000000008000100ac14147f0000000000"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="620ac4ff0000000071105b00000000a58c93783652ba5006fb8562d2f5561f4dbf7ab4c7a87c901448f1097020ef3ad98314c84854a0a24c818b73fe2a175169f6e41209bdbe5a43ba752530c0aa4802faa30dda2b45b5a60804fa0ddaafb9816b4459417e5416787b02698000"/118], &(0x7f0000000480)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r11, @in={{0x2, 0x4e20, @remote}}, 0x2, 0x3, 0xe58a, 0x401, 0xec, 0xe, 0x7}, &(0x7f0000000000)=0x9c) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000972c3c5712b8534a73ef90a4b3d1b8d50c3d8e3b8d4850b01f577e3449491fe6bdbae9832e8abb245ff47506021e750ce662665882ee2c4e973f5002d4bc9aee0db8bac9434dbb346bb2768ee10611bbb5e400142244408d99133165f2321c258183758a25e6ee15d71653427a90563155aef9a78cbb34f65a883d87d35989e7308aadcd00a13699103ca964c985ea046444ce7532757e7cffe2ef7142c0d90e20cb1603aa36065d3e89c4ab6823d961e859b5dfe23c0c312c171d825cc2aac887d3d53e64c8ce411fdf9405", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c0001800800140004000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7ffc, 0x1}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x180600) 15.197218874s ago: executing program 3 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000001000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.046216366s ago: executing program 3 (id=1461): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r0, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x80000000}, 0x10}, 0x90) 14.891606214s ago: executing program 3 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000007c000000060a010400000000000000000100000008000b400000000054000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000003000018008000100636d70002400028008000240000000001000038009000100efbb17b79900000008000140000000000900010073797a30"], 0xf0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030527bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000090000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, 0xfffffffffffffffc, 0x200080d0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac1414000000000000000000020000fe00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x150}}, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r8, &(0x7f00000000c0)=""/29, 0x1d) r11 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1dc, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x189}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb06}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36268f95}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x335}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xce8b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4b74}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x1dc}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4, 0x2}, @CTA_NAT_DST={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x804) 11.471230757s ago: executing program 2 (id=1484): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x41) r1 = socket$pptp(0x18, 0x1, 0x2) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'syz0\x00'}], 0xa, "cea6a60dae9b2032ff0dbc58a00673ba5827a69994c5f9bf129c21b73f7d88e456fa8a9a26bdd42ea58ac5a8b8ea54b7aaa112c4609fb054883598def43fbb30e4516ee0d987d621c3376e374be666dfc6e3da522d5c9f0881b71fb2bb4059a8aeb41cf73876a696e98ed2ad857883916b25e5823b6030a1b16898d75277cfb47e7e87b276533628891cd1ae016ded6ff4652e06a62f118529407ab44eef7978e68df3"}, 0xb4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9dd3}}}, 0x88) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="55ec6d362a4d676e61ff6d3fe5e1560926d36b87ec4c48b988fe58350e33b34be783adc6c80343c04c08bfa7a2f17584cd59fc5b0fe103", 0x37}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xb, &(0x7f0000000700)=""/11, 0x41100, 0x55, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2394c, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x90) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x12}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1b}, @generic={0x3c, 0x4, 0x8, 0x3, 0xacb5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x44, &(0x7f0000000500)=""/68, 0x41000, 0x20, '\x00', r2, 0x36, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0xe69}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000900)=[r4, r0, r0], &(0x7f0000000940)=[{0x5, 0x3, 0x1, 0x9}, {0x1, 0x5, 0x8, 0xa}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x800000}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e23, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, [0x101, 0x4, 0xfffffffffffffa22, 0x1, 0x683e413e, 0x9, 0x44, 0x7, 0xaa3, 0x5, 0xcf7, 0xb, 0xffffffff, 0x7, 0x3]}, &(0x7f0000000b40)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e22, 0x1, @local, 0x9}}, 0x7, 0xf05, 0x5, 0x2, 0xe0}, &(0x7f0000000c40)=0x9c) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000c80)={r6, 0x7, 0xc, 0x0, 0x0, 0x9, 0x3, 0x0, {r7, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x7f, 0x4, 0x2, 0x6}}, &(0x7f0000000d40)=0xb0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000d80)=0x6, &(0x7f0000000dc0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'macsec0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001fc0)={'syztnl2\x00', &(0x7f0000001f00)={'syztnl1\x00', r2, 0x8000, 0x7800, 0xc, 0x3, {{0x27, 0x4, 0x2, 0x4, 0x9c, 0x65, 0x0, 0x6, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x9, [{@private=0xa010102, 0x5}]}, @cipso={0x86, 0x45, 0x3, [{0x0, 0x8, "a03d78d1e741"}, {0x7, 0x9, "cd49f686cbf264"}, {0x6, 0x10, "78ef9bd91bb331c34f4708e856b9"}, {0x5, 0x11, "669b2098455ca652937f2f34609ef2"}, {0x7, 0x9, "f0e89aa2cd83c1"}, {0x5, 0x4, "e69b"}]}, @end, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xc, [0x0, 0x5, 0xd, 0x8, 0x9, 0x3ff]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0xe2, [@remote, @broadcast, @rand_addr=0x64010102, @remote]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002200)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @enum={0x2, 0x7, 0x0, 0x6, 0x4, [{0xc, 0x7fff}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0xb0}, {0xa, 0x7}, {0xe}, {0x3, 0x8}]}, @enum={0x10, 0xa, 0x0, 0x6, 0x4, [{0x1, 0x10}, {0xe, 0x2}, {0xa, 0x5}, {0x7}, {0x10, 0x3}, {0xa, 0x9}, {0x0, 0x3}, {0xb, 0xa7}, {0x3, 0x5}, {0x6, 0x8}]}, @fwd={0xc}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x0, 0x30, 0x30, 0x2e]}}, &(0x7f0000002140)=""/181, 0x113, 0xb5, 0x1, 0x7}, 0x20) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x9, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4a8, 0x0, 0x0, 0x0, 0x2}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0x0, 0x3, 0x3, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000ec0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000f00)=""/4096, 0x40f00, 0x0, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000002240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002280)={0x1, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000022c0)=[r0], &(0x7f0000002300)=[{0x2, 0x3, 0xe, 0xb}, {0x1, 0x1, 0x6, 0xa}, {0x4, 0x2, 0x6, 0x3}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x7f4}, 0x90) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000002400)=0xffff, 0x4) getpeername$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002600)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x18, 0x1b, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x4}, @call={0x85, 0x0, 0x0, 0x7c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2, 0x3, 0x9, 0xa, 0x100}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002540)='GPL\x00', 0x80, 0xa, &(0x7f0000002580)=""/10, 0x41100, 0x0, '\x00', r11, 0x0, r9, 0x8, &(0x7f0000002640)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002680)=[{0x0, 0x1, 0xb, 0x3}, {0x2, 0x2, 0xd, 0x2}, {0x4, 0x4, 0xd, 0x3}, {0x0, 0x1, 0x10, 0x3}, {0x5, 0x3, 0x4, 0x4}, {0x2, 0x3, 0x3, 0x5}, {0x1, 0x3, 0x4, 0x7}], 0x10, 0xe}, 0x90) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r12, &(0x7f0000002b40)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x45000100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002800)={0x300, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5395035b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aef9f8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x319d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b87590b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa62c20c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d43a58f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa17a7f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27a2cdc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c678a78}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x216f5f6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4635260c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70257662}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f3484f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18cc4e6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x590c7bfc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfb67c5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ae5261a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64f54dc5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1286665c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5533eb7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91af91c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43670981}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x443c8bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b8aec7d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2734e415}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3e7b1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f2eba7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x190741fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e9a3802}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d22a45b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33d4dfb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cdcf995}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aedf567}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70d7833c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc42c01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd557248}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754eb6f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fe9e737}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16004613}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b6716}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72a615db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52818824}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54c622f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x237b5500}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x300}, 0x1, 0x0, 0x0, 0x40800}, 0x8800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r0, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002d40)=[0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000002dc0)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003000)={r4, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003040)={0x0, 0x44e2cf6e}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x1d, 0xc, &(0x7f0000002b80)=@raw=[@jmp={0x5, 0x0, 0x9, 0x3, 0x7, 0x50}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x3, 0x2, 0x4, 0x0, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1761}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, @alu={0x4, 0x0, 0x4, 0x4, 0x0, 0x40, 0xffffffffffffffff}], &(0x7f0000002c00)='syzkaller\x00', 0xb, 0x35, &(0x7f0000002c40)=""/53, 0x41100, 0x2a, '\x00', r2, 0xd37a35d8795a139d, r9, 0x8, &(0x7f0000002c80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x2, 0xe, 0x2, 0x7f}, 0x10, r13, r10, 0x4, &(0x7f0000003080)=[r14, 0x1, 0x1, r4, r0, r0, r0, r0, r15], &(0x7f00000030c0)=[{0x0, 0x1, 0xb, 0x8}, {0x2, 0x3, 0x2}, {0x1, 0x5, 0x6, 0xe}, {0x4, 0x2, 0x2, 0xa}], 0x10, 0x8}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000003200)={'sit0\x00', &(0x7f00000031c0)={@empty, @rand_addr=0x64010102, 0x20, 0x1a}}) socket(0x8, 0x4, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000003240)=0x6891, 0x4) 11.388830651s ago: executing program 2 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0xf0}}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket(0x10, 0x80000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002440), &(0x7f0000002480)=0xc) (async) getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000024c0)={0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="e40034ea77f09a1229ebdd6f9ed9cc81055bf3fa66f6b2c79498d001679dd9eb12b125cb56313d29185954d9b5d42453d1a67e2ccc4b07e44cf10132ce33ec0714eeba71b7ef13b54492ac793167e6debd3a452bf48af2107460a820ae74f42d4e38f4157ff3ff77c769fedce1a3acb4ebbf067873b2189d9108f5814df45a3e0f6b95f160f7e295a4e459cba60654eb8762af43d5ef02a8e3b6373fa3a769c4c5dbdf89bc7e794a54b269c647215c52fffcbc989937c468ad6d411a9b2be332ee0bd14f4ceac34aa0479b406feb4a4315f8b367f30608d38cb0146628f6", 0xde}, {&(0x7f0000000300)="fd8c8d7ccbaa75da6b9e500791f84ef95c5cc9e2526e1896e8cad5c20295c5ba52d0f1b96eb629720e6f0c994ba83d5459e9f47965a69d4f753fd0bde07e1f469cc80b979ccd81a357668c890fbf31480d1e1fe6c6a725e79f8c7b7681e8f424c1d56bc3319aeac71e4942f39902a705a26c7df9216208ca4be4e5807c4f743789d91ff40000fbf1281c373259e12e359c8b95a61d19adaa909b1e8da7505344fef218f1ded93e3ecca5fcc13355c01e856a4ebab62b4248c39f4150227c06ae1701009737a961e16a9c2ef8c3cb7bd3b0b049ca12eedb181252b39c75d720a54536ff346fb4cde10b6adf688c50d818", 0xf0}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x800}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c40)="8ae3298d1176e97d4abfe4585964980543805e53a9d967bced1808b42661353cd0a2b5205312d2f0307ae8c9e5a4", 0x2e}], 0x1, &(0x7f0000001dc0)}}, {{&(0x7f0000002640)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x3, 0x8000) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @private}, &(0x7f0000000180)=0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x24}}, 0x48090) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) (async) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000010000000000000800000000040000000000000000000900010000002e00002e00000000000000000000000000003742a457e7fe4c1551274a381b152f7b15fe3661855882b5b1e2d9675a8c1440f33d41980a231eb85d15482fc4f7e07f87182ae106f4fcea2781fa6ece710a7c8faa2542714c2324ceba641a50ad8999e8ad7b7ccb05ada1417e61b1399e9f55fdaed8b353f15e09169f4b4a00758be32fce44d0a42c4f8e1bc100b5dabf7e7651a53a6505c2f60b438dc7a33bdb6692aa89"], &(0x7f0000002d80)=""/4100, 0x46, 0x1004, 0x1}, 0x20) (async) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x2, 0xfffffff8, 0x0, 0x6e65}) 10.959752586s ago: executing program 2 (id=1488): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 10.539394288s ago: executing program 2 (id=1494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x13) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x2}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r7) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r9, &(0x7f0000000840), 0x4) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f0000000140)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="75e4d022c3d3d0516e8aa185cdff851306d4b01da1b5d3f0eaa6e8a3a3e92cf2e69cf3d0f1a079776c52eb5d68442399f85a369512996ea041fa7c684503a851ba5876a222bc89583a0301c51eb5ecfc4f5950ed240ccab6724fb961dc2eb1", 0x5f}, {&(0x7f0000000000)="2df24d8a", 0x4}, {&(0x7f0000000280)="edb31d7be648da153ddb1ac8a0dec7af29a2a59dc91e0a68f4465452b8c79cf645b833f12b35209af92bd405812dfafff01113b5de5b3aff79a68a85b25d2a221b6dda06d70c21a30869cdcaf94ff0f93653bbf0aefe13071412f309a78b7f44676eb981279bd7963a2a26e20700802bb9150bbdd400a5f062325fded8c4803fbe538e268baac38025ff6eafdd5a", 0x8e}], 0x3) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r11, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffec8, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500465981eccee24497b32fca5c", @ANYRES32=r13, @ANYBLOB="000000000000000014001a80100005800c0008800800010000000000"], 0x34}}, 0x4040) 10.487111273s ago: executing program 2 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', 0x4000}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x663}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x24}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200400c1}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', 0x4000}) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x663}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x24}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200400c1}, 0x44000) (async) 3.886663773s ago: executing program 0 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES64=r2], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x80000000}, {0x8, 0x12, 0x0, 0x0, 0x4}, {0x8, 0x3, 0x0, 0x0, 0x1000}, {0x8, 0xf, 0x0, 0x0, 0x5}, {0x8, 0x1d, 0x0, 0x0, 0xa}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.940281296s ago: executing program 1 (id=1539): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0x4, 0xfff1}, {0x0, 0xa}}}, 0x24}}, 0x0) 2.647506072s ago: executing program 1 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24060400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002006000000000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a92387f0432bda0011d0adf37fe34fb9d77f1bb643030247854519025917637c5e02e88b9bdc549447a210537e02e39c1f9ddb237b18033"], 0xc0}}, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) unshare(0x50020000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0) 2.192764917s ago: executing program 1 (id=1543): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r4, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0100"], 0x1c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000000000000000000000000000020001000000000000000a0000000000030005000000001402"], 0x50}, 0x1, 0x7}, 0x4050) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 2.067520544s ago: executing program 4 (id=1544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000140)="0b6cb1e2a0591efa9cad4a633b", 0xd}, {&(0x7f0000000180)="4d2d9be37367cc6a9cda487a129a1c782890852f495c6c435204cd4d415e01668efcff4321d9bca5d07b4594c34d", 0x2e}, {&(0x7f00000001c0)="be4db6a2b1cd3962164a29a70ec3a4e68800ed0852e20cc85fac0d6c5c74bf5013d7b84d4de98b188f3084b06c0ab2cb91ebd1c3fd7c7432e931476794a5bb886b442a3f", 0x44}, {&(0x7f0000000240)="792afd6359463a5ddfdfc30d7481f0590e29a5ab55b22219074db6302ff704b178abf7a5238369326eb1ff76eb60609bfd6495549cc9294312b301df4fcb5ce6126acb30e2137e6d4694f70f4232", 0x4e}, {&(0x7f0000000380)="4dfdba411a0d0999691433cb49ae26ba2d583482c863f33c368f109dda99a5f84a6c0fe320f58f76a43409c50572883c9189deac7db7192b84d086413151d0069dca4d6a54079a1c281af1224e9c6f87bf4dab2dd0ceab871bfedeff7e6e1357e07ffbbe6abf63fdb2c5c86c6ebba67c99b7d41fc88c03fe8901b5299297bf097a0d3be1bd4feab3a6a023f8d4e2b2ce4f", 0x91}, {&(0x7f0000000440)="93660a7d51585df1cb8e12fe14840695b19d0d999779177d0e3818e155e7c4df40b3b30d4eedea374d662907bec0a3a6b02f1c9cb098490c4ee4719f0a825ffb3fae9c3eb58af2b43ca52376b28975dd4ea3924a68f3fa752b382874ae7413ddf19a00cb43ab8699430ceb9a61db5ac25454c790a7e4dce8eb0a095758870a7f534f2ed905d474db051fb530ac7403992412ed16f0a4a0a7c010a2262333b240bd92", 0xa2}], 0x6}, 0x0) sendmmsg$alg(r3, &(0x7f0000007100)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="fca0fee4da6c1092cd69038cd7d2da1a44ef56b6ce5782b8a29a45ae591be68bedaeabbcbbab21994f9903d69ca84341c53c9b2b0308655985d21a0d746dc8542b13fc26ee6ddda642f5a0991011dfcd5c7b6386", 0x54}, {&(0x7f0000002ac0)="0f2427a31061c5330f79cdd04e1931eae4610aaca687514ba4610f5b4c5a3779f54e14a77e04f781bfe470c8b4408ff9cf9736dda3eca4ac39e76532296f4b7d09dc97cad64f7b431ceabf7d759c3e4d2fae511f22bb57b732f65a45e2afe30662c8ad4edc54b27a769a6a802d93880911f06cd36849b36ef1001c36d9fb3347e9708a724a112a744ed766675bbb33e7052daf3bd0c1e82f75e7d92d78ea2786b7ddb70b518daa298ce07dd3f86432361f9c3d3897ac389e7103e6f0ce52d99bdc8f11e8cb8cab1e16e2fb7578d86753f72fd2b6e9c965d725e8d614c1eb13197c17c2262ff50c63a204184071b3902ecda110603a9bb25492995dc8f25a37f0453d4f3d7d38cbede8c005c2820f63e98e75a0f53297d0baf9aba1f7c3d580857ee2937936e6992599c4534a4a256c961e866041f04f2e95a40c32f0feb287c0837ca0b614c76632317076d8ea5f9f2bfa34ab6f1c5f77f6aaf18c277eb0803b4eb7088e50b8a7735e3404d077a66fa3be2fab087423ac1cbc39d5f10f539a95700ce79f4a214bcf85fe3d456183da72832fb7c9982b114790434809096388852a292e6f70f8423820a8e24617b048ae6125b4e04895c797555564fe5ebed5938dcbb17280d57e70cf38c9e51957ec493c52c30e14af47513b22ccb47b95005c806aada1bbef64861a67d3f7f7dd5339cc060936a591649c9e2dad296f7afdbdfbdf9c42c3cd1c0750339841a35f6ac9bdaf41dc145012e632d817bb90d9911c8b29ba4f4f4e7e5ca8a8565db36ff71ad518e66a16df29dbebd5607e4e528bc61bf0a16eb65e1882c0b80959de6c902e03781c3ac625a7338eacd4fde86044ae5021d7bbd0e293866f77c2db40b09b659c5964ae16a1044cd46e8f502baf1f65f2d3d7290c6ba56c002d028a329f4c692ca7e98a8beece84b7ea3167b4ad00e44f1bfa8e18136e2d324fc0bea548b1b7337c48502ac7b0742f7bedc4f5fbb6aa770e749035fa103e32c0d59192e7c8e784f99e19bc33436f70eb6ea3e04d9ed5bac7c50e203f239629a28a286faf7c058a2fa57d63a31fda6df4954be11e640b1783115bc44fbbf07c1b00a58ea2b11d5a381834effc6b8e0a362366947cfb4659cf970c68bf6f28c92e4d8f94f72d894c5edfa419b425a4447fbc1849c6887431973e16602243cbdf0416d132de8058672c50db0969b2aa1b1e80fcb3165cd56b52b59a72921390f4946e560c4c4ad224f1170953a19d8c32116f86b0c1351a4830d29b94b0c79d1027b9da7698453dec5215c8793b004a79331d013dba5fcfe5cd5efe52f221fff52ec21cc654d8fa18fb8a17ee900a181fbe763f6f2683ff6f3b0a9809d23b0fa9334b656b659f75da2316e8b4e117cc7808b2e5e42c7c39f36b99e83a0703c86eae31d026bbc0220571915d393287b4d971ac948cf835a72eb89f1676a5db3f82503bacfb29cdc531cc635af18ce71146e11a5e6464353ee80bab98096d6d3bc6d31c3dbd80c537991cdeacbbaf11ab4b95e2c9259453adf4f9ff9a937d3a400b1776b3f59d00547a3bcee3a7c4bfe1f98d2e854b2f9c7b38046e14a9267002deb460245b1edf1a85ad2fc9eb857845680b50ff309e69d6fcdf406658d1fd4635896f22f5a8db0a322f9ae97bbe8bb37371a6072c015e612d8dc0cb2692bdc103828dfc6dcde8624802082523f925b0acca2bab7c0a03281befb75af981177a90e199b7f00a8b2059d4ea203a0d1e0f7d388476148aca9149b14c23535a4e18fa7a93e4843196a8e0ddf525d7098cbbb39f15e67d26a0103dff00aa71a75fb9049a3051dc3db068237708c9dd27190bba701430a7b1d444d4a55d985501ca19d11c73ad452c4bba38862567cb4dddde273576fd8a5c567fff5e2affebdf453a4ed5be5279a299dedc9a77623db258a735a06258d259a818d88c97923363b53cfdf933bc27fd4df6b450395d1114b47a39011af4a0576538ea1dba97895aae4173b69ae4f65d28b534db83591a7e7541c5f1a1b9e97e1c0da27145fa0cbe8a6ab78942d8e6ad5ac68d7e69c934d83cd9df847e4112caa353b5fe9c7bb7368a19441b2038f7c7dd281a33f90afc970e4a8cff674a782525d4502c6f7ed001aa2f373613fb0f5ac7b6e35e79c65e54a4c74c177bd09ee4017b763edb4717f80982e975bbdc3b5621b80bc716ee3b7cc07f787bd99f775f3d1fa42d10129c1836c23e06d580964726ae67eb8d117a6cce4222830158dac2653f25d26f606fce164b8d58059cb94b7e5cf190bc633173931facfa6a4a4bae49c8967bb0ee0719f2dbf7704d5e829f1edae43ce6881f1a74fc1d175897205d3c35025fe943cb7e507b4e553fd874668eff55c9c976479a06f9d75680bf784a0a1cae337516d754bf81593ca59656e9d397487054edbfcba083f8e50f8e08822992cbfc9312f0a4da1b8d3fa8da5ff1e52801e4c78800307bf325941a50d7609dd9075a9951dcf9de43d3fc225df353305803eb15eb3c5bb41ea0dd3e40fc6dbcf543a329a0591c15a84ad913e89e8647497e7e64ff413ca9b54c152038e73e7e3ca8c222107052f750601232c9aa038096f38e4d4a20bb28b3fbc37dea0a60d86f60b40ee16cc984c8bdb5678589706a451d1bf74669fc89c9eba23f82c3595bbb5bf23a2e0b912c98b9dc4c4688fb176c3f9f458e152124ad4b0ca1f50f56e4f27f41d53b8ae934451890c59ec36c1775bb27c7b590a85d77b0c552c934cbe68e5e7fc9b5558dd554cf96a9f9621228e6b62696b3c930fcf422bc9477f0ff02ab23e003885075089d7d2ba2378c5579dee3045aa427a51f131ca7334831c52acf46bb7c51e2ae72efaabf7810adff15d1b58bb4b4d0523ba43575b50bdc1060d3c948e621a9c6c66ca7e3b524ed57344a74ad6d5e7896f5f52cc81a26b242dafc481bf91b35cc56edd06d4e18ffc5669870a2cd1ea87e9d8350c85caaefcfd7d0c2630d1d4ccbea60ea0ebe8c44d217bbceda7b6d361191d0e03886066a8aece084f8620e3f727e733fa67f7ad8e412668372e076aacb10a513937bc4a6c51bbc9950b1e2a74be463b3208c383c36054bdd0d534fa8582c56c919e99f6028ab3d472a873684a6f3ead0b6620b15b327d81e1be3fb29e9ac814f39e0f4a7abdbbe6266149eccbb0bf465701a17170edae6e70a6822a2c57125b5d6c2c295c88a7b3dcd47252377206d695b80a8afc0c47f990f31c4ece9a84a462a7ff15bb81bc4052aa28c098fd394e0da0c0cf4afa7a9431e36a5ed4a4abe51b772bda616eaff4607bf5e0253b18335d4a37917976bdbe10fa3f94cb1bf7b82ebbd25789c9e6ef309f4a91786c2707f722650fd2028dbbbd74e497901e98b3d284ebbfa01c75b5ff87ad48a4bb9dbaaf421248db1d46a5fe9f7a44be828cb8860df66b95721ba29a58350c9a21c71b7455d26c7265c0f4be79bd19dcffedf26310a979915a666ffecefbf192d21e90c309f720fcb6ec8583e71f1330e70de8d10392565706f83ca5949ee8c5581665e9b8068f0bf171b5da7f529c0f068560107652a6efb015928bc45f20cd70b8ab67a74862eac3d46a20582d8cd81efd133bc25b574954e22ff62c58751c13d78e0ef23e104839fd2ea9bde6bbc0584f6507552fc0cf65bcb8947a6871bf5e7c7eaf3eefe131ff4cd04a0ace6032267cd2b691dd43f4267b1975e6186a8bea1693bfbfc6b248e6e53faa8bec4fb522af7e5357d02605ef3f224a1f9f8103f6d906ff34d3c132f4b3b08cd56f26a8041e5a3c41ad46768ae1c8558042d71a1d6f838d678df2b1ff0915df6c32bcf66256c3a14f04cf69ff61e725804e79c8830e9eee5be4f69b0d074407b5a25d0aafe0121923709fdfbacf3c1bb4db063b181b0850c8a110a77d6f2f6aacff4ba9dfa95f9da5f262e0c7bb06b0f899c74a4541c778e3fa2607446df677c0cee4b382ed4a3a019d5afdaea85702a3c067fc16bc08895c73a689b6e6d3de35eee70fe438db2c1e4cb8ddf410139ff3aab27c7fae9666b8c690be6dd42d5f269494c8d1b9c9dadb683c79d9b329b4bc6cf5e2490d029ab12cd9403c201c1c8234d6f5008e794bbec57244052737e9c34c753cfe70ad2f14272b1080737105a47e7425afebe48e1b1f453fd2f9243c82b59451b0377ba463e326cd244902c295251de301d58e4f6fcf07bca8ee49b519fdbb292d6a5de6164ee6d1e7ab2f6c1a27ee886136e123da1b850310c306cba4fe4718a85a8f643b7c4bbd2660bdcb95f98998b7d0a10657344692b31ff9879fb9896d60fb2db5600274d8a1bc69706e1276b73847a4d8225d9b707da46cc563c251c6d213a05431228a01ea242c4e21c6f14efa0f8d0c1bb2caad81f38c787d1ea44f264a2283229d58aa4fa9fa92e28fa9c8f1efbf1cb95fb650d4006ff1be575215717d2171233e43005e33e381d2494504df5c38c4e608662e226c263874f750fadc8e9d7b79df1dac3133d0f5d08f1ccd7c5378024ee4e690cd3917eb7e163dc2a22e9b236e0c41448cb3333efae2e7bace92ee0d71b7d74d384dbee8eaffa0f7f9a5853e062217fea1e888c59169b2ddc8abcdb5c63c54c61109e54f0bab2be551783625f7ab4e79c6d14fdc3adba64b26f296d10171e2c69efec63e1e6d13a6f84b6e188449f645abd8ef55ba5cbffbc424ac6cba3f6c644a98e1f9ced7daf9c5c73600cd18e89887c1ac2277c0dd01a6f43cd3c4d10244c1264fd11938021969f26045bd3c5a381ca15e3967b8b883f875e7c875958e1065565ae33ca9c9ef0ac9589316ef66fabeca7820c0930ae4f2bbb7230e7e3bf1a8a54687424a355bc0e7d595489c922d15064a5c176c073533a7aaabc832ad01cc54c3c49082fb9c7c12ca30d8ef935474fa883e8012ef0f8c7c09668b9a762af7b667ff9bf0d520b7d12daf3a4af", 0xdac}], 0x2}], 0x1, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) 1.932571819s ago: executing program 4 (id=1545): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40008c0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "57fe14515924"}}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="01343f212b7a"}) 1.872788023s ago: executing program 4 (id=1546): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)="89e7ee2c7cdad9b4b47380c94305", 0xe}], 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffce}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r5, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000800"/272], 0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8, 0x7c0, 0x0, 0x4, {{0x2f, 0x4, 0x0, 0x9, 0xbc, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0xad, 0x1, 0x8}, @ssrr={0x89, 0x1b, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @local, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x2c, 0xf0, 0x0, 0xf, [0x1, 0x65c, 0x100, 0xfffffffa, 0x8, 0x0, 0x5, 0x8000, 0x2, 0x9]}, @timestamp={0x44, 0x28, 0x85, 0x0, 0x1, [0x2, 0x3, 0x2fb1, 0xfc7, 0x2, 0x7c7, 0x9, 0x2f, 0x7ff]}, @generic={0x83, 0x8, "75a676fc13f4"}, @timestamp_prespec={0x44, 0xc, 0x4c, 0x3, 0x3, [{@loopback, 0x20}]}, @ssrr={0x89, 0x13, 0xfc, [@private=0xa010102, @broadcast, @multicast1, @loopback]}, @ssrr={0x89, 0xb, 0x91, [@empty, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x10, 0x8, 0x8, 0x2, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x58, 0x14, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x32, 0x1, "7c8267899088ba2634ceb422b2e8c495204a44bc141bcaca9c87619b2e1df520673bc94cc839f5a2223aa809f046"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "7de613581256823f8a4c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={r7, &(0x7f0000000500), 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000600)={@mcast2, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x500, 0x0, 0x0, r2}) socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 1.755734044s ago: executing program 1 (id=1547): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000e00611114000000000006000000000000009500001703000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x22000400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x1, 0x0, {0x5, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x1, 0xd}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8000) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x2, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x8, @private0, 0x9}}, {{0xa, 0x4e22, 0x4, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x3, @local, 0x8}}, {{0xa, 0x4e20, 0x0, @private2, 0x7}}, {{0xa, 0x4e22, 0x6, @private2, 0x9}}, {{0xa, 0x4e20, 0x7, @private2, 0x3}}]}, 0x390) 1.106939613s ago: executing program 1 (id=1548): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2, 0x5}, {0xa, 0x4e20, 0x0, @mcast1}, 0x0, {[0x691, 0x1f, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3]}}, 0x5c) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="529ac7feeaec09dfa5d5e200fa0ab328bcd5062f5732af6999aaab164e7562d99e37918ddf2ca47b0fa87a27178c8c11cc587cbcffd93ebce65d1ad5d51afd21c40aa63d58ad5436c2e6c0f3b8f5ef4d040b976719da83240a5c56eab82d4dcdfd33081f6910d3b53d30e03b1c99177158c1413d3fb1e1860009641381d3717d092e459abcdb9573516592ec5d716a6eb5458f7eb5478f869469918554393d4b3e129fabb2716657556df3ed6b1600b0f18ea01cfea01bf9d730c197b8d388079a5600fd29465ebc31171d1448c99c232dc30e", 0xd3}, {&(0x7f0000000400)="a74f4e69e7ae330e3a9a962d", 0xc}, {&(0x7f0000000440)="6c81bcce6d21cd5ff841ed8c049b74b3fad2a808846af94425631ad73a89976e55f8829edd1f336f4859c82545d560f8f6d8e5fbbbbadd58bb2aa333b51b47026fa8dfab147c509b91763e0ebe64e3c2d744a62ce53023b90b40f94e4b4e3f96bc4a294ba39ceeb88b9b41d38930e53167df1e3847013a9b84287599791c962fd31308f2dc2d2168216841d2446fcf68f25fe6b3398c7453a90eb0403ed989c8032cf4c4507393df34b720388720469ef8bf3d653f8ac89ac0fa92ac30758b00507194f4e8a2002feea6f3cb35185f5835", 0xd1}], 0x3, &(0x7f00000006c0)=[{0xd8, 0x11, 0x7, "573dbc172de520f5b6a4259fc7797cc86f50490cea36b60d26242ede02531b7890cfe8a3585c70bf5c33968a8dee3c61c1dbb91e32696377f988442228b110901f4b15973c04d123d279153ff6e89065f0a7d1edd523f98dd9a0c045785c657861db69c3f10e0c4121976cfdd25a8348ff29c0facc283156a37cd09c613f9914479b3c721226a702dd0cac77ca1da73539758201f6b9868fb686265feedb9a871ad13a4685f31b47fb444eade44aa0a973c8de3dacb29ef37c97cafa077864d14efb0d6d"}, {0x18, 0x110, 0x4, "bcfad96306bf1352"}, {0x40, 0x119, 0xcf16, "8223253243bd8a0eff9e44978e6584757cf14ad35a2e7cbba427d454816f2cea4ffda47c119b3527bbaba68604081f"}], 0x130}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x3, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x28, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="ee9a36c6"}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x20000001, 0xffff, 0x1}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0xb80, 0x1c0, 0x111, 0x4b4, 0x9, 0xd4feffff, 0xab0, 0x20a, 0x278, 0xab0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x2, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x888, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbe0) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000240)='M', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x8000}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.090873859s ago: executing program 4 (id=1549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 907.644425ms ago: executing program 4 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118c000600000000000000cc00007cf6da"], 0x0, 0x9}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000070402eeffffffffffffff002100", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1c0012800b00010069703667726500000c00028008000100", @ANYRES32=r8], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'veth0_to_bridge\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0112018008000000000000000000", @ANYRES32=r9, @ANYBLOB="1400038004000100040004000800020000000000"], 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r12) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x4000) 604.227019ms ago: executing program 2 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', 0x4000}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x663}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x24}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200400c1}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', 0x4000}) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x663}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x24}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200400c1}, 0x44000) (async) 206.816644ms ago: executing program 4 (id=1551): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x1}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0xfffffd2c}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210900000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08006b0078000000040018"], 0x30}}, 0x0) 0s ago: executing program 1 (id=1552): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{r1}, &(0x7f0000002540), &(0x7f0000002580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_execute_start\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x50, r5, 0x801, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x50}}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, 0x0, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0xd, &(0x7f0000000080), 0x4) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): ption. [ 99.340764][ T6948] Use struct sctp_sack_info instead [ 100.307223][ T6931] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 100.366811][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 100.401907][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 100.746361][ T6965] hsr0: entered promiscuous mode [ 101.034283][ T6991] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 101.071378][ T6991] netlink: 3440 bytes leftover after parsing attributes in process `syz.0.480'. [ 101.112098][ T6994] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 101.287624][ T7008] Cannot find del_set index 4 as target [ 101.464184][ T7026] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 101.626402][ T7035] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 101.751381][ T7040] lo: entered promiscuous mode [ 101.818237][ T7047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.494'. [ 101.845246][ T7039] lo: left promiscuous mode [ 102.011551][ T7059] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 102.042320][ T7059] netlink: 240 bytes leftover after parsing attributes in process `syz.4.498'. [ 102.080890][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 102.305200][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.505'. [ 102.418995][ T7087] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 102.530915][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.508'. [ 102.770887][ T7099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.814631][ T7099] netlink: 'syz.2.512': attribute type 2 has an invalid length. [ 102.823139][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 102.885519][ T7100] vlan1: entered promiscuous mode [ 103.495020][ T7130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.121895][ T7152] __nla_validate_parse: 4 callbacks suppressed [ 104.121913][ T7152] netlink: 224 bytes leftover after parsing attributes in process `syz.4.525'. [ 104.704433][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 104.738697][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 104.760352][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 104.770391][ T7180] netlink: 100 bytes leftover after parsing attributes in process `syz.3.531'. [ 104.912827][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 105.105492][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 105.174305][ T7208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.224880][ T7209] netlink: 'syz.4.540': attribute type 4 has an invalid length. [ 105.243965][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.541'. [ 105.551909][ T7227] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 105.717060][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 105.729499][ T7239] netlink: 'syz.0.549': attribute type 18 has an invalid length. [ 105.755688][ T7239] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.765288][ T7239] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.774148][ T7239] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.783170][ T7239] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.804423][ T7239] vxlan0: entered promiscuous mode [ 105.817517][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 106.458729][ T7252] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.485766][ T7252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.906228][ T7282] can: request_module (can-proto-0) failed. [ 107.760395][ T7337] netlink: 'syz.0.573': attribute type 5 has an invalid length. [ 107.935749][ T7352] bridge0: port 2(bridge_slave_1) entered listening state [ 107.998354][ T7351] xt_CT: No such helper "syz1" [ 108.380759][ T7369] netlink: 'syz.0.582': attribute type 7 has an invalid length. [ 109.467261][ T7408] netlink: 'syz.4.594': attribute type 10 has an invalid length. [ 109.475216][ T7408] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 109.502123][ T7408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.514882][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.870558][ T7414] __nla_validate_parse: 3 callbacks suppressed [ 109.870575][ T7414] netlink: 100 bytes leftover after parsing attributes in process `syz.2.598'. [ 109.898700][ T7414] sit0: entered allmulticast mode [ 109.927507][ T7414] sit0: entered promiscuous mode [ 110.124366][ T7425] xt_CT: No such helper "pptp" [ 110.203089][ T7430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.311208][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 110.367528][ T7445] netlink: 176 bytes leftover after parsing attributes in process `syz.3.606'. [ 110.484878][ T7454] (unnamed net_device) (uninitialized): option mode: invalid value (10) [ 110.553576][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.610'. [ 111.316371][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.879562][ T7490] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.625'. [ 119.913220][ T7491] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 119.934155][ T7490] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 120.400271][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.412704][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.421208][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.438980][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.452777][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.462206][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.606840][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.803527][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.882612][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.639'. [ 120.992886][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.070883][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.102213][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.184152][ T7547] hsr0: left promiscuous mode [ 121.298719][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.396372][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.645'. [ 121.512841][ T7569] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 121.816507][ T7576] netlink: 92 bytes leftover after parsing attributes in process `syz.4.650'. [ 121.843212][ T35] bridge_slave_1: left allmulticast mode [ 121.879220][ T35] bridge_slave_1: left promiscuous mode [ 121.886475][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.906538][ T7583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.940408][ T35] bridge_slave_0: left allmulticast mode [ 121.968942][ T35] bridge_slave_0: left promiscuous mode [ 121.975071][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.524650][ T5247] Bluetooth: hci1: command tx timeout [ 122.799456][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.819406][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.842249][ T35] bond0 (unregistering): Released all slaves [ 122.971330][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 123.156713][ T7620] netlink: 164 bytes leftover after parsing attributes in process `syz.3.659'. [ 124.039450][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.050934][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.058853][ T7513] bridge_slave_0: entered allmulticast mode [ 124.066820][ T7513] bridge_slave_0: entered promiscuous mode [ 124.075002][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 124.133455][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.141821][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.149649][ T7513] bridge_slave_1: entered allmulticast mode [ 124.158706][ T7513] bridge_slave_1: entered promiscuous mode [ 124.287793][ T7670] TCP: out of memory -- consider tuning tcp_mem [ 124.296617][ T35] hsr_slave_0: left promiscuous mode [ 124.315339][ T35] hsr_slave_1: left promiscuous mode [ 124.323232][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.338375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.347770][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.355482][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.375215][ T35] veth1_macvtap: left promiscuous mode [ 124.381198][ T35] veth0_macvtap: left promiscuous mode [ 124.387466][ T35] veth1_vlan: left promiscuous mode [ 124.392965][ T35] veth0_vlan: left promiscuous mode [ 124.596225][ T5247] Bluetooth: hci1: command tx timeout [ 124.989084][ T35] team0 (unregistering): Port device team_slave_1 removed [ 125.027203][ T35] team0 (unregistering): Port device team_slave_0 removed [ 125.425695][ T7513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.480602][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 125.543698][ T7513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.711681][ T7513] team0: Port device team_slave_0 added [ 125.777796][ T7513] team0: Port device team_slave_1 added [ 125.898439][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.676'. [ 125.941723][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.951670][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.003298][ T7513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.038820][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.053712][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.104150][ T7513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.194074][ T7712] syzkaller0: entered promiscuous mode [ 126.213405][ T7712] syzkaller0: entered allmulticast mode [ 126.687555][ T5247] Bluetooth: hci1: command tx timeout [ 128.056163][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 128.140834][ T7513] hsr_slave_0: entered promiscuous mode [ 128.161080][ T7513] hsr_slave_1: entered promiscuous mode [ 128.213693][ T7513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.235997][ T7513] Cannot create hsr debugfs directory [ 128.257841][ T35] IPVS: stop unused estimator thread 0... [ 128.292915][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 128.327504][ T7760] ip6t_srh: unknown srh match flags 4001 [ 128.356243][ T7760] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 128.757144][ T5247] Bluetooth: hci1: command tx timeout [ 129.192015][ T7796] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 129.443654][ T7799] bond2: (slave gretap1): making interface the new active one [ 129.485282][ T7799] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 129.588537][ T7823] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.850080][ T7820] syzkaller0: entered allmulticast mode [ 129.860491][ T7830] netlink: 96 bytes leftover after parsing attributes in process `syz.0.700'. [ 133.106394][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112724][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.816733][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.827022][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.835649][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.855483][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.878964][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.887377][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.897978][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.908725][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.916243][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.936777][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.944036][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.953348][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.966594][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.979953][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.998267][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.012261][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.019695][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.029681][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 142.039220][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.052207][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.055336][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.070878][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.079046][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.086832][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.742478][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.753321][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.772316][ T7513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.781720][ T7513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.823138][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.834624][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.851391][ T7513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.865154][ T7513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.903271][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.914943][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.016292][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.029680][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.038316][ T5245] Bluetooth: hci0: command tx timeout [ 144.045587][ T5231] Bluetooth: hci5: command tx timeout [ 144.121011][ T5231] Bluetooth: hci6: command tx timeout [ 144.206356][ T5231] Bluetooth: hci7: command tx timeout [ 144.495324][ T52] dvmrp0 (unregistering): left allmulticast mode [ 144.657040][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.670969][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.681247][ T52] bond0 (unregistering): Released all slaves [ 144.695135][ T52] bond1 (unregistering): Released all slaves [ 144.802480][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 144.951595][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 145.033525][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 145.144810][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.168239][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.175445][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.183108][ T7853] bridge_slave_0: entered allmulticast mode [ 145.190752][ T7853] bridge_slave_0: entered promiscuous mode [ 145.206758][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.213872][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.222005][ T7853] bridge_slave_1: entered allmulticast mode [ 145.229369][ T7853] bridge_slave_1: entered promiscuous mode [ 145.252071][ T52] hsr_slave_0: left promiscuous mode [ 145.258217][ T52] hsr_slave_1: left promiscuous mode [ 145.264102][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.272189][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.280479][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.288105][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.311678][ T52] veth1_macvtap: left promiscuous mode [ 145.317583][ T52] veth0_macvtap: left promiscuous mode [ 145.323221][ T52] veth1_vlan: left promiscuous mode [ 145.328828][ T52] veth0_vlan: left promiscuous mode [ 145.758341][ T52] team0 (unregistering): Port device team_slave_1 removed [ 145.796760][ T52] team0 (unregistering): Port device team_slave_0 removed [ 146.087596][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 146.116470][ T5231] Bluetooth: hci5: command tx timeout [ 146.121916][ T5231] Bluetooth: hci0: command tx timeout [ 146.162482][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.174922][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.199735][ T5231] Bluetooth: hci6: command tx timeout [ 146.276425][ T5231] Bluetooth: hci7: command tx timeout [ 146.304704][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.312066][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.320083][ T7855] bridge_slave_0: entered allmulticast mode [ 146.327507][ T7855] bridge_slave_0: entered promiscuous mode [ 146.386810][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.407534][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.414634][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.423632][ T7855] bridge_slave_1: entered allmulticast mode [ 146.430803][ T7855] bridge_slave_1: entered promiscuous mode [ 146.449384][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.463439][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.470846][ T7856] bridge_slave_0: entered allmulticast mode [ 146.478355][ T7856] bridge_slave_0: entered promiscuous mode [ 146.489971][ T7853] team0: Port device team_slave_0 added [ 146.500323][ T7853] team0: Port device team_slave_1 added [ 146.573449][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.585410][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.592928][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.601626][ T7856] bridge_slave_1: entered allmulticast mode [ 146.609204][ T7856] bridge_slave_1: entered promiscuous mode [ 146.633315][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.640455][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.658073][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.665038][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.692823][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.731020][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.764739][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.782193][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.790419][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.817802][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.863465][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.872482][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.882925][ T7859] bridge_slave_0: entered allmulticast mode [ 146.890119][ T7859] bridge_slave_0: entered promiscuous mode [ 146.903481][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.910904][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.918636][ T7859] bridge_slave_1: entered allmulticast mode [ 146.929066][ T7859] bridge_slave_1: entered promiscuous mode [ 146.966312][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.982047][ T7853] hsr_slave_0: entered promiscuous mode [ 146.988560][ T7853] hsr_slave_1: entered promiscuous mode [ 147.029842][ T7855] team0: Port device team_slave_0 added [ 147.069881][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.077048][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.118432][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.139843][ T7855] team0: Port device team_slave_1 added [ 147.181385][ T7856] team0: Port device team_slave_0 added [ 147.191290][ T7856] team0: Port device team_slave_1 added [ 147.212822][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.308683][ T7859] team0: Port device team_slave_0 added [ 147.315246][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.322589][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.348854][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.367668][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.375281][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.408365][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.421659][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.429157][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.456431][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.483376][ T7859] team0: Port device team_slave_1 added [ 147.490203][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.497281][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.524301][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.663849][ T7856] hsr_slave_0: entered promiscuous mode [ 147.674737][ T7856] hsr_slave_1: entered promiscuous mode [ 147.682021][ T7856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.690153][ T7856] Cannot create hsr debugfs directory [ 147.742705][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.764999][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.772400][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.800830][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.813619][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.820747][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.847601][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.970742][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.016717][ T7855] hsr_slave_0: entered promiscuous mode [ 148.023788][ T7855] hsr_slave_1: entered promiscuous mode [ 148.045526][ T7855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.054121][ T7855] Cannot create hsr debugfs directory [ 148.190861][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.195943][ T5231] Bluetooth: hci0: command tx timeout [ 148.206990][ T5245] Bluetooth: hci5: command tx timeout [ 148.277336][ T5231] Bluetooth: hci6: command tx timeout [ 148.301530][ T7859] hsr_slave_0: entered promiscuous mode [ 148.340413][ T7859] hsr_slave_1: entered promiscuous mode [ 148.356410][ T5231] Bluetooth: hci7: command tx timeout [ 148.363128][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.375173][ T7859] Cannot create hsr debugfs directory [ 148.447809][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.994192][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.060582][ T7513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.077290][ T7853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.143894][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.190567][ T7853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.235535][ T7853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.289023][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.315587][ T7853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.399938][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.577807][ T7513] veth0_vlan: entered promiscuous mode [ 149.669248][ T7513] veth1_vlan: entered promiscuous mode [ 149.736811][ T7859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.783282][ T52] bridge_slave_1: left allmulticast mode [ 149.807242][ T52] bridge_slave_1: left promiscuous mode [ 149.813025][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.832310][ T52] bridge_slave_0: left allmulticast mode [ 149.843918][ T52] bridge_slave_0: left promiscuous mode [ 149.855216][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.892091][ T52] bridge_slave_1: left allmulticast mode [ 149.899066][ T52] bridge_slave_1: left promiscuous mode [ 149.905040][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.918465][ T52] bridge_slave_0: left allmulticast mode [ 149.924177][ T52] bridge_slave_0: left promiscuous mode [ 149.933484][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.276961][ T5245] Bluetooth: hci5: command tx timeout [ 150.282440][ T5231] Bluetooth: hci0: command tx timeout [ 150.356711][ T5231] Bluetooth: hci6: command tx timeout [ 150.436179][ T5231] Bluetooth: hci7: command tx timeout [ 150.674463][ T52] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 151.342282][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.352837][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.364594][ T52] bond0 (unregistering): Released all slaves [ 151.377822][ T52] bond1 (unregistering): Released all slaves [ 151.475083][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.496276][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.507316][ T52] bond0 (unregistering): Released all slaves [ 151.519130][ T52] bond1 (unregistering): Released all slaves [ 151.533272][ T52] bond2 (unregistering): Released all slaves [ 151.587129][ T7859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.685084][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.699571][ T52] tipc: Left network mode [ 151.740639][ T7859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.763353][ T7513] veth0_macvtap: entered promiscuous mode [ 151.780448][ T7513] veth1_macvtap: entered promiscuous mode [ 151.830174][ T7859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.854054][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.863899][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.874794][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.887265][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.904297][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.914908][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.925961][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.938133][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.961814][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.973405][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.984379][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.997907][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.008001][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.018559][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.031082][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.052725][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.059912][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.123013][ T7513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.132950][ T7513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.141920][ T7513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.150723][ T7513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.163957][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.171122][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.271017][ T7859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.334265][ T7859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.362977][ T7859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.395557][ T7859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.537283][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.545150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.707526][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.716144][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.814505][ T52] hsr_slave_0: left promiscuous mode [ 152.821835][ T52] hsr_slave_1: left promiscuous mode [ 152.835650][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.844762][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.857169][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.864596][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.881688][ T52] hsr_slave_0: left promiscuous mode [ 152.888588][ T52] hsr_slave_1: left promiscuous mode [ 152.894385][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.904271][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.913101][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.921135][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.947993][ T52] veth1_macvtap: left promiscuous mode [ 152.953510][ T52] veth0_macvtap: left promiscuous mode [ 152.959844][ T52] veth1_vlan: left promiscuous mode [ 152.965125][ T52] veth0_vlan: left promiscuous mode [ 152.971786][ T52] veth1_macvtap: left promiscuous mode [ 152.977584][ T52] veth0_macvtap: left promiscuous mode [ 152.984103][ T52] veth1_vlan: left promiscuous mode [ 152.990165][ T52] veth0_vlan: left promiscuous mode [ 153.513588][ T52] team0 (unregistering): Port device team_slave_1 removed [ 153.555196][ T52] team0 (unregistering): Port device team_slave_0 removed [ 154.164461][ T52] team0 (unregistering): Port device team_slave_1 removed [ 154.204049][ T52] team0 (unregistering): Port device team_slave_0 removed [ 154.519795][ T7856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.532831][ T7856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.557728][ T7856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.568163][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 154.591476][ T7856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.687572][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.749893][ T7855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.762960][ T7855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.813929][ T7855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.824623][ T7855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.948910][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.013539][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.021838][ T7853] veth0_vlan: entered promiscuous mode [ 155.053886][ T7853] veth1_vlan: entered promiscuous mode [ 155.112955][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.120099][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.160982][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.197422][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.204592][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.233115][ T7853] veth0_macvtap: entered promiscuous mode [ 155.258337][ T7853] veth1_macvtap: entered promiscuous mode [ 155.280423][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.300756][ T52] IPVS: stop unused estimator thread 0... [ 155.310750][ T52] IPVS: stop unused estimator thread 0... [ 155.318158][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.358559][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.365710][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.403714][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.415185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.422365][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.444188][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.457074][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.467685][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.480073][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.491807][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.509412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.516590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.574538][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.581719][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.633277][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.644877][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.661089][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.672007][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.683705][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.735129][ T7853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.758100][ T7853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.775914][ T7853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.784638][ T7853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.026776][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.097967][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.129971][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.142943][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.208929][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.233795][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.364255][ T7855] veth0_vlan: entered promiscuous mode [ 156.440294][ T7855] veth1_vlan: entered promiscuous mode [ 156.544433][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.611376][ T7855] veth0_macvtap: entered promiscuous mode [ 156.646858][ T8038] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 156.680873][ T7855] veth1_macvtap: entered promiscuous mode [ 156.773434][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.790943][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.814658][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.826017][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.837759][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.851970][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.864753][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.905574][ T7856] veth0_vlan: entered promiscuous mode [ 156.927898][ T7859] veth0_vlan: entered promiscuous mode [ 156.980693][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.003394][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.019231][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.046072][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.056379][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.067453][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.079145][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.110377][ T7859] veth1_vlan: entered promiscuous mode [ 157.128213][ T7855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.138709][ T7855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.147820][ T7855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.156982][ T7855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.177160][ T7856] veth1_vlan: entered promiscuous mode [ 157.297094][ T7856] veth0_macvtap: entered promiscuous mode [ 157.334889][ T8059] veth1: entered promiscuous mode [ 157.342676][ T8059] veth1: left promiscuous mode [ 157.385391][ T8058] veth1: entered promiscuous mode [ 157.392247][ T8058] veth1: left promiscuous mode [ 157.414546][ T7856] veth1_macvtap: entered promiscuous mode [ 157.477120][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.484989][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.492146][ T7859] veth0_macvtap: entered promiscuous mode [ 157.531778][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.551355][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.563115][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.564135][ T8065] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 157.580262][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.592540][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.607870][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.618823][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.629630][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.642203][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.662535][ T7859] veth1_macvtap: entered promiscuous mode [ 157.674228][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 157.692884][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.711121][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.724359][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.736233][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.752859][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.763480][ T8073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.723'. [ 157.765920][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.785689][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.801352][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.813272][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.818456][ T8073] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 157.829329][ T8073] netlink: 148 bytes leftover after parsing attributes in process `syz.0.723'. [ 157.860811][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.872465][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.898769][ T7856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.924967][ T7856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.945984][ T7856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.954727][ T7856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.000287][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.034046][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.056126][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.073853][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.107208][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.134846][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.144985][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.164721][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.174708][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.193422][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.218673][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.263209][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.298212][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.314798][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.333869][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.357336][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.379724][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.391087][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.402002][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.413064][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.424519][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.438399][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.451490][ T7859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.474231][ T7859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.488696][ T7859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.502342][ T7859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.515392][ T8092] can: request_module (can-proto-0) failed. [ 158.645546][ T8098] veth0_vlan: left promiscuous mode [ 158.656534][ T8098] veth0_vlan: entered promiscuous mode [ 158.985636][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.994239][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.029381][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.037456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.092605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.110260][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.149123][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.173252][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.450781][ T8137] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 159.488512][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.705'. [ 159.626087][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 159.670186][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 159.695552][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 159.883994][ T8158] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 159.939439][ T8165] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 159.997661][ T8165] tipc: Failed to obtain node identity [ 160.005638][ T8165] tipc: Enabling of bearer rejected, failed to enable media [ 160.165253][ T8176] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 160.178339][ T8176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.186051][ T8176] IPv6: NLM_F_CREATE should be set when creating new route [ 160.193352][ T8176] IPv6: NLM_F_CREATE should be set when creating new route [ 160.403255][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 160.425605][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 160.440203][ T8188] Cannot find set identified by id 4 to match [ 160.445307][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.751'. [ 160.633211][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 160.697935][ T8201] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 160.705618][ T8201] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.756'. [ 160.748784][ T8201] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 160.784958][ T8201] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 161.220493][ T8230] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 161.234825][ T8230] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.477363][ T8239] netlink: 'syz.4.767': attribute type 30 has an invalid length. [ 161.542512][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 161.619797][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 161.821338][ T8262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.051147][ T8272] vlan2: entered promiscuous mode [ 162.058691][ T8272] team0: entered promiscuous mode [ 162.064007][ T8272] team_slave_0: entered promiscuous mode [ 162.073883][ T8272] team_slave_1: entered promiscuous mode [ 162.082804][ T8272] team0: Device vlan2 is already an upper device of the team interface [ 162.095538][ T8272] team0: left promiscuous mode [ 162.106111][ T8272] team_slave_0: left promiscuous mode [ 162.113545][ T8272] team_slave_1: left promiscuous mode [ 162.216769][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.256241][ T8279] validate_nla: 3 callbacks suppressed [ 164.256254][ T8279] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 164.283193][ T8279] team0: Device hsr_slave_0 failed to register rx_handler [ 164.351797][ T8295] bridge_slave_0: left allmulticast mode [ 164.376087][ T8295] bridge_slave_0: left promiscuous mode [ 164.381883][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.417420][ T8295] bridge_slave_1: left allmulticast mode [ 164.423230][ T8295] bridge_slave_1: left promiscuous mode [ 164.431217][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.447382][ T8295] bond0: (slave bond_slave_0): Releasing backup interface [ 164.465659][ T8295] bond0: (slave bond_slave_1): Releasing backup interface [ 164.509392][ T8295] team0: Port device team_slave_0 removed [ 164.535233][ T8295] team0: Port device team_slave_1 removed [ 164.547643][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.555252][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.566681][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.574089][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.594387][ T8295] bond0: (slave netdevsim0): Releasing backup interface [ 165.059072][ T8325] __nla_validate_parse: 8 callbacks suppressed [ 165.059089][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 165.168773][ T8330] netlink: 'syz.1.792': attribute type 7 has an invalid length. [ 165.206079][ T8330] netlink: 'syz.1.792': attribute type 6 has an invalid length. [ 165.315157][ T8347] netlink: 168 bytes leftover after parsing attributes in process `syz.0.797'. [ 165.316383][ T8349] xt_connbytes: Forcing CT accounting to be enabled [ 165.342676][ T8349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.362334][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 165.374497][ T8349] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.532770][ T8357] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.541880][ T8357] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.550677][ T8357] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.559558][ T8357] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.622118][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.801606][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'. [ 165.819685][ T8386] netlink: 'syz.2.808': attribute type 4 has an invalid length. [ 165.853818][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'. [ 165.887769][ T8394] trusted_key: syz.0.809 sent an empty control message without MSG_MORE. [ 165.926802][ T8394] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 166.094462][ T8404] netlink: 288 bytes leftover after parsing attributes in process `syz.0.812'. [ 166.141302][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 166.273477][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 166.426848][ T8425] netlink: 'syz.2.819': attribute type 4 has an invalid length. [ 166.445818][ T8425] netlink: 17 bytes leftover after parsing attributes in process `syz.2.819'. [ 166.524361][ T8433] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 168.405148][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 168.441374][ T8455] geneve2: entered promiscuous mode [ 168.446749][ T8455] geneve2: entered allmulticast mode [ 170.497296][ T8487] __nla_validate_parse: 1 callbacks suppressed [ 170.497314][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 170.687696][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 170.726703][ T8506] bond0: entered promiscuous mode [ 170.919638][ T8521] netlink: 'syz.3.848': attribute type 3 has an invalid length. [ 170.986888][ T8527] ipt_REJECT: TCP_RESET invalid for non-tcp [ 171.390376][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 171.402181][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 171.550455][ T8569] netlink: 'syz.0.863': attribute type 7 has an invalid length. [ 171.558997][ T8569] netlink: 'syz.0.863': attribute type 39 has an invalid length. [ 171.623148][ T8569] bridge1: port 1(gretap1) entered blocking state [ 171.635352][ T8569] bridge1: port 1(gretap1) entered disabled state [ 171.656169][ T8569] gretap1: entered allmulticast mode [ 171.667417][ T8569] gretap1: entered promiscuous mode [ 171.693056][ T8574] netlink: 'syz.0.863': attribute type 7 has an invalid length. [ 171.718067][ T8574] netlink: 'syz.0.863': attribute type 39 has an invalid length. [ 171.997072][ T8591] netlink: 220 bytes leftover after parsing attributes in process `syz.1.870'. [ 172.216580][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 172.306495][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 172.317930][ T8611] virt_wifi0: mtu less than device minimum [ 172.334705][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 172.482607][ T8615] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 172.503496][ T8623] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 172.518943][ T8615] netlink: 'syz.2.880': attribute type 2 has an invalid length. [ 172.520238][ T8606] No such timeout policy "syz0" [ 172.543400][ T8615] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 172.570531][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 172.671690][ T8636] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 172.837610][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.858937][ T8644] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.887'. [ 173.657611][ T8699] netlink: 'syz.4.904': attribute type 11 has an invalid length. [ 174.208899][ T8739] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 174.262305][ T8370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.279902][ T8370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.193307][ T8791] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.266669][ T8796] Bluetooth: MGMT ver 1.23 [ 175.278586][ T8792] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 175.869193][ T8843] ip6_tunnel: non-ECT from fc00:0000:0800:0000:0000:0000:0000:0000 with DS=0x2 [ 176.036425][ T8852] batadv_slave_1: entered promiscuous mode [ 176.042412][ T8852] batadv_slave_1: entered allmulticast mode [ 176.309628][ T8865] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 176.607554][ T8878] validate_nla: 3 callbacks suppressed [ 176.607573][ T8878] netlink: 'syz.4.956': attribute type 7 has an invalid length. [ 176.908069][ T8893] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 176.917020][ T8893] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 177.318376][ T5231] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.401762][ T8926] : entered promiscuous mode [ 177.817665][ T8949] syzkaller0: entered promiscuous mode [ 177.827721][ T8949] syzkaller0: entered allmulticast mode [ 177.896726][ T8959] __nla_validate_parse: 16 callbacks suppressed [ 177.896744][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 177.913024][ T8957] bridge0: port 3(gretap0) entered blocking state [ 177.926740][ T8957] bridge0: port 3(gretap0) entered disabled state [ 177.933550][ T8957] gretap0: entered allmulticast mode [ 177.941702][ T8957] gretap0: entered promiscuous mode [ 177.948375][ T8957] bridge0: port 3(gretap0) entered blocking state [ 177.955956][ T8957] bridge0: port 3(gretap0) entered forwarding state [ 177.982064][ T8963] geneve2: entered promiscuous mode [ 177.992442][ T8963] geneve2: entered allmulticast mode [ 178.028868][ T8959] vlan2: entered allmulticast mode [ 178.034429][ T8959] bridge0: port 3(vlan2) entered blocking state [ 178.044799][ T8959] bridge0: port 3(vlan2) entered disabled state [ 178.229349][ T8375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.243642][ T8375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.354709][ T8977] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 179.227097][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 179.392437][ T9049] sctp: [Deprecated]: syz.2.1007 (pid 9049) Use of int in max_burst socket option deprecated. [ 179.392437][ T9049] Use struct sctp_assoc_value instead [ 179.421704][ T9050] sctp: [Deprecated]: syz.2.1007 (pid 9050) Use of int in max_burst socket option deprecated. [ 179.421704][ T9050] Use struct sctp_assoc_value instead [ 179.573461][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 179.673235][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 179.701620][ T9067] netlink: 'syz.4.1011': attribute type 14 has an invalid length. [ 180.180823][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 181.076903][ T9127] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 181.094405][ T9127] netlink: 'syz.4.1030': attribute type 2 has an invalid length. [ 181.109809][ T9127] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1030'. [ 182.981228][ T9155] netlink: 'syz.3.1036': attribute type 10 has an invalid length. [ 183.009808][ T5231] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.027286][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1036'. [ 183.048045][ T9155] bridge0: port 1(macvlan1) entered blocking state [ 183.064881][ T9155] bridge0: port 1(macvlan1) entered disabled state [ 183.072027][ T9155] macvlan1: entered allmulticast mode [ 183.080036][ T9155] veth1_vlan: entered allmulticast mode [ 183.089376][ T9155] macvlan1: entered promiscuous mode [ 183.097024][ T9155] bridge0: port 1(macvlan1) entered blocking state [ 183.104557][ T9155] bridge0: port 1(macvlan1) entered forwarding state [ 183.352161][ T9181] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1044'. [ 183.457530][ T9189] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.487010][ T9189] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1047'. [ 183.623194][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1052'. [ 183.831244][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 183.978419][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 184.767146][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 184.887188][ T9257] netlink: 'syz.1.1068': attribute type 29 has an invalid length. [ 185.204659][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1071'. [ 185.318608][ T9274] netlink: 'syz.0.1074': attribute type 34 has an invalid length. [ 185.368656][ T9280] tipc: Started in network mode [ 185.379142][ T9280] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 185.394877][ T9280] tipc: Enabled bearer , priority 10 [ 185.494441][ T9283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1076'. [ 185.531945][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 185.794705][ T9296] syz.0.1080 (9296) used greatest stack depth: 18352 bytes left [ 185.867564][ T9304] dummy0: entered promiscuous mode [ 185.873358][ T9300] xt_CT: No such helper "snmp" [ 185.897631][ T9303] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 185.912325][ T9300] dummy0: left promiscuous mode [ 185.927053][ T9306] xt_nfacct: accounting object `syz0' does not exists [ 186.325629][ T9328] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 186.364561][ T9328] ipvlan1: entered promiscuous mode [ 186.391724][ T9328] ipvlan1: entered allmulticast mode [ 186.413634][ T9328] veth0_vlan: entered allmulticast mode [ 186.440119][ T9328] bridge0: port 3(ipvlan1) entered blocking state [ 186.460541][ T9328] bridge0: port 3(ipvlan1) entered disabled state [ 186.479059][ T9328] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 186.507562][ T58] tipc: Node number set to 4269801488 [ 186.635568][ T9343] bridge_slave_0: left allmulticast mode [ 186.646712][ T9343] bridge_slave_0: left promiscuous mode [ 186.659212][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.753146][ T9343] bridge_slave_1: left allmulticast mode [ 186.767543][ T9343] bridge_slave_1: left promiscuous mode [ 186.786623][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.874089][ T9343] bond0: (slave bond_slave_0): Releasing backup interface [ 186.951908][ T9343] bond0: (slave bond_slave_1): Releasing backup interface [ 187.050484][ T9343] team0: Port device team_slave_0 removed [ 187.101080][ T9343] team0: Port device team_slave_1 removed [ 187.121421][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.130708][ T9374] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 187.135103][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.152137][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.160469][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.194522][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.217799][ T9348] team0: Port device bond0 added [ 187.719674][ T9410] netlink: 'syz.0.1109': attribute type 6 has an invalid length. [ 187.773436][ T9407] syzkaller1: entered promiscuous mode [ 187.790403][ T9407] syzkaller1: entered allmulticast mode [ 187.956695][ T5231] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 188.187692][ T9438] team0: Device wg2 is of different type [ 188.193462][ T9439] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 188.210808][ T9439] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 188.402811][ T9450] __nla_validate_parse: 11 callbacks suppressed [ 188.402831][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1120'. [ 188.445130][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.469079][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.552901][ T9455] openvswitch: netlink: Unknown nsh attribute 0 [ 188.618387][ T9467] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.636425][ T9467] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.728013][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 188.811533][ T9471] pimreg: entered allmulticast mode [ 188.863249][ T9471] pimreg: left allmulticast mode [ 189.023143][ T8370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.057311][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1128'. [ 189.131556][ T9485] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1132'. [ 189.138091][ T8370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.263396][ T8370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.393350][ T8370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.586787][ T8370] bridge_slave_1: left allmulticast mode [ 189.599848][ T8370] bridge_slave_1: left promiscuous mode [ 189.612415][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.631546][ T8370] bridge_slave_0: left allmulticast mode [ 189.641672][ T8370] bridge_slave_0: left promiscuous mode [ 189.657584][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.670161][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.681080][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.681915][ T8370] gretap1: left allmulticast mode [ 189.689891][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.703643][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.704176][ T8370] gretap1: left promiscuous mode [ 189.730569][ T8370] bridge1: port 1(gretap1) entered disabled state [ 189.741048][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.749814][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.340729][ T9521] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1142'. [ 190.518571][ T8370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.545013][ T8370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.569418][ T8370] bond0 (unregistering): Released all slaves [ 190.594785][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1140'. [ 190.634894][ T9511] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.655444][ T9511] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.677793][ T9511] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.687775][ T9511] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.698099][ T9511] geneve2: entered promiscuous mode [ 190.703503][ T9511] geneve2: entered allmulticast mode [ 190.921599][ T9540] pimreg: entered allmulticast mode [ 190.978273][ T9540] pimreg: left allmulticast mode [ 191.277225][ T9554] xt_l2tp: unknown flags: 18 [ 191.341405][ T8370] hsr_slave_0: left promiscuous mode [ 191.364206][ T8370] hsr_slave_1: left promiscuous mode [ 191.381431][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.393151][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.415501][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.432699][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.460959][ T9567] ieee802154 phy0 wpan0: encryption failed: -90 [ 191.472430][ T8370] veth1_macvtap: left promiscuous mode [ 191.485090][ T8370] veth0_macvtap: left promiscuous mode [ 191.485690][ T9565] netlink: zone id is out of range [ 191.493433][ T8370] veth1_vlan: left promiscuous mode [ 191.499454][ T9565] netlink: zone id is out of range [ 191.509406][ T9565] netlink: zone id is out of range [ 191.509646][ T8370] veth0_vlan: left promiscuous mode [ 191.514718][ T9565] netlink: zone id is out of range [ 191.525718][ T9565] netlink: zone id is out of range [ 191.531320][ T9565] netlink: zone id is out of range [ 191.537194][ T9565] netlink: zone id is out of range [ 191.542762][ T9565] netlink: zone id is out of range [ 191.548496][ T9565] netlink: zone id is out of range [ 191.797054][ T5245] Bluetooth: hci0: command tx timeout [ 192.097145][ T8370] team0 (unregistering): Port device team_slave_1 removed [ 192.151277][ T8370] team0 (unregistering): Port device team_slave_0 removed [ 192.642964][ T9581] xt_TCPMSS: Only works on TCP SYN packets [ 192.962771][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 193.074500][ T9599] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 193.280692][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.298533][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.326547][ T9504] bridge_slave_0: entered allmulticast mode [ 193.338068][ T9504] bridge_slave_0: entered promiscuous mode [ 193.367103][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.374236][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.388000][ T9504] bridge_slave_1: entered allmulticast mode [ 193.395295][ T9504] bridge_slave_1: entered promiscuous mode [ 193.436288][ T9615] x_tables: duplicate underflow at hook 1 [ 193.490665][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.532096][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.645277][ T9504] team0: Port device team_slave_0 added [ 193.669716][ T9504] team0: Port device team_slave_1 added [ 193.781958][ T9627] netlink: 'syz.1.1172': attribute type 11 has an invalid length. [ 193.783297][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.812985][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.850131][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.877792][ T5245] Bluetooth: hci0: command tx timeout [ 193.882646][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.890831][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.968899][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.081842][ T9639] netlink: 'syz.3.1175': attribute type 7 has an invalid length. [ 194.122740][ T9504] hsr_slave_0: entered promiscuous mode [ 194.146428][ T9504] hsr_slave_1: entered promiscuous mode [ 194.519091][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525535][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.877535][ T9678] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 194.937684][ T9504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.968550][ T9504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.000294][ T9504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.037943][ T9504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.089956][ T9686] nbd: must specify a device to reconfigure [ 195.205080][ T9693] __nla_validate_parse: 2 callbacks suppressed [ 195.205097][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 195.301395][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.353847][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.391967][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.399210][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.424231][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.431481][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.858513][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.990751][ T9504] veth0_vlan: entered promiscuous mode [ 196.013309][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 196.074017][ T9504] veth1_vlan: entered promiscuous mode [ 196.172303][ T9504] veth0_macvtap: entered promiscuous mode [ 196.231097][ T9504] veth1_macvtap: entered promiscuous mode [ 196.298856][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.327273][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.348138][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.371490][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.381511][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.391971][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.417669][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.460372][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.491229][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.519859][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.543182][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.570178][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.582818][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 196.592119][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.605693][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.619761][ T9764] ipip0: entered promiscuous mode [ 196.651339][ T9504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.679054][ T9504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.701946][ T9504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.722153][ T9504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.921911][ T9781] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 196.942711][ T8377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.943366][ T9781] netlink: 9340 bytes leftover after parsing attributes in process `syz.1.1217'. [ 196.965381][ T8377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.981921][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 197.100879][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.124140][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.286807][ T9787] net_ratelimit: 51 callbacks suppressed [ 197.286826][ T9787] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 197.533262][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 197.575497][ T9797] ip6gretap0: entered promiscuous mode [ 197.607222][ T9797] ip6gretap0: left promiscuous mode [ 197.729833][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1224'. [ 197.756744][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 198.001100][ T9826] syzkaller0: entered allmulticast mode [ 198.307774][ T9847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.433582][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1241'. [ 198.467279][ T9856] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1241'. [ 198.830531][ T9885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.863792][ T9890] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 198.873561][ T9888] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 198.992251][ T9898] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 199.022950][ T9898] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 199.401470][ T9917] IPv6: NLM_F_REPLACE set, but no existing node found! [ 199.636948][ T9931] netlink: 'syz.2.1262': attribute type 6 has an invalid length. [ 199.753518][ T9935] Cannot find add_set index 0 as target [ 199.952449][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.263219][ T9943] __nla_validate_parse: 8 callbacks suppressed [ 200.263238][ T9943] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1265'. [ 200.423171][ T9951] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1268'. [ 200.511791][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 200.774642][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.797553][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.806867][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.816326][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.832079][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.843469][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.880645][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.914585][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 200.951109][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 201.009143][ T9969] vxlan1: entered allmulticast mode [ 201.028969][ T9984] netlink: 'syz.1.1278': attribute type 178 has an invalid length. [ 201.149276][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.247904][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 201.357954][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.393882][T10003] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 201.500067][T10006] bridge0: port 3(gretap0) entered disabled state [ 201.958849][T10020] tipc: Started in network mode [ 201.963776][T10020] tipc: Node identity 3a7cefbcca3c, cluster identity 4711 [ 201.976771][T10020] tipc: Enabled bearer , priority 0 [ 202.059583][T10021] tipc: Resetting bearer [ 202.111861][T10017] tipc: Resetting bearer [ 202.918386][ T5231] Bluetooth: hci0: command tx timeout [ 203.109197][ T46] tipc: Node number set to 4030787516 [ 203.944363][T10017] tipc: Disabling bearer [ 203.958224][ T9966] chnl_net:caif_netlink_parms(): no params data found [ 204.066221][ T75] bridge_slave_1: left allmulticast mode [ 204.100337][ T75] bridge_slave_1: left promiscuous mode [ 204.117104][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.152610][ T75] bridge_slave_0: left allmulticast mode [ 204.164514][ T75] bridge_slave_0: left promiscuous mode [ 204.171101][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.712462][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.727996][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.738881][ T75] bond0 (unregistering): Released all slaves [ 204.931524][T10067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.955217][T10057] bond0: left promiscuous mode [ 204.977689][T10057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.995854][ T5231] Bluetooth: hci0: command tx timeout [ 205.017277][T10057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.296672][T10086] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 205.314688][T10086] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 205.343026][T10086] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1302'. [ 205.367108][T10086] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 205.367348][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.405551][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.421605][ T9966] bridge_slave_0: entered allmulticast mode [ 205.433256][T10092] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 205.454366][ T9966] bridge_slave_0: entered promiscuous mode [ 205.476920][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.484079][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.493796][ T9966] bridge_slave_1: entered allmulticast mode [ 205.502284][ T9966] bridge_slave_1: entered promiscuous mode [ 205.581891][T10086] ip6tnl0: entered promiscuous mode [ 205.663132][ T75] hsr_slave_0: left promiscuous mode [ 205.675315][ T75] hsr_slave_1: left promiscuous mode [ 205.696000][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.711852][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.723603][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.737807][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.781380][ T75] veth1_macvtap: left promiscuous mode [ 205.787362][T10110] Bluetooth: MGMT ver 1.23 [ 205.787764][ T75] veth0_macvtap: left promiscuous mode [ 205.805489][ T75] veth1_vlan: left promiscuous mode [ 205.811078][ T75] veth0_vlan: left promiscuous mode [ 206.294327][ T75] team0 (unregistering): Port device team_slave_1 removed [ 206.334582][ T75] team0 (unregistering): Port device team_slave_0 removed [ 206.764531][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.776809][T10085] ip6tnl0: left promiscuous mode [ 206.863964][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.067954][ T9966] team0: Port device team_slave_0 added [ 207.078724][ T5231] Bluetooth: hci0: command tx timeout [ 207.095336][ T9966] team0: Port device team_slave_1 added [ 207.178413][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.197763][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.233548][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.264157][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 207.291164][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.298351][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.349302][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.425222][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 207.495698][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 207.523956][ T9966] hsr_slave_0: entered promiscuous mode [ 207.533133][ T9966] hsr_slave_1: entered promiscuous mode [ 207.540395][T10144] syzkaller0: entered promiscuous mode [ 207.562783][T10147] syzkaller0 (unregistering): left promiscuous mode [ 207.648245][T10144] tunl0: entered promiscuous mode [ 207.682761][T10144] netlink: 'syz.1.1319': attribute type 3 has an invalid length. [ 207.693707][T10144] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1319'. [ 208.085411][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 208.111855][T10159] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1324'. [ 208.247294][T10167] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1327'. [ 208.303074][T10172] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1329'. [ 208.391711][ T52] bridge_slave_1: left allmulticast mode [ 208.407861][ T52] bridge_slave_1: left promiscuous mode [ 208.424800][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.467970][ T52] bridge_slave_0: left allmulticast mode [ 208.473793][ T52] bridge_slave_0: left promiscuous mode [ 208.484113][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.694441][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.758031][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.788901][ T52] bond0 (unregistering): Released all slaves [ 209.114724][ T52] hsr_slave_0: left promiscuous mode [ 209.167995][ T52] hsr_slave_1: left promiscuous mode [ 209.198259][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.217111][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.297901][T10228] tls_set_device_offload_rx: netdev not found [ 209.403766][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.414811][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.423617][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.437512][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.445327][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.453559][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.630754][ T52] team0 (unregistering): Port device team_slave_1 removed [ 209.670793][ T52] team0 (unregistering): Port device team_slave_0 removed [ 209.823748][T10217] netlink: 'syz.3.1339': attribute type 5 has an invalid length. [ 210.022128][T10238] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 210.061326][T10240] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 210.105880][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 210.363293][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 210.402305][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1346'. [ 210.430514][T10231] chnl_net:caif_netlink_parms(): no params data found [ 210.476618][T10261] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1349'. [ 210.503644][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 210.706367][T10272] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1352'. [ 210.741472][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1351'. [ 210.803413][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.813436][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.826293][T10231] bridge_slave_0: entered allmulticast mode [ 210.839719][T10231] bridge_slave_0: entered promiscuous mode [ 210.871065][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.880468][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.888674][T10231] bridge_slave_1: entered allmulticast mode [ 210.896620][T10231] bridge_slave_1: entered promiscuous mode [ 210.909780][T10277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.924786][T10277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.993991][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.029246][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.132837][T10231] team0: Port device team_slave_0 added [ 211.154230][T10231] team0: Port device team_slave_1 added [ 211.215213][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.223427][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.250426][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.269365][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.282921][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.331451][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.452473][T10231] hsr_slave_0: entered promiscuous mode [ 211.478630][T10231] hsr_slave_1: entered promiscuous mode [ 211.533844][T10295] ɶƣ0GC¦: entered promiscuous mode [ 211.557040][ T5231] Bluetooth: hci0: command tx timeout [ 212.062851][T10326] IPv6: sit2: Disabled Multicast RS [ 212.551750][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 212.745273][T10357] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 212.795031][T10357] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 213.033348][T10231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.090529][T10231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.113168][T10231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.163048][T10231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.234454][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 213.345699][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 213.493471][T10409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1385'. [ 213.528739][T10414] tipc: Invalid UDP bearer configuration [ 213.528791][T10414] tipc: Enabling of bearer rejected, failed to enable media [ 213.576617][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.612495][T10416] macvlan2: entered promiscuous mode [ 213.625332][T10416] macvlan2: entered allmulticast mode [ 213.636493][ T5245] Bluetooth: hci0: command tx timeout [ 213.674270][T10231] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.703980][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.711185][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.810436][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.817642][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.977750][T10439] netlink: 'syz.4.1395': attribute type 11 has an invalid length. [ 214.414964][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.527357][T10231] veth0_vlan: entered promiscuous mode [ 214.565033][T10231] veth1_vlan: entered promiscuous mode [ 214.631111][T10479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 214.651281][T10231] veth0_macvtap: entered promiscuous mode [ 214.690338][T10231] veth1_macvtap: entered promiscuous mode [ 214.728543][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.739841][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.750414][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.761913][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.772568][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.783360][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.796449][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.823657][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.844073][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.860514][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.871558][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.881651][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.893018][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.904876][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.010497][T10231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.019677][T10231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.028620][T10231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.037587][T10231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.185979][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.193843][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.242497][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.251253][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.502010][T10505] __nla_validate_parse: 2 callbacks suppressed [ 215.502028][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 215.518307][T10507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.684248][T10514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1415'. [ 215.716198][ T5245] Bluetooth: hci0: command 0x040f tx timeout [ 215.921390][T10517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1416'. [ 215.984405][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 216.006593][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 216.027318][T10507] Cannot find add_set index 0 as target [ 216.098071][T10523] bond1: entered promiscuous mode [ 216.137077][T10523] bond1: entered allmulticast mode [ 216.157626][T10523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.172783][T10526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'. [ 216.220473][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 216.251483][T10528] netlink: 'syz.2.1419': attribute type 26 has an invalid length. [ 216.291199][T10533] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 216.302270][T10528] netem: incorrect ge model size [ 216.315403][T10533] netlink: 'syz.4.1420': attribute type 2 has an invalid length. [ 216.331481][T10528] netem: change failed [ 216.560550][T10545] nftables ruleset with unbound chain [ 216.800614][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1428'. [ 217.008510][T10570] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1431'. [ 217.018924][T10570] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 217.475321][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.479679][T10594] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1436'. [ 217.573207][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.580975][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.658637][T10605] macvtap0: entered promiscuous mode [ 217.675505][T10605] macvtap0: left promiscuous mode [ 218.338608][T10644] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 219.050566][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.070768][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.080096][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.113172][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.128661][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.144430][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.714144][ T8377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.877489][ T8377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.936326][T10662] __nla_validate_parse: 3 callbacks suppressed [ 220.936348][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 221.043393][ T8377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.149933][T10674] syz.3.1459[10674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.150083][T10674] syz.3.1459[10674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.205581][ T8377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.236413][ T5231] Bluetooth: hci0: command tx timeout [ 221.550330][T10688] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1462'. [ 221.663298][ T8377] bridge_slave_1: left allmulticast mode [ 221.675530][ T8377] bridge_slave_1: left promiscuous mode [ 221.691967][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.707678][ T8377] bridge_slave_0: left allmulticast mode [ 221.713364][ T8377] bridge_slave_0: left promiscuous mode [ 221.721076][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.776929][T10705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1466'. [ 222.189346][ T8377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.204679][ T8377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.217246][ T8377] bond0 (unregistering): Released all slaves [ 222.244371][T10658] chnl_net:caif_netlink_parms(): no params data found [ 222.441509][T10723] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1469'. [ 222.494882][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 222.543614][T10730] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1470'. [ 222.594452][T10734] syz.4.1471[10734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.594601][T10734] syz.4.1471[10734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.690893][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.721360][ T5281] IPVS: starting estimator thread 0... [ 222.735956][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.756410][T10658] bridge_slave_0: entered allmulticast mode [ 222.765209][T10658] bridge_slave_0: entered promiscuous mode [ 222.775372][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 222.825921][T10742] IPVS: using max 17 ests per chain, 40800 per kthread [ 222.845092][ T8377] hsr_slave_0: left promiscuous mode [ 222.859063][ T8377] hsr_slave_1: left promiscuous mode [ 222.865049][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.873292][ T8377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.881458][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.889444][ T8377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.913184][ T8377] veth1_macvtap: left promiscuous mode [ 222.919682][ T8377] veth0_macvtap: left promiscuous mode [ 222.925542][ T8377] veth1_vlan: left promiscuous mode [ 222.931749][ T8377] veth0_vlan: left promiscuous mode [ 223.320351][ T5231] Bluetooth: hci0: command tx timeout [ 223.431595][ T8377] team0 (unregistering): Port device team_slave_1 removed [ 223.481965][ T8377] team0 (unregistering): Port device team_slave_0 removed [ 223.918604][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.925689][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.933466][T10658] bridge_slave_1: entered allmulticast mode [ 223.943461][T10658] bridge_slave_1: entered promiscuous mode [ 224.086964][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.117804][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.214284][T10658] team0: Port device team_slave_0 added [ 224.241072][T10753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.277607][T10658] team0: Port device team_slave_1 added [ 224.403548][T10760] tap0: tun_chr_ioctl cmd 1074025677 [ 224.411715][T10760] tap0: linktype set to 0 [ 224.439428][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.448027][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.469192][T10763] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 224.493883][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.525353][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.551853][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.590577][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.735049][T10658] hsr_slave_0: entered promiscuous mode [ 224.750831][T10658] hsr_slave_1: entered promiscuous mode [ 224.949800][T10790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'. [ 224.959663][T10788] gretap0: left allmulticast mode [ 224.964998][T10788] gretap0: left promiscuous mode [ 224.970726][T10788] bridge0: port 3(gretap0) entered disabled state [ 224.982549][T10788] bridge_slave_0: left allmulticast mode [ 224.988723][T10788] bridge_slave_0: left promiscuous mode [ 224.994781][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.009786][T10788] bridge_slave_1: left allmulticast mode [ 225.015456][T10788] bridge_slave_1: left promiscuous mode [ 225.022268][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.032927][T10788] bond0: (slave bond_slave_0): Releasing backup interface [ 225.050253][T10788] bond0: (slave bond_slave_1): Releasing backup interface [ 225.081290][T10788] team0: Port device team_slave_0 removed [ 225.105665][T10788] team0: Port device team_slave_1 removed [ 225.115593][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.123901][T10788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.133267][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.141480][T10788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.160033][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1486'. [ 225.206513][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.220730][T10792] team0: Port device bond0 added [ 225.396424][ T5231] Bluetooth: hci0: command tx timeout [ 225.604200][T10811] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.1490'. [ 225.960498][T10830] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 225.972847][ T8373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.987023][T10830] __nla_validate_parse: 2 callbacks suppressed [ 225.987041][T10830] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.1497'. [ 226.130633][ T8373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.300068][ T8373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.366609][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 226.378248][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 226.419518][T10840] erspan0: entered promiscuous mode [ 226.438376][T10840] batadv_slave_1: entered promiscuous mode [ 226.494133][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 226.499903][ T8373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.547548][T10658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.563119][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 226.573685][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.585287][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.587314][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 226.610476][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.610530][T10658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.631611][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.637517][T10658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.645977][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.653487][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.687303][T10658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.411728][ T8373] team0: Port device bond0 removed [ 227.419895][ T8373] bond0 (unregistering): Released all slaves [ 227.476848][ T5231] Bluetooth: hci0: command tx timeout [ 227.542224][ T8373] : left promiscuous mode [ 227.671810][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.704329][ T8373] tipc: Disabling bearer [ 227.736793][ T8373] tipc: Left network mode [ 227.782890][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.827661][T10847] chnl_net:caif_netlink_parms(): no params data found [ 227.868999][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.876227][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.967847][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 227.980607][T10887] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1512'. [ 227.995386][T10887] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 228.016964][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.024119][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.156847][ T8373] hsr_slave_0: left promiscuous mode [ 228.172244][ T8373] hsr_slave_1: left promiscuous mode [ 228.190972][ T8373] veth1_macvtap: left promiscuous mode [ 228.197084][ T8373] veth0_macvtap: left promiscuous mode [ 228.202738][ T8373] veth1_vlan: left promiscuous mode [ 228.208565][ T8373] veth0_vlan: left promiscuous mode [ 228.677085][ T5231] Bluetooth: hci2: command tx timeout [ 229.290949][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 229.303234][T10899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.326786][T10847] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.334156][T10847] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.346108][T10847] bridge_slave_0: entered allmulticast mode [ 229.353457][T10847] bridge_slave_0: entered promiscuous mode [ 229.365714][T10847] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.381454][T10847] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.395177][T10847] bridge_slave_1: entered allmulticast mode [ 229.411488][T10847] bridge_slave_1: entered promiscuous mode [ 229.505414][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.545117][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.649442][T10847] team0: Port device team_slave_0 added [ 229.691067][T10847] team0: Port device team_slave_1 added [ 229.778430][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.789541][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.819937][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.840728][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.852151][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.879507][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.951679][T10847] hsr_slave_0: entered promiscuous mode [ 229.959729][T10847] hsr_slave_1: entered promiscuous mode [ 229.966952][T10847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.974560][T10847] Cannot create hsr debugfs directory [ 229.990568][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.142245][T10658] veth0_vlan: entered promiscuous mode [ 230.159948][T10658] veth1_vlan: entered promiscuous mode [ 230.204523][T10658] veth0_macvtap: entered promiscuous mode [ 230.232049][T10658] veth1_macvtap: entered promiscuous mode [ 230.259372][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.270077][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.282612][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.299608][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.327117][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.413267][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.434232][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.446380][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.460629][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.472675][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.516366][T10658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.535805][T10658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.555901][T10658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.575794][T10658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.615547][T10926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.688666][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 230.756725][ T5231] Bluetooth: hci2: command tx timeout [ 230.770129][T10847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.780789][T10847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.802813][T10847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.805817][ T8385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.822113][T10847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.849532][ T8385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.914160][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.925456][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.162323][T10847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.210032][T10847] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.232794][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.240008][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.266760][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.273923][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.510805][T10953] netlink: 'syz.1.1527': attribute type 3 has an invalid length. [ 231.524626][T10953] __nla_validate_parse: 3 callbacks suppressed [ 231.524643][T10953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 231.644935][T10847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.747631][T10935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.779071][T10847] veth0_vlan: entered promiscuous mode [ 231.804474][T10847] veth1_vlan: entered promiscuous mode [ 231.871171][T10847] veth0_macvtap: entered promiscuous mode [ 231.884709][T10847] veth1_macvtap: entered promiscuous mode [ 231.930540][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.945533][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.960261][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.985086][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.998067][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.005429][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.016450][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.029340][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.029415][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.042426][T10847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.060944][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.074502][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.084922][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.093061][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.120744][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.131396][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.146876][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.157221][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.169001][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.182914][T10847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.211646][T10847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.221542][T10847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.234480][T10847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.243596][T10847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.481391][ T8376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.778235][ T8377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.802787][ T8377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.815120][T10963] chnl_net:caif_netlink_parms(): no params data found [ 232.838046][ T5245] Bluetooth: hci2: command tx timeout [ 232.919318][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.966396][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.137374][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.144542][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.161713][T10963] bridge_slave_0: entered allmulticast mode [ 233.174852][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.179551][T10963] bridge_slave_0: entered promiscuous mode [ 233.190272][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.198897][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.212876][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.221603][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.229531][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.295359][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.323900][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.344944][T10963] bridge_slave_1: entered allmulticast mode [ 233.353482][T10963] bridge_slave_1: entered promiscuous mode [ 233.412531][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.422610][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'. [ 233.477573][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.553729][T10963] team0: Port device team_slave_0 added [ 233.563899][T10963] team0: Port device team_slave_1 added [ 233.656741][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.663826][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.692030][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.714930][T11010] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1540'. [ 233.778853][ T8376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.814004][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.826418][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.856484][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.922332][ T8376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.937971][T11018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 233.998654][T10963] hsr_slave_0: entered promiscuous mode [ 234.010631][T10963] hsr_slave_1: entered promiscuous mode [ 234.017605][T10963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.025167][T10963] Cannot create hsr debugfs directory [ 234.093916][ T8376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.117166][ T5231] Bluetooth: hci0: command tx timeout [ 234.322415][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 234.414299][T11024] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 234.433812][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 234.632913][T10963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.644289][T10963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.654722][T10963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.675487][ T8376] bridge_slave_1: left allmulticast mode [ 234.681798][ T8376] bridge_slave_1: left promiscuous mode [ 234.687666][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.696778][ T8376] bridge_slave_0: left allmulticast mode [ 234.702433][ T8376] bridge_slave_0: left promiscuous mode [ 234.716380][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.099890][ T8376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.111006][ T8376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.124126][ T8376] bond0 (unregistering): Released all slaves [ 235.209477][T10963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.229657][T10963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.248432][T10963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.317120][ T5231] Bluetooth: hci2: command tx timeout [ 235.327505][T10997] chnl_net:caif_netlink_parms(): no params data found [ 235.350025][T11041] bridge0: entered allmulticast mode [ 235.498882][T10963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.511085][T10963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.523434][T10963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.563693][T11046] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 235.613057][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 235.632442][T11047] bond2: entered allmulticast mode [ 235.680289][T11048] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 235.721382][T11048] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 235.778996][T11048] bond2: (slave ip6gre1): making interface the new active one [ 235.796219][T11048] ip6gre1: entered allmulticast mode [ 235.816969][T11048] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 235.896739][T10963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.909447][T10963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.921258][T10963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.209685][ T8376] hsr_slave_0: left promiscuous mode [ 236.214867][T11060] sctp: [Deprecated]: syz.4.1551 (pid 11060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.214867][T11060] Use struct sctp_sack_info instead [ 236.215594][ T5231] Bluetooth: hci0: command tx timeout [ 236.256818][ T8376] hsr_slave_1: left promiscuous mode [ 236.276921][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.284425][ T8376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.317088][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.324524][ T8376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.381857][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.392091][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.400803][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.404547][ T8376] veth1_macvtap: left promiscuous mode [ 236.409962][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.423911][ T8376] veth0_macvtap: left promiscuous mode [ 236.432248][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.441671][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.441808][ T8376] veth1_vlan: left promiscuous mode [ 236.458039][ T8376] veth0_vlan: left promiscuous mode [ 237.001761][ T8376] team0 (unregistering): Port device team_slave_1 removed [ 237.053395][ T8376] team0 (unregistering): Port device team_slave_0 removed [ 237.397398][ T30] INFO: task udevd:5241 blocked for more than 143 seconds. [ 237.402429][ T5245] Bluetooth: hci2: command tx timeout [ 237.404860][ T30] Not tainted 6.11.0-rc5-syzkaller-00217-g031ae72825ce #0 [ 237.425960][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.434667][ T30] task:udevd state:D stack:23872 pid:5241 tgid:5241 ppid:1 flags:0x00004002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.445141][ T30] Call Trace: [ 237.448492][ T30] [ 237.451598][ T30] __schedule+0x1800/0x4a60 [ 237.457224][ T30] ? __pfx___schedule+0x10/0x10 [ 237.462118][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.467363][ T30] ? __lock_acquire+0x137a/0x2040 [ 237.472434][ T30] ? schedule+0x90/0x320 [ 237.477298][ T30] schedule+0x14b/0x320 [ 237.481615][ T30] schedule_timeout+0xb0/0x310 [ 237.495764][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 237.501266][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.507675][ T30] ? wait_for_completion+0x2fe/0x620 [ 237.512990][ T30] ? wait_for_completion+0x2fe/0x620 [ 237.536158][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.551694][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 237.567457][ T30] ? wait_for_completion+0x2fe/0x620 [ 237.572781][ T30] wait_for_completion+0x355/0x620 [ 237.582790][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 237.589377][ T30] ? flush_workqueue_prep_pwqs+0x45c/0x4c0 [ 237.595205][ T30] ? check_flush_dependency+0xb2/0x390 [ 237.601445][ T30] __flush_workqueue+0x7d6/0x1710 [ 237.606745][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 237.612653][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 237.618021][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 237.623494][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.629489][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 237.634968][ T30] nbd_disconnect_and_put+0xaa/0x250 [ 237.640842][ T30] ? __pfx_nbd_release+0x10/0x10 [ 237.647302][ T30] nbd_release+0x103/0x130 [ 237.651758][ T30] bdev_release+0x5e3/0x700 [ 237.656833][ T30] blkdev_release+0x15/0x20 [ 237.661336][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 237.667083][ T30] __fput+0x24a/0x8a0 [ 237.671111][ T30] __x64_sys_close+0x7f/0x110 [ 237.677295][ T30] do_syscall_64+0xf3/0x230 [ 237.681828][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.687210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.693769][ T30] RIP: 0033:0x7fe61fd170a8 [ 237.698506][ T30] RSP: 002b:00007ffeba95cbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 237.707314][ T30] RAX: ffffffffffffffda RBX: 00007fe61fbf8ae0 RCX: 00007fe61fd170a8 [ 237.715276][ T30] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008 [ 237.723955][ T30] RBP: 000055ebcc42d2b0 R08: 0000000000000001 R09: 0d4515f44b591570 [ 237.732222][ T30] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000002 [ 237.740778][ T30] R13: 000055ebcc41fa90 R14: 0000000000000008 R15: 000055ebcc416910 [ 237.749193][ T30] [ 237.752307][ T30] [ 237.752307][ T30] Showing all locks held in the system: [ 237.761637][ T30] 1 lock held by khungtaskd/30: [ 237.767051][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 237.777410][ T30] 2 locks held by kworker/u9:0/54: [ 237.782511][ T30] #0: ffff8880260a9148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.795240][ T30] #1: ffffc90000be7d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.807583][ T30] 3 locks held by klogd/4674: [ 237.812312][ T30] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 237.822728][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 237.834828][ T30] #2: ffff888078e00a18 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb0/0x1470 [ 237.844371][ T30] 2 locks held by getty/4990: [ 237.849480][ T30] #0: ffff888034b8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 237.859716][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 237.870541][ T30] 2 locks held by udevd/5241: [ 237.875206][ T30] #0: ffff8880260924c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 237.885927][ T30] #1: ffff88802605d198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_disconnect_and_put+0x34/0x250 [ 237.898460][ T30] 5 locks held by kworker/u8:12/8376: [ 237.903844][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.915327][ T30] #1: ffffc900037a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.926238][ T30] #2: ffffffff8fc7ef10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 237.935633][ T30] #3: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 237.946295][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 237.957731][ T30] 3 locks held by kworker/u8:13/8377: [ 237.963125][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.975353][ T30] #1: ffffc90002d5fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.987443][ T30] #2: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 237.997589][ T30] 3 locks held by kworker/u8:18/8385: [ 238.002981][ T30] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 238.013994][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 238.025993][ T30] #2: ffff888061b78768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 238.037213][ T30] 7 locks held by syz-executor/10963: [ 238.042600][ T30] #0: ffff888079842420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 238.052007][ T30] #1: ffff88807a600888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 238.062265][ T30] #2: ffff8880284363c8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 238.072791][ T30] #3: ffffffff8f5260c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 238.083486][ T30] #4: ffff8880591ea0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 238.094650][ T30] #5: ffff8880591eb250 (&devlink->lock_key#9){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 238.107155][ T30] #6: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 238.119082][ T30] 1 lock held by syz-executor/10997: [ 238.124358][ T30] #0: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.134295][ T30] 1 lock held by syz.4.1551/11060: [ 238.140134][ T30] #0: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.150032][ T30] 2 locks held by syz.1.1552/11062: [ 238.155214][ T30] #0: ffffffff8fcf1230 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 238.163572][ T30] #1: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 238.172937][ T30] 1 lock held by syz-executor/11065: [ 238.178288][ T30] #0: ffffffff8fc8bac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.188370][ T30] [ 238.190710][ T30] ============================================= [ 238.190710][ T30] [ 238.202110][ T30] NMI backtrace for cpu 0 [ 238.206503][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00217-g031ae72825ce #0 [ 238.217014][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.227056][ T30] Call Trace: [ 238.230323][ T30] [ 238.233241][ T30] dump_stack_lvl+0x241/0x360 [ 238.237909][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.243086][ T30] ? __pfx__printk+0x10/0x10 [ 238.247654][ T30] ? vprintk_emit+0x667/0x7c0 [ 238.252312][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 238.257331][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 238.262281][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.267732][ T30] ? _printk+0xd5/0x120 [ 238.271874][ T30] ? __pfx__printk+0x10/0x10 [ 238.276453][ T30] ? __wake_up_klogd+0xcc/0x110 [ 238.281295][ T30] ? __pfx__printk+0x10/0x10 [ 238.285875][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 238.290893][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 238.296869][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 238.302848][ T30] watchdog+0xff4/0x1040 [ 238.307092][ T30] ? watchdog+0x1ea/0x1040 [ 238.311509][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.316180][ T30] kthread+0x2f0/0x390 [ 238.320245][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.324912][ T30] ? __pfx_kthread+0x10/0x10 [ 238.329495][ T30] ret_from_fork+0x4b/0x80 [ 238.333907][ T30] ? __pfx_kthread+0x10/0x10 [ 238.338492][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.343261][ T30] [ 238.347525][ T30] Sending NMI from CPU 0 to CPUs 1: [ 238.352775][ C1] NMI backtrace for cpu 1 [ 238.352787][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.11.0-rc5-syzkaller-00217-g031ae72825ce #0 [ 238.352806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.352816][ C1] Workqueue: bat_events batadv_nc_worker [ 238.352841][ C1] RIP: 0010:lock_acquire+0x131/0x550 [ 238.352864][ C1] Code: 85 ff 02 00 00 83 3d c9 d2 a8 0e 00 0f 84 42 01 00 00 65 8b 05 b0 bd 92 7e 85 c0 0f 85 8f 01 00 00 65 48 8b 1c 25 00 d7 03 00 <48> 81 c3 dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f [ 238.352883][ C1] RSP: 0018:ffffc90000ab79e0 EFLAGS: 00000246 [ 238.352895][ C1] RAX: 0000000000000000 RBX: ffff88801e6a3c00 RCX: ffffffff816fcc84 [ 238.352907][ C1] RDX: 0000000000000000 RSI: ffffffff8c608d20 RDI: ffffffff8c608ce0 [ 238.352918][ C1] RBP: ffffc90000ab7b40 R08: ffffffff90186d2f R09: 1ffffffff2030da5 [ 238.352930][ C1] R10: dffffc0000000000 R11: fffffbfff2030da6 R12: 1ffff92000156f44 [ 238.352942][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 238.352953][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 238.352967][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.352978][ C1] CR2: 00007fa8c8865000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 238.352992][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.353002][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.353012][ C1] Call Trace: [ 238.353018][ C1] [ 238.353025][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 238.353044][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 238.353064][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.353082][ C1] ? nmi_handle+0x2a/0x5a0 [ 238.353106][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 238.353123][ C1] ? nmi_handle+0x14f/0x5a0 [ 238.353137][ C1] ? nmi_handle+0x2a/0x5a0 [ 238.353153][ C1] ? lock_acquire+0x131/0x550 [ 238.353170][ C1] ? default_do_nmi+0x63/0x160 [ 238.353190][ C1] ? exc_nmi+0x123/0x1f0 [ 238.353208][ C1] ? end_repeat_nmi+0xf/0x53 [ 238.353230][ C1] ? lock_acquire+0xd4/0x550 [ 238.353249][ C1] ? lock_acquire+0x131/0x550 [ 238.353267][ C1] ? lock_acquire+0x131/0x550 [ 238.353286][ C1] ? lock_acquire+0x131/0x550 [ 238.353304][ C1] [ 238.353309][ C1] [ 238.353318][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 238.353338][ C1] ? batadv_nc_worker+0xcb/0x610 [ 238.353357][ C1] ? __pfx_lock_release+0x10/0x10 [ 238.353378][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.353401][ C1] batadv_nc_worker+0xec/0x610 [ 238.353419][ C1] ? batadv_nc_worker+0xcb/0x610 [ 238.353438][ C1] ? batadv_nc_worker+0xcb/0x610 [ 238.353458][ C1] ? process_scheduled_works+0x945/0x1830 [ 238.353477][ C1] process_scheduled_works+0xa2c/0x1830 [ 238.353510][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.353534][ C1] ? assign_work+0x364/0x3d0 [ 238.353554][ C1] worker_thread+0x86d/0xd10 [ 238.353576][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.353605][ C1] ? __kthread_parkme+0x169/0x1d0 [ 238.353626][ C1] ? __pfx_worker_thread+0x10/0x10 [ 238.353644][ C1] kthread+0x2f0/0x390 [ 238.353663][ C1] ? __pfx_worker_thread+0x10/0x10 [ 238.353681][ C1] ? __pfx_kthread+0x10/0x10 [ 238.353700][ C1] ret_from_fork+0x4b/0x80 [ 238.353718][ C1] ? __pfx_kthread+0x10/0x10 [ 238.353738][ C1] ret_from_fork_asm+0x1a/0x30 [ 238.353765][ C1] [ 238.356452][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 238.356466][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00217-g031ae72825ce #0 [ 238.356487][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.356497][ T30] Call Trace: [ 238.356504][ T30] [ 238.356513][ T30] dump_stack_lvl+0x241/0x360 [ 238.356547][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.356566][ T30] ? __pfx__printk+0x10/0x10 [ 238.356581][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.356610][ T30] ? vscnprintf+0x5d/0x90 [ 238.356632][ T30] panic+0x349/0x860 [ 238.356651][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.356673][ T30] ? __pfx_panic+0x10/0x10 [ 238.356688][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 238.356708][ T30] ? __irq_work_queue_local+0x137/0x410 [ 238.356731][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 238.356750][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.356770][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 238.356793][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 238.356817][ T30] watchdog+0x1033/0x1040 [ 238.356845][ T30] ? watchdog+0x1ea/0x1040 [ 238.356873][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.356894][ T30] kthread+0x2f0/0x390 [ 238.356916][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.356937][ T30] ? __pfx_kthread+0x10/0x10 [ 238.356960][ T30] ret_from_fork+0x4b/0x80 [ 238.356981][ T30] ? __pfx_kthread+0x10/0x10 [ 238.357004][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.357038][ T30] [ 238.360230][ T30] Kernel Offset: disabled [ 238.841047][ T30] Rebooting in 86400 seconds..