last executing test programs: 1m33.505660946s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 1m26.793138338s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1m17.775613116s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 1m16.203633412s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 59.594470052s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 59.068041379s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 41.900625653s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 41.040486861s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 26.426066192s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 24.917061743s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 9.947308833s ago: executing program 0 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = accept(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0x6c3, 0x7, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x60}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x2, 0x8afb, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x5b, 0x3, 0x3, [{@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xefbd}, {@multicast2, 0x8}, {@multicast1}, {@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x57, 0x1, 0xe, [{@multicast2, 0x59c}, {@loopback, 0x4}, {@multicast2, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x250, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x250}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.894347695s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) 8.639209132s ago: executing program 0 (id=2599): r0 = socket(0x1a, 0x0, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={&(0x7f0000000240)="99531b5e53dabd7a411c27fb4360fb915e7f5aad631f5092eb38313112262bd5ed3b08a53be185cf5b103b2d9c", &(0x7f0000000280)=""/82, &(0x7f0000000300)="25f0340fe41032ba697143a5b17d7c0e2329c174a4ecde3aa3a083c27c838ff21e5b6b9ec20d44bfa9d5cef91ebeb7912f97d8c68213f8b717221032d0c79786c34882c2d8ed7a9a5af8c7887b854a25511a27c7cd0773cea7390d0b676614cc1c3bb5a62d0549262b778ae35d", &(0x7f0000000380)="abc64a222c0a4974fa3ec493c1bd01b9ac77c1b50e5c9573c4fed06f3c1f40b07aa8ba85d6ae6ac32ad0a5316343737bb7ee63c3fa2d3cfc3a98017eae88f930bae2b4d4000a0f4ec303c82c475e22c18a1de294fce79199c38a3b1a1bca635ed8", 0x2, r5, 0x4}, 0x38) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048044}, 0xc040) 8.59608095s ago: executing program 4 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0xfffffffffffffffc, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x1, 0xfffffffe, {0xa, 0x0, 0x0, r10, 0x40, 0x8, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}}, 0x20044090) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7.657861614s ago: executing program 0 (id=2602): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback={0xff000000, 0xffff8881a56043d8}, 0x700, 0x0, 0x0, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xf}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7f, 0x3c, 0x6}}, @challenge={0x10, 0x1, 0x5b}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x10000, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x1000, 0x9e}}, @dsss={0x3, 0x1, 0x68}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x50080}, 0x80) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x310, 0xf0, 0xffffffff, 0x310, 0x220, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @gre_key=0x6, @port=0x4e24}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e23, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e23, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) socket$nl_route(0x10, 0x3, 0x0) 7.295953818s ago: executing program 0 (id=2607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000f80)={0x24, @short={0x2, 0x38ff9980464f51d6, 0xfffe}}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ffffcffffff00000000000000004771fa4527f5a27c7a30be0bb0ba739d3aaa6d7b5dd1b889485506dc43c0a425318fcb503607ffd0baab845f4f7989", @ANYRES32=0x0, @ANYBLOB="0000000000800000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0100040001040000"], 0x48}}, 0x0) 7.057137378s ago: executing program 0 (id=2611): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000101a6a5c565eca000000000000000000000a28000000000a0101000000005e1affd5f17547982aac74c873797a300000000008000240000000032c008dcce6f7730000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b07000000000000007400000c0002804c0808cb08000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x400, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f0308000000000000e2ffca1b1f0000001104c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f20900f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0xd, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000700)=""/236, &(0x7f0000000180)=0xec) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x44000) write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4], 0xb) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe3c, 0x0}, 0x200040c0) unshare(0x44040000) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x470, 0x4) syz_emit_ethernet(0x3c2, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000001d43afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af18020001000100000000001995319cff0318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38ce7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4addfa954b9cc5631cd52c905c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac90aa235a670670ffc5dc49dfb58d89310000000000030cd47ae6e8805d4809c20547406b18901b0aeff04c6fd97313672d90f18266c00b9e6d160300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4fbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0030000002107fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb00145e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be"], 0x0) unshare(0xc8000280) 2.845277493s ago: executing program 0 (id=2627): unshare(0x42000000) (async) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1003, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000ff010000000000805b00000004000000", @ANYRES32=r0, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000008c0)={0x1}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x1, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1, &(0x7f0000000300)}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0xa, &(0x7f0000000000), 0x4) (async) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x0) 2.647966034s ago: executing program 2 (id=2629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2", 0x7) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="a821fa9404c495aa62e2488ffc79a9f48e27dd32808d17cd19a0", 0x1a}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x4004080) 2.483602553s ago: executing program 2 (id=2631): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @bcast, @bpq0, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x6e, "8082a8d09a9fe02d9fb649059800e8508af78be63e465f70fe6e6be4b6a072837df974dae6ab4c9479fe3845c4fdb9dd9aa8cda0ceee2574691752a89a12c5c7a44dc64f1661e92c0d931efef4f603c67bba73643806d1159d112be12c22b5de6fe51a51342fcaabc798a27f25e7"}, &(0x7f0000000100)=0x76) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0xff}, &(0x7f0000000180)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3a}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c810) socket$nl_route(0x10, 0x3, 0x0) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/46, 0x2e}], 0x5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000780)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000007c0)={r6, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000800)={r2, @in6={{0xa, 0x4e24, 0xfffff000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x84) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040841}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000b40)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x6, @broadcast}, 0x40, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 'vcan0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@getneightbl={0x14, 0x42, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000cc0)='ipvlan1\x00') r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000d40), r8) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r13, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408d1}, 0x20000091) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f80)={r14, &(0x7f0000000f00)="0f38635977d61488b8ed4f6f08eb53ea4794c6fd4c0c67dc826ce1d33687735084ec311f6733651c73", &(0x7f0000000f40)=""/24, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x88, 0x1403, 0x6e726c0bb22c02fc, 0x70bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8801}, 0x840) 2.124189794s ago: executing program 1 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.535888217s ago: executing program 2 (id=2634): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x407) accept4(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) 1.435126276s ago: executing program 1 (id=2635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x2642}, {r2, 0x3226}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.117300194s ago: executing program 1 (id=2636): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x4, 0x2}, 0x4}}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x2, [0x6afe, 0x0]}}) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="943b761f520acdb0f5a65e29874e9b52794aea0dc614afbd2df638df0bd54be6b31c228297fb0d3e104c800bf68664484f78247246f17d98f5221525161ffa220a2cf0595436c62f99d0a11f22e338986a35d4237875285bfba991ac78592c89304379ad8a1af3e5a05e8d4917c732be93b55e0f28"], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) r10 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 539.549969ms ago: executing program 2 (id=2637): r0 = socket(0x2a, 0x2, 0xffffffff) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069060000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb70200000800e500b703000000400000850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xfff2, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05ef0400000000000011b60002000000850000002a00000095000000000000089500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x48}}, 0x4891) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e28, 0x4}}, 0x10, 0x0}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x1b, 0xda2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf1000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x4176, 0x0, r0, 0x0, '\x00', r9, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r8, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/84, 0x54, 0x0, &(0x7f0000000840)=""/184, 0xb8}}, 0x10) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r13, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd074ddc28aeaaa686608c5c50538ee", 0xc1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xffffffc0, 0x9a, &(0x7f0000000680)=""/154, 0x40f00, 0x22, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xb, 0x40, 0xa}, 0x10, r12, 0x0, 0x3, &(0x7f0000000980)=[r13], &(0x7f00000009c0)=[{0x1, 0x3, 0x5, 0x6}, {0x2, 0x5, 0x9, 0x2}, {0x3, 0x2, 0x9}], 0x10, 0x7fff, @void, @value}, 0x94) 431.75606ms ago: executing program 2 (id=2638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)={[0x81]}, 0x8}) 337.211964ms ago: executing program 2 (id=2639): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x6, 0x777a, 0x6, 0x6, 0x46b, 0x5, 0xfffffff6, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x7, 0x25, 0x8000}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000780)={r3, 0xb1, "1142311390cf76ef5557221fd82b187afd3f6a82fbe597cc22db0b1bfa08f8a0b2cc1eccb08980149babd23653bd5e47621a44a517eafb62991bc81ff9cb7a1e047a113f496a68066a6af57caf400b3450a023f31f2da72407f2467a89fccf049e5a97e902eb303900207cf43f3b3dbcd37934166c2222faa374d175474e426ad2f42c8540704d7fd905f787eddc1dbc9f95e1023c6f2b5b63b15cca087cbeca0f617787e92436f20371d0481bb4c07929"}, &(0x7f0000000300)=0xb9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x6}, @timestamp={0x44, 0x8, 0x99, 0x0, 0x4, [0x2]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x80}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x5}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20004880) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @random="c110bd84a9e3"}, 0x10) 113.447233ms ago: executing program 1 (id=2640): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000a0000000800000000007b0a0000000000b70000000000000cde0eed0b10398e8e411f18edb2d5ed28b480000000957649e9186b3bdd83df14834f5163f8918ea70eb32a28cfb6241cc7fec60b5fa7cf55c61477fa90adc5fb68dcf92eb5202fd6b8c8020bd1c9350f64a37433eac4cda9bc517cac38c5d997444660d97b238931444b3a39b9cf8c442fe0a2f91bd5f74eaeeab058f5e0b7dee12db4dcba25cd9e041fdf89270b3b9503cf0c07b1e5184781c35090cfb6a483546500"/200], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) 105.497733ms ago: executing program 1 (id=2641): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4004080) 0s ago: executing program 1 (id=2642): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x200000000000018e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) sendmsg$NFT_BATCH(r3, 0x0, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'pimreg1\x00', 0x400}) write$tun(r7, &(0x7f0000000600)=ANY=[], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000a80), 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8b04, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x12, &(0x7f0000000140), 0x4) kernel console output (not intermixed with test programs): 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.744362][T13616] RSP: 002b:00007f4156403038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.744377][T13616] RAX: ffffffffffffffda RBX: 00007f41557a5fa0 RCX: 00007f415558cde9 [ 305.744387][T13616] RDX: 0000000000000080 RSI: 00004000000003c0 RDI: 0000000000000004 [ 305.744395][T13616] RBP: 00007f4156403090 R08: 0000000000000000 R09: 0000000000000000 [ 305.744403][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.744411][T13616] R13: 0000000000000000 R14: 00007f41557a5fa0 R15: 00007fff8882a9c8 [ 305.744431][T13616] [ 306.079803][T13625] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2148'. [ 306.337158][T13201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.379114][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'. [ 306.396873][T13634] tipc: Enabling of bearer rejected, media not registered [ 306.541367][T13637] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 306.633167][T13637] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 306.674301][ T151] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.698214][T13637] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.717992][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.737462][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.747490][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.755480][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.763774][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.771557][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.800685][T13637] vlan3: entered promiscuous mode [ 306.816801][ T151] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.922829][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 306.966094][T13650] macvtap1: entered promiscuous mode [ 306.971454][T13650] bond0: entered promiscuous mode [ 306.998560][T13650] macvtap1: entered allmulticast mode [ 307.004494][T13650] bond0: entered allmulticast mode [ 307.023485][T13650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 307.038403][T13651] bond0: left allmulticast mode [ 307.050743][T13651] bond0: left promiscuous mode [ 307.059235][T13642] lo speed is unknown, defaulting to 1000 [ 307.065480][T13654] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.074335][T13654] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.082959][T13654] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.091287][T13654] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.132173][T13654] vxlan1: entered promiscuous mode [ 307.153738][T13654] vxlan1: entered allmulticast mode [ 307.185738][T13654] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.194154][T13654] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.203717][T13654] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.213611][T13654] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.354571][T13656] netlink: 'syz.1.2156': attribute type 39 has an invalid length. [ 307.391870][T13201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.440301][T13642] lo speed is unknown, defaulting to 1000 [ 307.448417][T13665] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.522280][T13674] netlink: 'syz.2.2160': attribute type 4 has an invalid length. [ 307.563052][T13201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.575084][T13672] netlink: 'syz.2.2160': attribute type 4 has an invalid length. [ 307.589677][T13665] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.687789][T13201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.753791][T13665] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.840102][T13665] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.116110][T13201] bridge_slave_1: left allmulticast mode [ 308.134531][T13201] bridge_slave_1: left promiscuous mode [ 308.149509][T13201] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.169660][T13201] bridge_slave_0: left allmulticast mode [ 308.175946][T13201] bridge_slave_0: left promiscuous mode [ 308.181875][T13201] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.718992][T13201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.731103][T13201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.743723][T13201] bond0 (unregistering): Released all slaves [ 308.774702][T13665] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.816958][T13679] lo speed is unknown, defaulting to 1000 [ 308.833440][ T5842] Bluetooth: hci3: command tx timeout [ 308.991794][T13665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.043343][T13665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.112913][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2165'. [ 309.144302][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2165'. [ 309.164590][T13665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.189600][T13679] lo speed is unknown, defaulting to 1000 [ 309.209409][T13682] lo speed is unknown, defaulting to 1000 [ 309.244407][T13642] chnl_net:caif_netlink_parms(): no params data found [ 309.595348][T13707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 309.669157][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 309.700466][T13707] tipc: Enabling of bearer rejected, media not registered [ 309.973007][T13682] lo speed is unknown, defaulting to 1000 [ 309.979585][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.988976][T13717] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 309.999081][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.015917][T13642] bridge_slave_0: entered allmulticast mode [ 310.033609][T13642] bridge_slave_0: entered promiscuous mode [ 310.180603][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.188942][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.205810][T13642] bridge_slave_1: entered allmulticast mode [ 310.212949][T13642] bridge_slave_1: entered promiscuous mode [ 310.235069][T13721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2172'. [ 310.376166][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.459457][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.493651][T13201] hsr_slave_0: left promiscuous mode [ 310.500723][T13201] hsr_slave_1: left promiscuous mode [ 310.508856][T13201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.516880][T13201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.534273][T13201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.542522][T13201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.581481][T13201] veth1_macvtap: left promiscuous mode [ 310.588186][T13201] veth0_macvtap: left promiscuous mode [ 310.593897][T13201] veth1_vlan: left promiscuous mode [ 310.600166][T13201] veth0_vlan: left promiscuous mode [ 310.898129][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2177'. [ 310.908167][ T5842] Bluetooth: hci3: command tx timeout [ 311.290085][T13201] team0 (unregistering): Port device team_slave_1 removed [ 311.349603][T13201] team0 (unregistering): Port device team_slave_0 removed [ 311.894002][T13642] team0: Port device team_slave_0 added [ 311.924990][T13642] team0: Port device team_slave_1 added [ 312.364068][T13756] netlink: zone id is out of range [ 312.394060][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 312.422675][T13756] netlink: zone id is out of range [ 312.447051][T13759] netlink: 'syz.0.2178': attribute type 2 has an invalid length. [ 312.450346][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.486131][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.533821][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.729635][T13759] Tq€!7: entered promiscuous mode [ 312.755717][T13756] netlink: set zone limit has 4 unknown bytes [ 312.759571][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.775845][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.865691][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.990475][ T5842] Bluetooth: hci3: command tx timeout [ 313.350295][T13642] hsr_slave_0: entered promiscuous mode [ 313.366467][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 313.422951][T13642] hsr_slave_1: entered promiscuous mode [ 313.437669][T13642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.476074][T13642] Cannot create hsr debugfs directory [ 313.498441][T13770] erspan0: entered promiscuous mode [ 313.514561][T13770] macvtap2: entered promiscuous mode [ 313.525880][T13770] macvtap2: entered allmulticast mode [ 313.541549][T13770] erspan0: entered allmulticast mode [ 313.601485][T13771] erspan0: left allmulticast mode [ 313.609848][T13771] erspan0: left promiscuous mode [ 313.766536][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 313.814385][T13773] erspan0: entered promiscuous mode [ 313.824468][T13773] macvtap3: entered promiscuous mode [ 313.834619][T13773] macvtap3: entered allmulticast mode [ 313.845797][T13773] erspan0: entered allmulticast mode [ 313.882988][T13774] erspan0: left allmulticast mode [ 313.895796][T13774] erspan0: left promiscuous mode [ 314.096644][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2185'. [ 315.066052][ T5842] Bluetooth: hci3: command tx timeout [ 315.168382][T13642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.198708][T13642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.223799][T13642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.231399][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 315.258350][T13642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.267804][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 315.300158][T13803] tipc: Started in network mode [ 315.318194][T13803] tipc: Node identity ac14140f, cluster identity 4711 [ 315.327277][T13803] tipc: Enabled bearer , priority 10 [ 315.539542][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 315.551091][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.581354][T13808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.620051][T13808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.732306][T13642] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.770509][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.777702][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.828942][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.836147][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.909349][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2196'. [ 315.956718][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2196'. [ 315.973242][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2197'. [ 316.350572][T13642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.440115][T13642] veth0_vlan: entered promiscuous mode [ 316.446533][ T5859] tipc: Node number set to 2886997007 [ 316.488460][T13642] veth1_vlan: entered promiscuous mode [ 316.575984][T13642] veth0_macvtap: entered promiscuous mode [ 316.590012][T13642] veth1_macvtap: entered promiscuous mode [ 316.667982][T13642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.694196][T13642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.720647][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 316.789257][T13642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.825111][T13642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.856557][T13642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.865318][T13642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.931502][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 317.135305][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.153479][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.208609][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.227783][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.894925][ T151] bridge_slave_1: left allmulticast mode [ 317.914229][ T151] bridge_slave_1: left promiscuous mode [ 317.944772][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.968355][ T151] bridge_slave_0: left allmulticast mode [ 317.974306][ T151] bridge_slave_0: left promiscuous mode [ 317.986763][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.387597][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'. [ 318.797288][T13859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2208'. [ 319.123084][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.134023][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.142741][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.165747][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.175986][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.186338][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.580500][ T151] bond1 (unregistering): Released all slaves [ 319.715102][ T151] Tq€!7: left promiscuous mode [ 319.925925][T13873] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 320.066074][T13876] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 320.089648][T13876] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 320.103483][T13860] lo speed is unknown, defaulting to 1000 [ 320.373024][T13860] lo speed is unknown, defaulting to 1000 [ 320.624303][T13895] netlink: zone id is out of range [ 320.672641][T13895] netlink: zone id is out of range [ 320.752785][T13891] netlink: 'syz.2.2217': attribute type 2 has an invalid length. [ 321.053486][T13895] netlink: set zone limit has 4 unknown bytes [ 321.154366][T13907] dvmrp8: entered allmulticast mode [ 321.226093][ T5842] Bluetooth: hci3: command tx timeout [ 321.270238][ T151] hsr_slave_0: left promiscuous mode [ 321.294737][ T151] hsr_slave_1: left promiscuous mode [ 321.309101][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.327329][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.996512][ T151] team0 (unregistering): Port device team_slave_1 removed [ 322.074052][ T151] team0 (unregistering): Port device team_slave_0 removed [ 322.556068][T13894] lo speed is unknown, defaulting to 1000 [ 322.872715][T13930] IPVS: set_ctl: invalid protocol: 43 172.20.20.33:20004 [ 322.921966][T13894] lo speed is unknown, defaulting to 1000 [ 322.975143][T13860] chnl_net:caif_netlink_parms(): no params data found [ 323.260286][T13926] lo speed is unknown, defaulting to 1000 [ 323.305684][ T5842] Bluetooth: hci3: command tx timeout [ 323.465902][T13860] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.473038][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.507102][T13942] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 323.509434][T13860] bridge_slave_0: entered allmulticast mode [ 323.548967][T13860] bridge_slave_0: entered promiscuous mode [ 323.567676][T13928] __nla_validate_parse: 7 callbacks suppressed [ 323.567697][T13928] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2226'. [ 323.584567][T13944] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2229'. [ 323.597960][ T151] IPVS: stop unused estimator thread 0... [ 323.602239][T13926] lo speed is unknown, defaulting to 1000 [ 323.637968][T13942] bond5: entered promiscuous mode [ 323.658405][T13942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.673484][T13946] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2229'. [ 323.718338][T13860] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.735043][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.743109][T13860] bridge_slave_1: entered allmulticast mode [ 323.757133][T13860] bridge_slave_1: entered promiscuous mode [ 323.769229][T13944] batadv3: entered promiscuous mode [ 323.774485][T13944] batadv3: entered allmulticast mode [ 323.783277][T13944] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 323.805456][T13944] bond5: (slave batadv3): making interface the new active one [ 323.828806][T13944] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 323.932984][T13946] batadv4: entered promiscuous mode [ 323.946290][T13946] batadv4: entered allmulticast mode [ 323.953241][T13946] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 323.977486][T13946] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 324.949053][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 324.966723][ T151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.985041][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 325.007919][T13860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.090299][ T151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.135235][T13860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.293618][ T151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.386137][ T5842] Bluetooth: hci3: command tx timeout [ 325.505293][T13860] team0: Port device team_slave_0 added [ 325.590153][ T151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.655172][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.664524][T13860] team0: Port device team_slave_1 added [ 325.666574][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.683768][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.698479][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.709056][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.716639][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.755185][T13860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.762571][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.795795][T13860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.819125][T13860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.827975][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.914356][T13860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.123481][T13860] hsr_slave_0: entered promiscuous mode [ 326.146831][T13860] hsr_slave_1: entered promiscuous mode [ 326.159157][ T151] bridge_slave_1: left allmulticast mode [ 326.164859][ T151] bridge_slave_1: left promiscuous mode [ 326.190802][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.238065][ T151] bridge_slave_0: left allmulticast mode [ 326.243768][ T151] bridge_slave_0: left promiscuous mode [ 326.284627][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.733869][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.744796][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.755923][ T151] bond0 (unregistering): Released all slaves [ 326.795420][T13955] lo speed is unknown, defaulting to 1000 [ 327.144169][T13955] lo speed is unknown, defaulting to 1000 [ 327.263127][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 327.284699][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 327.467270][ T5842] Bluetooth: hci3: command tx timeout [ 327.684255][T13996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2248'. [ 327.797847][ T5842] Bluetooth: hci4: command tx timeout [ 328.132205][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 328.207637][T14015] netlink: 'syz.1.2253': attribute type 4 has an invalid length. [ 328.256865][ T151] hsr_slave_0: left promiscuous mode [ 328.267550][ T151] hsr_slave_1: left promiscuous mode [ 328.273891][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.289714][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.317919][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.334384][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.375855][ T151] veth1_macvtap: left promiscuous mode [ 328.381907][ T151] veth0_macvtap: left promiscuous mode [ 328.388795][ T151] veth1_vlan: left promiscuous mode [ 328.399315][ T151] veth0_vlan: left promiscuous mode [ 329.212076][ T151] team0 (unregistering): Port device team_slave_1 removed [ 329.268082][ T151] team0 (unregistering): Port device team_slave_0 removed [ 329.804415][T13955] chnl_net:caif_netlink_parms(): no params data found [ 329.815122][T14007] lo speed is unknown, defaulting to 1000 [ 329.866116][ T5842] Bluetooth: hci4: command tx timeout [ 329.896006][ T5859] lo speed is unknown, defaulting to 1000 [ 329.974858][T14007] lo speed is unknown, defaulting to 1000 [ 330.187629][T13955] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.195004][T13955] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.202896][T13955] bridge_slave_0: entered allmulticast mode [ 330.219513][T13955] bridge_slave_0: entered promiscuous mode [ 330.230972][T13860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.257139][T13955] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.274581][T13955] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.286173][T13955] bridge_slave_1: entered allmulticast mode [ 330.293356][T13955] bridge_slave_1: entered promiscuous mode [ 330.301557][T14036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2261'. [ 330.347162][T13860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.358546][T13860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.480954][T13860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.501646][T13955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.519232][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 330.519867][T13955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.549374][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2262'. [ 330.702201][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'. [ 330.730620][T13955] team0: Port device team_slave_0 added [ 330.768025][T13955] team0: Port device team_slave_1 added [ 330.840374][T13955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.865672][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.910393][T13955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.026512][T13955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.034830][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.099124][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 331.128046][T13955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.308670][T13955] hsr_slave_0: entered promiscuous mode [ 331.315332][T13955] hsr_slave_1: entered promiscuous mode [ 331.322112][T13955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.333669][T13955] Cannot create hsr debugfs directory [ 331.393731][T13860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.533376][T13860] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.563024][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.570197][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.608142][T13955] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.626467][T13955] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 331.654413][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.661555][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.730917][T13955] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.746813][T13955] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 331.847887][T13955] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.861726][T13955] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 331.918575][T13955] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.946838][ T5842] Bluetooth: hci4: command tx timeout [ 331.952970][T13955] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.186090][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.217137][T13955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.229357][T13955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.254824][T13955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.264870][T13955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.357595][T13860] veth0_vlan: entered promiscuous mode [ 332.390102][T13860] veth1_vlan: entered promiscuous mode [ 332.452389][T13860] veth0_macvtap: entered promiscuous mode [ 332.467668][T13860] veth1_macvtap: entered promiscuous mode [ 332.537723][T13955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.559461][T13860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.584522][T13860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.595237][T13955] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.613967][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.621250][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.634139][T13860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.643252][T13860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.652480][T13860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.661434][T13860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.683572][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.690832][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.779135][T14091] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2280'. [ 332.944235][T13203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.974520][T13203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.052885][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.069381][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.272457][T13955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.898379][T13955] veth0_vlan: entered promiscuous mode [ 333.923035][T13955] veth1_vlan: entered promiscuous mode [ 334.002444][T14136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 334.026775][ T5842] Bluetooth: hci4: command tx timeout [ 334.133121][ T8282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.192021][T13955] veth0_macvtap: entered promiscuous mode [ 334.259383][T13955] veth1_macvtap: entered promiscuous mode [ 334.300993][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.312098][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.323701][T13955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.339173][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.362258][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.374187][T13955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.404829][ T8282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.424310][T13955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.435287][T13955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.444114][T13955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.453971][T13955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.544825][ T8282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.565979][T13201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.573836][T13201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.607290][T13203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.615184][T13203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.678235][ T8282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.110645][ T8282] bridge_slave_1: left allmulticast mode [ 335.136156][ T8282] bridge_slave_1: left promiscuous mode [ 335.141952][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.186871][ T8282] bridge_slave_0: left allmulticast mode [ 335.195140][ T8282] bridge_slave_0: left promiscuous mode [ 335.226411][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.427402][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.440321][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.450411][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.459669][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.471110][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.478675][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.144413][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.172075][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.187090][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.216332][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.225111][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.232684][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.283638][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.294990][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.312198][ T8282] bond0 (unregistering): Released all slaves [ 336.676760][T14181] lo speed is unknown, defaulting to 1000 [ 336.881857][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'. [ 336.939634][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'. [ 336.952468][T14181] lo speed is unknown, defaulting to 1000 [ 336.997303][T14194] lo speed is unknown, defaulting to 1000 [ 337.234533][T14194] lo speed is unknown, defaulting to 1000 [ 337.302253][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 337.554010][ T5833] Bluetooth: hci3: command tx timeout [ 337.777105][T14218] bridge_slave_1 (unregistering): left allmulticast mode [ 337.784286][T14218] bridge_slave_1 (unregistering): left promiscuous mode [ 337.792965][T14218] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.988253][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 337.997395][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 338.026147][T14224] netlink: 'syz.2.2326': attribute type 13 has an invalid length. [ 338.034020][T14224] netlink: 'syz.2.2326': attribute type 12 has an invalid length. [ 338.081859][ T8282] hsr_slave_0: left promiscuous mode [ 338.094540][ T8282] hsr_slave_1: left promiscuous mode [ 338.116611][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.124624][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.162881][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.175642][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.232240][ T8282] veth1_macvtap: left promiscuous mode [ 338.250582][ T8282] veth0_macvtap: left promiscuous mode [ 338.256960][ T8282] veth1_vlan: left promiscuous mode [ 338.262727][ T8282] veth0_vlan: left promiscuous mode [ 338.319994][T14239] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 338.330854][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2329'. [ 338.357730][ T5833] Bluetooth: hci4: command tx timeout [ 338.861312][ T8282] team0 (unregistering): Port device team_slave_1 removed [ 338.918719][ T8282] team0 (unregistering): Port device team_slave_0 removed [ 339.569326][T14181] chnl_net:caif_netlink_parms(): no params data found [ 339.628706][ T5833] Bluetooth: hci3: command tx timeout [ 339.663446][T14249] syz.0.2331 (14249) used obsolete PPPIOCDETACH ioctl [ 339.825251][T14252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2332'. [ 339.975768][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.991002][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.006824][T14181] bridge_slave_0: entered allmulticast mode [ 340.013650][T14181] bridge_slave_0: entered promiscuous mode [ 340.022224][T14194] chnl_net:caif_netlink_parms(): no params data found [ 340.037917][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 340.054108][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.075826][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.083157][T14181] bridge_slave_1: entered allmulticast mode [ 340.103613][T14181] bridge_slave_1: entered promiscuous mode [ 340.217764][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.255195][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.377898][T14181] team0: Port device team_slave_0 added [ 340.425754][ T5833] Bluetooth: hci4: command tx timeout [ 340.470978][ T8282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.517305][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.524684][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.538864][T14194] bridge_slave_0: entered allmulticast mode [ 340.546351][T14194] bridge_slave_0: entered promiscuous mode [ 340.557383][T14181] team0: Port device team_slave_1 added [ 340.563328][T14278] tap0: tun_chr_ioctl cmd 1074025677 [ 340.569229][T14278] tap0: linktype set to 825 [ 340.584161][T14282] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2338'. [ 340.623866][T14282] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2338'. [ 340.707270][ T8282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.731057][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.744364][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.754607][T14194] bridge_slave_1: entered allmulticast mode [ 340.762937][T14194] bridge_slave_1: entered promiscuous mode [ 340.804291][ T8282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.846905][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.853918][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.885071][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.978419][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.033456][ T8282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.054286][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.063978][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.135618][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.168251][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.326039][T14194] team0: Port device team_slave_0 added [ 341.346686][T14194] team0: Port device team_slave_1 added [ 341.361362][T14181] hsr_slave_0: entered promiscuous mode [ 341.368592][T14181] hsr_slave_1: entered promiscuous mode [ 341.464117][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.483709][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.536032][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.622156][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.634759][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.670478][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.706167][ T5833] Bluetooth: hci3: command tx timeout [ 341.773901][ T8282] bridge_slave_1: left allmulticast mode [ 341.786212][ T8282] bridge_slave_1: left promiscuous mode [ 341.791988][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.814784][ T8282] bridge_slave_0: left allmulticast mode [ 341.831352][ T8282] bridge_slave_0: left promiscuous mode [ 341.844498][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.885771][T14307] __nla_validate_parse: 4 callbacks suppressed [ 341.885791][T14307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2345'. [ 341.995337][T14311] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2347'. [ 342.384470][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.396387][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.409819][ T8282] bond0 (unregistering): Released all slaves [ 342.506135][ T5833] Bluetooth: hci4: command tx timeout [ 342.597045][T14194] hsr_slave_0: entered promiscuous mode [ 342.611367][T14194] hsr_slave_1: entered promiscuous mode [ 342.636797][T14194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.645376][T14194] Cannot create hsr debugfs directory [ 342.757145][T14327] netlink: zone id is out of range [ 342.773925][T14327] netlink: zone id is out of range [ 342.799190][T14328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2350'. [ 342.869393][T14330] netlink: 'syz.2.2348': attribute type 2 has an invalid length. [ 343.101769][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'. [ 343.111798][T14327] netlink: set zone limit has 4 unknown bytes [ 343.129359][T14336] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2352'. [ 343.435095][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 343.463105][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 343.741824][ T8282] hsr_slave_0: left promiscuous mode [ 343.756786][ T8282] hsr_slave_1: left promiscuous mode [ 343.770147][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.785683][ T5833] Bluetooth: hci3: command tx timeout [ 343.787466][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.812354][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.845346][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.902821][ T8282] veth1_macvtap: left promiscuous mode [ 343.912058][ T8282] veth0_macvtap: left promiscuous mode [ 343.926246][ T8282] veth1_vlan: left promiscuous mode [ 343.935279][ T8282] veth0_vlan: left promiscuous mode [ 344.586172][ T5833] Bluetooth: hci4: command tx timeout [ 345.000340][ T8282] team0 (unregistering): Port device team_slave_1 removed [ 345.109262][ T8282] team0 (unregistering): Port device team_slave_0 removed [ 345.705689][T14349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2356'. [ 346.295127][T14181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.324244][T14181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.353520][T14181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.414621][T14181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.439138][T14361] sctp: [Deprecated]: syz.0.2361 (pid 14361) Use of int in maxseg socket option. [ 346.439138][T14361] Use struct sctp_assoc_value instead [ 346.476752][T14360] delete_channel: no stack [ 346.500766][T14194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.526119][T14194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.586983][T14365] vlan1: default FDB implementation only supports local addresses [ 346.620908][T14194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.665885][T14194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.736222][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2367'. [ 346.952683][T14181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.966602][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 346.990982][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.010602][T14381] veth1_vlan: entered allmulticast mode [ 347.016650][T14381] macvlan0: left allmulticast mode [ 347.024019][T14381] veth1_vlan: left allmulticast mode [ 347.045851][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 347.052359][T14181] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.075486][T14383] vlan4: entered allmulticast mode [ 347.078122][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 347.118951][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.126140][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.152005][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.159243][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.223736][T14194] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.276552][T13201] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.283749][T13201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.317822][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2371'. [ 347.342962][T14369] lo speed is unknown, defaulting to 1000 [ 347.379617][T13201] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.386905][T13201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.506802][T14374] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 347.585226][T14369] lo speed is unknown, defaulting to 1000 [ 347.645096][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2372'. [ 347.804971][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.239807][T14181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.422410][T14181] veth0_vlan: entered promiscuous mode [ 350.470964][T14181] veth1_vlan: entered promiscuous mode [ 350.571411][T14413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2375'. [ 350.664330][T14181] veth0_macvtap: entered promiscuous mode [ 350.687029][T14194] veth0_vlan: entered promiscuous mode [ 350.703440][T14181] veth1_macvtap: entered promiscuous mode [ 350.731832][T14194] veth1_vlan: entered promiscuous mode [ 350.760338][T14417] netlink: zone id is out of range [ 350.776330][T14417] netlink: zone id is out of range [ 350.798997][T14181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.846767][T14181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.866197][T14418] netlink: 'syz.0.2374': attribute type 2 has an invalid length. [ 350.884002][T14194] veth0_macvtap: entered promiscuous mode [ 350.917202][T14194] veth1_macvtap: entered promiscuous mode [ 350.939900][T14181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.974555][T14181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.979740][T14417] netlink: set zone limit has 4 unknown bytes [ 351.003207][T14181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.012592][T14181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.177468][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.203748][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.219099][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.304439][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.351643][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.389245][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.408543][T14194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.435712][T14194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.444457][T14194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.465292][T14194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.501937][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.510360][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.607059][T13201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.623070][T13201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.660499][T14423] netlink: 'syz.1.2377': attribute type 14 has an invalid length. [ 351.696887][ T8275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.725233][ T8275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.759464][T14426] netlink: 'syz.1.2377': attribute type 14 has an invalid length. [ 351.807594][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.827617][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.961928][T14429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 352.060748][T14433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2379'. [ 352.076734][T14430] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2378'. [ 352.204322][T14429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2378'. [ 352.346797][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2380'. [ 352.441789][ T151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.639270][ T151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.939491][ T151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.955412][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 353.037601][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 353.267870][ T151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.361136][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.374512][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.403660][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.414971][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.422766][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.432886][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.433069][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.464729][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.472225][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.481166][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 353.481334][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.491233][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.581016][T14466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2386'. [ 353.615738][ T151] bridge_slave_1: left allmulticast mode [ 353.626120][ T151] bridge_slave_1: left promiscuous mode [ 353.640943][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.662252][ T151] bridge_slave_0: left allmulticast mode [ 353.675058][ T151] bridge_slave_0: left promiscuous mode [ 353.688538][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.587255][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.598969][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.610004][ T151] bond0 (unregistering): Released all slaves [ 354.651062][T14461] lo speed is unknown, defaulting to 1000 [ 354.946748][T14481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 354.961548][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 354.974413][T14478] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2389'. [ 355.001064][T14461] lo speed is unknown, defaulting to 1000 [ 355.001210][T14463] lo speed is unknown, defaulting to 1000 [ 355.122889][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2389'. [ 355.151757][T14478] tipc: Enabling of bearer rejected, media not registered [ 355.179731][T14488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 355.347373][T14496] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001 [ 355.545164][T14497] wg2: left promiscuous mode [ 355.550223][ T5849] Bluetooth: hci4: command tx timeout [ 355.552751][ T5849] Bluetooth: hci3: command tx timeout [ 355.736486][T14497] ip6gre1: left promiscuous mode [ 355.760955][T14497] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.769411][T14497] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.778288][T14497] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.786851][T14497] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.802511][T14497] bond0: left promiscuous mode [ 355.807698][T14497] bond4: left promiscuous mode [ 355.812744][T14497] macvtap1: left promiscuous mode [ 355.820419][T14497] hsr0: left promiscuous mode [ 355.825230][T14497] vlan0: left promiscuous mode [ 355.849154][T14497] ipvlan0: left promiscuous mode [ 355.877886][T14497] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.887116][T14497] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.895693][T14497] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.904213][T14497] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.921487][T14497] bond9: left promiscuous mode [ 355.933840][T14463] lo speed is unknown, defaulting to 1000 [ 356.146319][T14513] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 356.314311][T14513] veth6: entered promiscuous mode [ 356.329847][T14513] veth7: entered promiscuous mode [ 356.419414][ T151] hsr_slave_0: left promiscuous mode [ 356.428275][ T151] hsr_slave_1: left promiscuous mode [ 356.439767][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.447423][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.462329][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.470124][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.531688][ T151] veth1_macvtap: left promiscuous mode [ 356.555411][ T151] veth0_macvtap: left promiscuous mode [ 356.570190][ T151] veth1_vlan: left promiscuous mode [ 356.590443][ T151] veth0_vlan: left promiscuous mode [ 356.617695][T14531] netlink: zone id is out of range [ 356.643492][T14531] netlink: zone id is out of range [ 356.730682][T14534] netlink: 'syz.0.2400': attribute type 2 has an invalid length. [ 357.626096][ T5849] Bluetooth: hci4: command tx timeout [ 357.626290][ T5842] Bluetooth: hci3: command tx timeout [ 358.122282][ T151] team0 (unregistering): Port device team_slave_1 removed [ 358.240266][ T151] team0 (unregistering): Port device team_slave_0 removed [ 359.216912][T14461] chnl_net:caif_netlink_parms(): no params data found [ 359.334788][T14531] netlink: set zone limit has 4 unknown bytes [ 359.445967][T14541] __nla_validate_parse: 6 callbacks suppressed [ 359.445986][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2402'. [ 359.642374][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.650235][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.657746][T14461] bridge_slave_0: entered allmulticast mode [ 359.664820][T14461] bridge_slave_0: entered promiscuous mode [ 359.687181][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.696646][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.703930][T14461] bridge_slave_1: entered allmulticast mode [ 359.710052][ T5842] Bluetooth: hci4: command tx timeout [ 359.717693][ T5842] Bluetooth: hci3: command tx timeout [ 359.760873][T14461] bridge_slave_1: entered promiscuous mode [ 359.853700][T14461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.869662][T14463] chnl_net:caif_netlink_parms(): no params data found [ 359.887739][T14461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.008558][T14461] team0: Port device team_slave_0 added [ 360.047394][T14461] team0: Port device team_slave_1 added [ 360.112906][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 360.187167][T14461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.194169][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.214832][T14576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2410'. [ 360.228734][T14461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.258009][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2411'. [ 360.275362][T14570] macvtap2: entered promiscuous mode [ 360.280895][T14570] bond0: entered promiscuous mode [ 360.286400][T14570] bond4: entered promiscuous mode [ 360.291783][T14570] macvtap2: entered allmulticast mode [ 360.297426][T14570] bond0: entered allmulticast mode [ 360.302645][T14570] bond4: entered allmulticast mode [ 360.309095][T14570] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 360.352009][T14461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.373427][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'. [ 360.376056][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.389794][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'. [ 360.424108][T14461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.592543][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.603986][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.612771][T14463] bridge_slave_0: entered allmulticast mode [ 360.620123][T14463] bridge_slave_0: entered promiscuous mode [ 360.636443][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.643708][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.651045][T14463] bridge_slave_1: entered allmulticast mode [ 360.658281][T14463] bridge_slave_1: entered promiscuous mode [ 360.669070][T14461] hsr_slave_0: entered promiscuous mode [ 360.676041][T14461] hsr_slave_1: entered promiscuous mode [ 360.769907][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.927681][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.957302][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.978558][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.048117][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.153429][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.182989][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 361.196462][T14463] team0: Port device team_slave_0 added [ 361.205056][T14463] team0: Port device team_slave_1 added [ 361.219107][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 361.260915][T14593] lo speed is unknown, defaulting to 1000 [ 361.328373][T14602] netlink: zone id is out of range [ 361.334227][T14602] netlink: zone id is out of range [ 361.456002][T14597] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 361.711716][T14463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.728756][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.773369][T14463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.796777][ T5842] Bluetooth: hci3: command tx timeout [ 361.812899][ T5849] Bluetooth: hci4: command tx timeout [ 361.823745][T14463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.849825][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.930782][T14463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.972205][T14593] lo speed is unknown, defaulting to 1000 [ 362.044591][T14602] netlink: set zone limit has 4 unknown bytes [ 362.172450][T14463] hsr_slave_0: entered promiscuous mode [ 362.197366][T14463] hsr_slave_1: entered promiscuous mode [ 362.216569][T14463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.235803][T14463] Cannot create hsr debugfs directory [ 362.458528][ T151] bridge_slave_1: left allmulticast mode [ 362.469083][T14622] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2421'. [ 362.485794][ T151] bridge_slave_1: left promiscuous mode [ 362.504940][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.524599][ T151] bridge_slave_0: left allmulticast mode [ 362.530540][ T151] bridge_slave_0: left promiscuous mode [ 362.537193][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.299303][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.314280][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.325748][ T151] bond0 (unregistering): Released all slaves [ 363.341920][T14601] lo speed is unknown, defaulting to 1000 [ 363.569186][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'. [ 363.592862][T14601] lo speed is unknown, defaulting to 1000 [ 364.425953][T14627] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 364.515025][T14627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 364.715939][T14631] __nla_validate_parse: 1 callbacks suppressed [ 364.716029][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 364.779738][T14629] vlan4: entered promiscuous mode [ 364.784935][T14629] bond9: entered promiscuous mode [ 364.793790][T14629] vlan4: entered allmulticast mode [ 364.799652][T14629] bond9: entered allmulticast mode [ 364.820066][T14627] caif0: entered allmulticast mode [ 364.872074][ T151] hsr_slave_0: left promiscuous mode [ 364.902160][ T151] hsr_slave_1: left promiscuous mode [ 364.918352][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.926092][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.946959][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.954999][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.023737][ T151] veth1_macvtap: left promiscuous mode [ 365.040888][ T151] veth0_macvtap: left promiscuous mode [ 365.062788][ T151] veth1_vlan: left promiscuous mode [ 365.070330][ T151] veth0_vlan: left promiscuous mode [ 365.713464][ T151] team0 (unregistering): Port device team_slave_1 removed [ 365.773467][ T151] team0 (unregistering): Port device team_slave_0 removed [ 366.307569][T14631] macvtap1: entered promiscuous mode [ 366.313061][T14631] macvtap1: entered allmulticast mode [ 366.318590][T14631] bond0: entered allmulticast mode [ 366.323722][T14631] bond_slave_0: entered allmulticast mode [ 366.334554][T14631] bond_slave_1: entered allmulticast mode [ 366.345476][T14631] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 366.432568][T14635] Cannot find add_set index 3 as target [ 366.479478][T14463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.523249][T14463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.586029][T14463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.638133][T14463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.716326][T14461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.750464][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 366.805615][T14461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.818088][T14461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.839790][T14461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.852936][T14647] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2429'. [ 366.983462][T14463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.048915][T14463] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.078078][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.085205][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.110952][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 367.137867][T14653] netlink: 'syz.0.2431': attribute type 21 has an invalid length. [ 367.155840][T14653] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2431'. [ 367.164977][T14653] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2431'. [ 367.182745][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 367.186412][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.198805][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.317560][T14461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.389742][T14461] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.437217][T13201] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.444431][T13201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.506651][T13201] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.513855][T13201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.526042][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'. [ 367.564572][T14663] macvtap2: entered promiscuous mode [ 367.583247][T14663] macvtap2: entered allmulticast mode [ 367.602877][T14663] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 367.801916][T14463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.826895][T14674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 367.920022][T14463] veth0_vlan: entered promiscuous mode [ 367.962944][T14463] veth1_vlan: entered promiscuous mode [ 368.047120][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 368.048314][T14463] veth0_macvtap: entered promiscuous mode [ 368.130318][T14463] veth1_macvtap: entered promiscuous mode [ 368.182379][T14461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.239515][T14463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.298696][T14463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.358471][T14463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.389639][T14463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.405892][T14463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.414647][T14463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.724114][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.743318][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.832491][ T8282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.854306][T14687] lo speed is unknown, defaulting to 1000 [ 368.874032][ T8282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.897067][T14461] veth0_vlan: entered promiscuous mode [ 368.957598][T14461] veth1_vlan: entered promiscuous mode [ 369.053328][T14461] veth0_macvtap: entered promiscuous mode [ 369.077935][T14461] veth1_macvtap: entered promiscuous mode [ 369.086212][T14714] netlink: 'syz.1.2447': attribute type 11 has an invalid length. [ 369.209199][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.253451][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.289763][T14461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.345926][T14687] lo speed is unknown, defaulting to 1000 [ 369.357521][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.375740][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.414898][T14461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.448867][T14720] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 369.458943][T14461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.472170][T14461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.482112][T14461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.491997][T14461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.775341][T14726] netlink: 'syz.0.2450': attribute type 9 has an invalid length. [ 369.788989][T13201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.801712][T14726] __nla_validate_parse: 72 callbacks suppressed [ 369.801730][T14726] netlink: 201384 bytes leftover after parsing attributes in process `syz.0.2450'. [ 369.828458][T13201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.848309][T14726] openvswitch: netlink: Message has 6 unknown bytes. [ 370.006417][T14735] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2454'. [ 370.007027][T14736] xt_hashlimit: max too large, truncated to 1048576 [ 370.028516][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.038555][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.659887][ T6046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.848658][ T6046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.898143][T14744] ªªªªª: renamed from bridge0 [ 370.937845][T14744] ªªªªª: entered promiscuous mode [ 370.970325][T14744] ªªªªª: entered allmulticast mode [ 371.037974][ T6046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.091493][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.102814][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.112128][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.120531][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.129024][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.136722][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.244403][ T6046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.368568][T14760] Cannot find del_set index 4 as target [ 371.513246][T14763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2461'. [ 371.682464][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2462'. [ 371.731080][ T6046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.749836][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.761342][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.770590][T14747] lo speed is unknown, defaulting to 1000 [ 371.770765][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.787246][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.795054][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.802624][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.852214][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 371.891641][ T6046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.946127][T14747] lo speed is unknown, defaulting to 1000 [ 372.118558][ T6046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.387350][ T6046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.464576][T14773] lo speed is unknown, defaulting to 1000 [ 372.898693][T14773] lo speed is unknown, defaulting to 1000 [ 372.899162][T14769] lo speed is unknown, defaulting to 1000 [ 372.939061][ T6046] bridge_slave_1: left allmulticast mode [ 372.944783][ T6046] bridge_slave_1: left promiscuous mode [ 372.989200][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.027581][ T6046] bridge_slave_0: left allmulticast mode [ 373.033294][ T6046] bridge_slave_0: left promiscuous mode [ 373.073108][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.100803][ T6046] bridge_slave_1: left allmulticast mode [ 373.119981][ T6046] bridge_slave_1: left promiscuous mode [ 373.140791][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.164594][ T6046] bridge_slave_0: left allmulticast mode [ 373.175078][ T6046] bridge_slave_0: left promiscuous mode [ 373.190521][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.226378][ T5842] Bluetooth: hci3: command tx timeout [ 373.537998][T14818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.549772][T14819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.866822][ T5842] Bluetooth: hci4: command tx timeout [ 374.200795][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.213993][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.224761][ T6046] bond0 (unregistering): Released all slaves [ 374.381441][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.394949][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.405309][ T6046] bond0 (unregistering): Released all slaves [ 374.419835][T14747] chnl_net:caif_netlink_parms(): no params data found [ 374.430200][T14769] lo speed is unknown, defaulting to 1000 [ 374.441799][T14789] lo speed is unknown, defaulting to 1000 [ 374.603414][T14789] lo speed is unknown, defaulting to 1000 [ 374.818690][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.826456][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.833717][T14747] bridge_slave_0: entered allmulticast mode [ 374.841348][T14747] bridge_slave_0: entered promiscuous mode [ 374.850939][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.858871][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 374.861101][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.876377][T14747] bridge_slave_1: entered allmulticast mode [ 374.883797][T14747] bridge_slave_1: entered promiscuous mode [ 375.033055][T14832] tipc: Disabling bearer [ 375.306314][ T5842] Bluetooth: hci3: command tx timeout [ 375.422762][T14747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.435163][T14747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.631906][T14747] team0: Port device team_slave_0 added [ 375.699632][T14747] team0: Port device team_slave_1 added [ 375.854752][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 375.896329][T14747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.903328][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.945843][ T5842] Bluetooth: hci4: command tx timeout [ 375.955552][T14747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.081977][T14747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.095659][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.172328][T14747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.452884][T14845] batman_adv: batadv0: Adding interface: dummy0 [ 376.462283][T14845] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.505815][T14845] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 376.708092][T14747] hsr_slave_0: entered promiscuous mode [ 376.715172][T14854] netlink: 'syz.2.2486': attribute type 10 has an invalid length. [ 376.724840][T14854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2486'. [ 376.757948][T14747] hsr_slave_1: entered promiscuous mode [ 376.784965][T14747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.802596][T14747] Cannot create hsr debugfs directory [ 376.812055][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 376.823669][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.995977][T14866] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 377.065838][T14865] mac80211_hwsim hwsim35 : renamed from wlan1 (while UP) [ 377.187028][ T6046] hsr_slave_0: left promiscuous mode [ 377.207122][ T6046] hsr_slave_1: left promiscuous mode [ 377.213116][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.230940][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2493'. [ 377.240613][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.257545][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.265231][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.279452][ T6046] hsr_slave_0: left promiscuous mode [ 377.295260][ T6046] hsr_slave_1: left promiscuous mode [ 377.301768][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.321307][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.338519][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.346800][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.386897][ T5842] Bluetooth: hci3: command tx timeout [ 377.408165][ T6046] veth1_macvtap: left promiscuous mode [ 377.413982][ T6046] veth0_macvtap: left promiscuous mode [ 377.420357][ T6046] veth1_vlan: left promiscuous mode [ 377.425749][ T6046] veth0_vlan: left promiscuous mode [ 377.431999][ T6046] veth1_macvtap: left promiscuous mode [ 377.437926][ T6046] veth0_macvtap: left promiscuous mode [ 377.444210][ T6046] veth1_vlan: left promiscuous mode [ 377.449791][ T6046] veth0_vlan: left promiscuous mode [ 378.028130][ T5842] Bluetooth: hci4: command tx timeout [ 378.271796][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 378.321385][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 379.344374][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 379.401442][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 379.470821][ T5842] Bluetooth: hci3: command tx timeout [ 379.997391][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 380.019685][T14886] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 380.032881][T14769] chnl_net:caif_netlink_parms(): no params data found [ 380.105967][ T5842] Bluetooth: hci4: command tx timeout [ 380.459755][T14879] lo speed is unknown, defaulting to 1000 [ 380.459784][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 380.509039][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 380.515829][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.525870][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.533160][T14769] bridge_slave_0: entered allmulticast mode [ 380.563041][T14769] bridge_slave_0: entered promiscuous mode [ 380.577108][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.584544][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.592808][T14769] bridge_slave_1: entered allmulticast mode [ 380.617687][T14769] bridge_slave_1: entered promiscuous mode [ 380.691889][T14898] bridge_slave_1 (unregistering): left allmulticast mode [ 380.699236][T14898] bridge_slave_1 (unregistering): left promiscuous mode [ 380.706655][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.820873][T14879] lo speed is unknown, defaulting to 1000 [ 380.921601][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.949061][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.079334][T14769] team0: Port device team_slave_0 added [ 381.141009][T14769] team0: Port device team_slave_1 added [ 381.216517][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.240308][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.266822][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.311344][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.318704][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.355971][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.421712][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 381.431663][T14927] tipc: Started in network mode [ 381.432538][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2504'. [ 381.437056][T14927] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 381.437770][T14927] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 381.464811][T14927] tipc: Enabled bearer , priority 10 [ 381.499242][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 381.618921][T14933] netlink: zone id is out of range [ 381.624101][T14933] netlink: zone id is out of range [ 381.692831][T14747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.722955][T14769] hsr_slave_0: entered promiscuous mode [ 381.732389][T14769] hsr_slave_1: entered promiscuous mode [ 381.740780][T14933] netlink: set zone limit has 4 unknown bytes [ 381.751134][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 381.788229][T14747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.836351][T14929] netlink: 'syz.0.2505': attribute type 2 has an invalid length. [ 381.858660][T14747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.888750][T14747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.585937][ T6009] tipc: Node number set to 1 [ 382.595142][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.664286][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.707070][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.714243][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.836537][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.843743][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.005437][T14950] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 383.036739][T14951] netlink: 'syz.2.2510': attribute type 10 has an invalid length. [ 383.171373][T14769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.218254][T14769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.238884][T14769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.274947][T14769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.345915][T14959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2513'. [ 383.528132][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.557156][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.588789][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.654187][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.661368][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.696736][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.704013][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.818499][T14747] veth0_vlan: entered promiscuous mode [ 383.833392][T14769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.867573][T14769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.895202][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'. [ 383.925392][T14747] veth1_vlan: entered promiscuous mode [ 384.018725][T14747] veth0_macvtap: entered promiscuous mode [ 384.049534][T14747] veth1_macvtap: entered promiscuous mode [ 384.099069][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.140805][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.187885][T14747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.215921][T14747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.229266][T14747] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.265921][T14747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.367221][T14974] lo speed is unknown, defaulting to 1000 [ 384.401423][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.441223][ T8275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.476363][ T8275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.536919][ T8275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.544814][ T8275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.900699][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 384.970267][T14769] veth0_vlan: entered promiscuous mode [ 384.995419][T14769] veth1_vlan: entered promiscuous mode [ 385.023625][T14974] lo speed is unknown, defaulting to 1000 [ 385.128731][T14769] veth0_macvtap: entered promiscuous mode [ 385.168387][T14769] veth1_macvtap: entered promiscuous mode [ 385.255479][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.283082][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.293533][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 385.307957][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.473338][ T6046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.527620][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.559561][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.571074][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.657704][ T6046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.705077][T14769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.723727][T14769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.754710][T14769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.772515][T14769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.848753][ T6046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.998624][ T6046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.162872][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.171370][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.258943][ T8275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.269269][ T8275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.796345][ T6046] bridge_slave_1: left allmulticast mode [ 386.824481][ T6046] bridge_slave_1: left promiscuous mode [ 386.856509][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.935052][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2527'. [ 386.947199][ T6046] bridge_slave_0: left allmulticast mode [ 386.952898][ T6046] bridge_slave_0: left promiscuous mode [ 387.015827][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.053570][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.063849][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.074222][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.090782][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.100182][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.108346][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.540382][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.551757][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.562113][ T6046] bond0 (unregistering): Released all slaves [ 387.737817][T15025] lo speed is unknown, defaulting to 1000 [ 387.859052][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2530'. [ 388.001327][T15025] lo speed is unknown, defaulting to 1000 [ 388.407532][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.417651][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.436558][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.446303][T15031] lo speed is unknown, defaulting to 1000 [ 388.455814][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.464791][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 388.473718][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.830361][T15056] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 388.859496][T15055] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 388.901382][T15056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.054167][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2536'. [ 389.146457][ T5842] Bluetooth: hci3: command tx timeout [ 389.324460][T15046] lo speed is unknown, defaulting to 1000 [ 389.324513][T15031] lo speed is unknown, defaulting to 1000 [ 389.499454][T15070] vlan5: entered promiscuous mode [ 389.527813][T15070] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 389.529694][T15025] chnl_net:caif_netlink_parms(): no params data found [ 389.568208][T15070] bridge0: entered promiscuous mode [ 389.575439][T15070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 389.862294][T15046] lo speed is unknown, defaulting to 1000 [ 389.896127][T15057] lo speed is unknown, defaulting to 1000 [ 390.199477][T15025] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.215643][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.223049][T15025] bridge_slave_0: entered allmulticast mode [ 390.240611][T15025] bridge_slave_0: entered promiscuous mode [ 390.313800][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 390.351690][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 390.395761][T15025] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.402905][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.423814][T15025] bridge_slave_1: entered allmulticast mode [ 390.456852][T15025] bridge_slave_1: entered promiscuous mode [ 390.505930][ T5842] Bluetooth: hci4: command tx timeout [ 390.518548][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 390.541467][ T6046] hsr_slave_0: left promiscuous mode [ 390.549748][ T6046] hsr_slave_1: left promiscuous mode [ 390.567778][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.575356][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.589774][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.598115][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.628565][ T6046] veth1_macvtap: left promiscuous mode [ 390.634113][ T6046] veth0_macvtap: left promiscuous mode [ 390.639864][ T6046] veth1_vlan: left promiscuous mode [ 390.645162][ T6046] veth0_vlan: left promiscuous mode [ 391.192207][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 391.232693][ T5842] Bluetooth: hci3: command tx timeout [ 391.252245][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 391.792688][T15057] lo speed is unknown, defaulting to 1000 [ 391.805923][T15062] lo speed is unknown, defaulting to 1000 [ 391.943422][T15025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.977138][T15025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.992294][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 392.159214][T15025] team0: Port device team_slave_0 added [ 392.199948][T15025] team0: Port device team_slave_1 added [ 392.394136][T15062] lo speed is unknown, defaulting to 1000 [ 392.507302][T15025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.537285][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.584665][T15025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.596072][ T5842] Bluetooth: hci4: command tx timeout [ 392.610452][T15025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.625657][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.685844][T15025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.728337][T15100] netlink: 'syz.1.2546': attribute type 21 has an invalid length. [ 392.927774][T15046] chnl_net:caif_netlink_parms(): no params data found [ 393.024628][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 393.210533][T15025] hsr_slave_0: entered promiscuous mode [ 393.226973][T15025] hsr_slave_1: entered promiscuous mode [ 393.233238][T15025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.241201][T15025] Cannot create hsr debugfs directory [ 393.305908][ T5842] Bluetooth: hci3: command tx timeout [ 393.479691][ T6046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.785102][ T6046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.815403][T15046] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.822924][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.831076][T15046] bridge_slave_0: entered allmulticast mode [ 393.851586][T15046] bridge_slave_0: entered promiscuous mode [ 393.877899][T15046] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.885201][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.905593][T15046] bridge_slave_1: entered allmulticast mode [ 393.912895][T15046] bridge_slave_1: entered promiscuous mode [ 393.968875][ T6046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.089055][T15046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.177949][ T6046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.249355][T15046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.284878][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 394.391265][T15046] team0: Port device team_slave_0 added [ 394.409244][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 394.423756][T15129] tipc: Enabling of bearer rejected, failed to enable media [ 394.451934][T15046] team0: Port device team_slave_1 added [ 394.669676][T15046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.669962][T15139] netlink: 'syz.2.2557': attribute type 1 has an invalid length. [ 394.685452][ T5842] Bluetooth: hci4: command tx timeout [ 394.691578][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.692051][T15139] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2557'. [ 394.738267][T15046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.782144][T15046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.795573][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.827780][T15046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.952765][T15147] netlink: 'syz.2.2560': attribute type 1 has an invalid length. [ 394.958927][T15046] hsr_slave_0: entered promiscuous mode [ 394.975256][T15046] hsr_slave_1: entered promiscuous mode [ 394.990887][T15046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.013475][T15046] Cannot create hsr debugfs directory [ 395.028300][ T6046] bridge_slave_1: left allmulticast mode [ 395.036082][ T6046] bridge_slave_1: left promiscuous mode [ 395.041910][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.056176][ T6046] bridge_slave_0: left allmulticast mode [ 395.066610][ T6046] bridge_slave_0: left promiscuous mode [ 395.072709][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.214721][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 395.238240][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 395.386463][ T5842] Bluetooth: hci3: command tx timeout [ 395.421344][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'. [ 395.517830][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'. [ 395.861003][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.879418][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.902589][ T6046] bond0 (unregistering): Released all slaves [ 396.443830][T15171] lo speed is unknown, defaulting to 1000 [ 396.621326][T15025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.651581][T15171] lo speed is unknown, defaulting to 1000 [ 396.694873][T15025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.708655][T15025] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.745791][ T5842] Bluetooth: hci4: command tx timeout [ 396.757968][T15025] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.997392][T15025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.120432][T15197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2574'. [ 397.130093][T15197] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2574'. [ 397.303697][T15046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.343851][T15046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.367669][T15025] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.384983][T15203] lo: entered allmulticast mode [ 397.391947][T15203] tunl0: entered allmulticast mode [ 397.398173][T15203] gre0: entered allmulticast mode [ 397.403485][T15203] 0ªX¹¦D: entered allmulticast mode [ 397.412242][T15203] erspan0: entered allmulticast mode [ 397.417997][T15203] ip_vti0: entered allmulticast mode [ 397.423532][T15203] ip6_vti0: entered allmulticast mode [ 397.429334][T15203] sit0: entered allmulticast mode [ 397.434585][T15203] ip6tnl0: entered allmulticast mode [ 397.440202][T15203] ip6gre0: entered allmulticast mode [ 397.446680][T15203] ip6gretap0: entered allmulticast mode [ 397.452422][T15203] vcan0: entered allmulticast mode [ 397.457964][T15203] team0: entered allmulticast mode [ 397.463308][T15203] dummy0: entered allmulticast mode [ 397.469256][T15203] nlmon0: entered allmulticast mode [ 397.474784][T15203] caif0: entered allmulticast mode [ 397.480231][T15203] batadv0: entered allmulticast mode [ 397.489031][T15203] veth0: entered allmulticast mode [ 397.494304][T15203] veth1: entered allmulticast mode [ 397.503537][T15207] netlink: 'syz.1.2576': attribute type 10 has an invalid length. [ 397.512523][T15203] wg0: entered allmulticast mode [ 397.517978][T15203] wg1: entered allmulticast mode [ 397.523118][T15203] wg2: entered allmulticast mode [ 397.528564][T15203] veth0_to_bridge: entered allmulticast mode [ 397.534756][T15203] bridge_slave_0: entered allmulticast mode [ 397.542292][T15203] veth1_to_bridge: entered allmulticast mode [ 397.548815][T15203] bridge_slave_1: entered allmulticast mode [ 397.554837][T15203] veth0_to_bond: entered allmulticast mode [ 397.561215][T15203] bond_slave_0: entered allmulticast mode [ 397.567369][T15203] veth1_to_bond: entered allmulticast mode [ 397.573458][T15203] bond_slave_1: entered allmulticast mode [ 397.579996][T15203] veth0_to_team: entered allmulticast mode [ 397.591332][T15203] team_slave_0: entered allmulticast mode [ 397.599881][T15203] veth1_to_team: entered allmulticast mode [ 397.606132][T15203] team_slave_1: entered allmulticast mode [ 397.612203][T15203] veth0_to_batadv: entered allmulticast mode [ 397.619195][T15203] batadv_slave_0: entered allmulticast mode [ 397.625952][T15203] veth1_to_batadv: entered allmulticast mode [ 397.632209][T15203] batadv_slave_1: entered allmulticast mode [ 397.638704][T15203] xfrm0: entered allmulticast mode [ 397.644521][T15203] veth0_to_hsr: entered allmulticast mode [ 397.650714][T15203] hsr_slave_0: entered allmulticast mode [ 397.656886][T15203] veth1_to_hsr: entered allmulticast mode [ 397.662830][T15203] hsr_slave_1: entered allmulticast mode [ 397.668778][T15203] hsr0: entered allmulticast mode [ 397.674012][T15203] veth1_virt_wifi: entered allmulticast mode [ 397.681848][T15203] veth0_virt_wifi: entered allmulticast mode [ 397.688313][T15203] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 397.696246][T15203] veth1_macvtap: entered allmulticast mode [ 397.702262][T15203] veth0_macvtap: entered allmulticast mode [ 397.710172][T15203] macvtap0: entered allmulticast mode [ 397.716229][T15203] geneve0: entered allmulticast mode [ 397.721801][T15203] geneve1: entered allmulticast mode [ 397.727601][T15203] ip6gre1: entered allmulticast mode [ 397.733286][T15203] bridge1: entered allmulticast mode [ 397.739592][T15203] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 397.747156][T15203] syztnl1: entered allmulticast mode [ 397.752721][T15203] ip6erspan0: entered allmulticast mode [ 397.758961][T15203] bridge2: entered allmulticast mode [ 397.764457][T15203] veth2: entered allmulticast mode [ 397.769855][T15203] veth3: entered allmulticast mode [ 397.775149][T15203] vxlan0: entered allmulticast mode [ 397.780821][T15203] syztnl0: entered allmulticast mode [ 397.786623][T15203] hsr1: entered allmulticast mode [ 397.791864][T15203] : entered allmulticast mode [ 397.797198][T15203] macvtap1: entered allmulticast mode [ 397.802783][T15203] vlan0: entered allmulticast mode [ 397.808405][T15203] Tq€!7: entered allmulticast mode [ 397.813851][T15203] sit1: entered allmulticast mode [ 397.819537][T15203] netdevsim netdevsim2 eth0: entered allmulticast mode [ 397.826801][T15203] netdevsim netdevsim2 eth1: entered allmulticast mode [ 397.833890][T15203] netdevsim netdevsim2 eth2: entered allmulticast mode [ 397.841335][T15203] netdevsim netdevsim2 eth3: entered allmulticast mode [ 397.848566][T15203] bond1: entered allmulticast mode [ 397.853848][T15203] bond2: entered allmulticast mode [ 397.859438][T15203] veth4: entered allmulticast mode [ 397.864827][T15203] veth5: entered allmulticast mode [ 397.871516][T15203] macvtap0.4: entered allmulticast mode [ 397.877530][T15203] ipvlan0: entered allmulticast mode [ 397.883128][T15203] bond3: entered allmulticast mode [ 397.888543][T15203] gretap1: entered allmulticast mode [ 397.894168][T15203] bond5: entered allmulticast mode [ 397.899730][T15203] bond6: entered allmulticast mode [ 397.905192][T15203] veth6: entered allmulticast mode [ 397.910924][T15203] veth7: entered allmulticast mode [ 397.916678][T15203] ªªªªª: left promiscuous mode [ 397.921816][T15203] bond7: entered allmulticast mode [ 397.927350][T15203] batadv1: entered allmulticast mode [ 397.932828][T15203] vti0: entered allmulticast mode [ 397.938358][T15203] bond8: entered allmulticast mode [ 397.943659][T15203] geneve2: entered allmulticast mode [ 397.949842][T15203] veth8: entered allmulticast mode [ 397.955441][T15203] veth9: entered allmulticast mode [ 397.961062][T15203] bridge3: entered allmulticast mode [ 397.966773][T15203] bridge4: entered allmulticast mode [ 397.972310][T15203] bond9: entered allmulticast mode [ 397.978328][T15203] vlan1: entered allmulticast mode [ 397.983795][T15203] vxlan1: entered allmulticast mode [ 397.989952][T15203] bond0: left promiscuous mode [ 397.994868][T15203] bond4: left promiscuous mode [ 398.000396][T15203] macvtap2: left promiscuous mode [ 398.009485][T15203] bond10: entered allmulticast mode [ 398.014980][T15203] bond11: entered allmulticast mode [ 398.020593][T15203] bond12: entered allmulticast mode [ 398.036020][T15046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.049464][T15046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.092545][ T6046] hsr_slave_0: left promiscuous mode [ 398.145758][ T6046] hsr_slave_1: left promiscuous mode [ 398.161846][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.193406][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.236141][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.253868][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.325527][ T6046] veth1_macvtap: left promiscuous mode [ 398.345311][ T6046] veth0_macvtap: left promiscuous mode [ 398.351485][ T6046] veth1_vlan: left promiscuous mode [ 398.361548][ T6046] veth0_vlan: left promiscuous mode [ 398.923779][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 398.977174][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 399.484233][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2576'. [ 399.539284][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.546472][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.616665][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.623796][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.733318][T15025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.761598][T15025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.999205][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.073637][T15046] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.118049][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.125245][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.152623][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 400.190768][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.197946][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.248246][T15025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.373771][T15046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.416843][T15025] veth0_vlan: entered promiscuous mode [ 400.458448][T15025] veth1_vlan: entered promiscuous mode [ 400.540313][T15025] veth0_macvtap: entered promiscuous mode [ 400.565304][T15242] netlink: 'syz.0.2586': attribute type 16 has an invalid length. [ 400.580626][T15025] veth1_macvtap: entered promiscuous mode [ 400.589948][T15242] netlink: 'syz.0.2586': attribute type 17 has an invalid length. [ 400.644317][T15242] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.651578][T15242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.680840][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.696133][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.737020][T15234] lo speed is unknown, defaulting to 1000 [ 400.748445][T15025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.781672][T15025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.804054][T15025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.835688][T15025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.844449][T15025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.865636][T15025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.086509][T15046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.138417][T15234] lo speed is unknown, defaulting to 1000 [ 401.219833][T15259] xt_recent: Unsupported userspace flags (00000042) [ 401.227415][ T8275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.243838][ T8275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.327307][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.335174][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.757778][T15277] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 401.902864][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 402.090915][T15046] veth0_vlan: entered promiscuous mode [ 402.132405][T15046] veth1_vlan: entered promiscuous mode [ 402.235044][T15046] veth0_macvtap: entered promiscuous mode [ 402.320621][T15046] veth1_macvtap: entered promiscuous mode [ 402.360827][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.382420][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.398915][T15046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.416391][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.428541][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.441407][T15046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.457542][T15046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.476922][T15046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.491098][T15046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.501734][T15046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.617077][ T8282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.624994][ T8282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.696626][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.736247][ T8282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.744107][ T8282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.811239][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.899272][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.977676][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.062584][ T53] bridge_slave_1: left allmulticast mode [ 403.069958][ T53] bridge_slave_1: left promiscuous mode [ 403.076616][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.085056][ T53] bridge_slave_0: left allmulticast mode [ 403.091094][ T53] bridge_slave_0: left promiscuous mode [ 403.097006][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.249880][T15301] xt_bpf: check failed: parse error [ 403.574004][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.588599][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.604977][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.613841][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.631131][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 403.645602][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.883645][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.900232][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.911904][ T53] bond0 (unregistering): Released all slaves [ 404.147500][T15303] lo speed is unknown, defaulting to 1000 [ 404.258405][T15312] x_tables: ip6_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 404.381159][T15303] lo speed is unknown, defaulting to 1000 [ 404.472855][T15316] pimreg3: entered allmulticast mode [ 404.597471][T15322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2607'. [ 404.707593][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'. [ 404.805083][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.821192][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.829014][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2611'. [ 404.842746][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.848034][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 404.865314][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.871680][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2611'. [ 404.873403][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 404.890723][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.218709][ T53] hsr_slave_0: left promiscuous mode [ 405.236026][ T53] hsr_slave_1: left promiscuous mode [ 405.243886][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.251885][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.264062][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.283801][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.345436][ T53] veth1_macvtap: left promiscuous mode [ 405.351425][ T53] veth0_macvtap: left promiscuous mode [ 405.357357][ T53] veth1_vlan: left promiscuous mode [ 405.362676][ T53] veth0_vlan: left promiscuous mode [ 405.716576][ T5849] Bluetooth: hci3: command tx timeout [ 405.775135][T15350] netlink: 'syz.2.2614': attribute type 39 has an invalid length. [ 406.073947][ T53] team0 (unregistering): Port device team_slave_1 removed [ 406.135156][ T53] team0 (unregistering): Port device team_slave_0 removed [ 406.714900][T15303] chnl_net:caif_netlink_parms(): no params data found [ 406.730295][T15331] lo speed is unknown, defaulting to 1000 [ 407.006170][ T5849] Bluetooth: hci4: command tx timeout [ 407.040822][T15331] lo speed is unknown, defaulting to 1000 [ 407.055991][T15327] lo speed is unknown, defaulting to 1000 [ 407.076905][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.104543][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.130748][T15303] bridge_slave_0: entered allmulticast mode [ 407.158852][T15303] bridge_slave_0: entered promiscuous mode [ 407.177504][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.184723][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.226416][T15303] bridge_slave_1: entered allmulticast mode [ 407.240656][T15303] bridge_slave_1: entered promiscuous mode [ 407.407540][T15327] lo speed is unknown, defaulting to 1000 [ 407.412463][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.454667][T15367] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 407.470376][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.473552][T15369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2620'. [ 407.634939][T15378] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 407.656517][T15303] team0: Port device team_slave_0 added [ 407.688218][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 407.699543][T15303] team0: Port device team_slave_1 added [ 407.723983][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 407.786424][ T5849] Bluetooth: hci3: command tx timeout [ 407.818577][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.834744][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.871631][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.912793][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.920035][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.946812][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.246802][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.313666][T15303] hsr_slave_0: entered promiscuous mode [ 408.327987][T15303] hsr_slave_1: entered promiscuous mode [ 408.417586][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.560515][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.729546][T15401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2624'. [ 408.740568][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.822851][T15327] chnl_net:caif_netlink_parms(): no params data found [ 409.038050][T15419] delete_channel: no stack [ 409.077152][ T5849] Bluetooth: hci4: command tx timeout [ 409.307437][T15427] sctp: [Deprecated]: syz.2.2631 (pid 15427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.307437][T15427] Use struct sctp_sack_info instead [ 409.324045][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.324119][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.324336][T15327] bridge_slave_0: entered allmulticast mode [ 409.366788][T15327] bridge_slave_0: entered promiscuous mode [ 409.399425][T15425] ªªªªª: renamed from bridge0 (while UP) [ 409.412106][T15425] ªªªªª: entered allmulticast mode [ 409.421482][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.455753][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.463148][T15327] bridge_slave_1: entered allmulticast mode [ 409.477240][T15327] bridge_slave_1: entered promiscuous mode [ 409.559077][ T53] bridge_slave_1: left allmulticast mode [ 409.564789][ T53] bridge_slave_1: left promiscuous mode [ 409.571169][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.581416][ T53] bridge_slave_0: left allmulticast mode [ 409.589076][ T53] bridge_slave_0: left promiscuous mode [ 409.596030][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.868911][ T5849] Bluetooth: hci3: command tx timeout [ 410.132674][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.144409][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.154870][ T53] bond0 (unregistering): Released all slaves [ 410.213066][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.238322][T15413] lo speed is unknown, defaulting to 1000 [ 410.277824][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.456650][T15327] team0: Port device team_slave_0 added [ 410.497756][T15413] lo speed is unknown, defaulting to 1000 [ 410.543386][T15327] team0: Port device team_slave_1 added [ 410.684107][T15327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.717181][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.765565][T15327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.879927][T15327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.915672][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.945893][T15327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.991093][T15303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.076839][T15303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.156387][ T5849] Bluetooth: hci4: command tx timeout [ 411.175056][T15303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.234389][ T53] hsr_slave_0: left promiscuous mode [ 411.242997][ T53] hsr_slave_1: left promiscuous mode [ 411.253709][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.261471][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.286285][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.303946][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.376234][ T53] veth1_macvtap: left promiscuous mode [ 411.382134][ T53] veth0_macvtap: left promiscuous mode [ 411.389873][ T53] veth1_vlan: left promiscuous mode [ 411.409286][ T53] veth0_vlan: left promiscuous mode [ 411.507691][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 411.572688][T15460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2639'. [ 411.946338][ T5849] Bluetooth: hci3: command tx timeout [ 412.205273][ T53] team0 (unregistering): Port device team_slave_1 removed [ 412.273862][ T53] team0 (unregistering): Port device team_slave_0 removed [ 412.842322][T15327] hsr_slave_0: entered promiscuous mode [ 412.849408][T15327] hsr_slave_1: entered promiscuous mode [ 412.855881][T15327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.863502][T15327] Cannot create hsr debugfs directory [ 412.869588][T15303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.909433][T15459] hsr0: entered promiscuous mode [ 412.915331][T15460] hsr_slave_0: left promiscuous mode [ 412.921258][T15460] hsr_slave_1: left promiscuous mode [ 412.938320][T15460] hsr0 (unregistering): left promiscuous mode [ 412.946034][T15460] ------------[ cut here ]------------ [ 412.951692][T15460] WARNING: CPU: 0 PID: 15460 at net/core/dev.c:11855 unregister_netdevice_many_notify+0x1b35/0x2070 [ 412.962719][T15460] Modules linked in: [ 412.966960][T15460] CPU: 0 UID: 0 PID: 15460 Comm: syz.2.2639 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 412.977974][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 412.988603][T15460] RIP: 0010:unregister_netdevice_many_notify+0x1b35/0x2070 [ 412.996208][T15460] Code: 58 5c f8 48 8b 4c 24 08 48 8b 09 4c 39 f9 0f 84 49 01 00 00 48 89 cb e8 d9 1a f5 f7 48 89 d9 e9 8b ef ff ff e8 cc 1a f5 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 be 1a f5 f7 90 0f 0b 90 eb 97 e8 b3 1a [ 413.016123][T15460] RSP: 0018:ffffc9000df8efa0 EFLAGS: 00010283 [ 413.022235][T15460] RAX: ffffffff89cc9c94 RBX: ffff88805c3ea1a8 RCX: 0000000000080000 [ 413.030471][T15460] RDX: ffffc9000e0c9000 RSI: 000000000000e64e RDI: 000000000000e64f [ 413.038739][T15460] RBP: ffffc9000df8f190 R08: ffffffff89cc9b99 R09: 1ffffffff1fda874 [ 413.047235][T15460] R10: dffffc0000000000 R11: fffffbfff1fda875 R12: ffff888049eba000 [ 413.055255][T15460] R13: dffffc0000000000 R14: ffff88805c3ea000 R15: ffffc9000df8f200 [ 413.063593][T15460] FS: 00007f21269356c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 413.073040][T15460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.079910][T15460] CR2: 00007fcc0f4f327d CR3: 0000000069d38000 CR4: 00000000003526f0 [ 413.088142][T15460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.096387][T15460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.104381][T15460] Call Trace: [ 413.108224][T15460] [ 413.111375][T15460] ? __warn+0x165/0x4d0 [ 413.115799][T15460] ? unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.122433][T15460] ? report_bug+0x2b3/0x500 [ 413.127150][T15460] ? unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.133749][T15460] ? handle_bug+0x60/0x90 [ 413.138354][T15460] ? exc_invalid_op+0x1a/0x50 [ 413.143091][T15460] ? asm_exc_invalid_op+0x1a/0x20 [ 413.148437][T15460] ? unregister_netdevice_many_notify+0x1a39/0x2070 [ 413.155066][T15460] ? unregister_netdevice_many_notify+0x1b34/0x2070 [ 413.161904][T15460] ? unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.168756][T15460] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 413.175828][T15460] ? kasan_quarantine_put+0xdc/0x230 [ 413.181159][T15460] ? unregister_netdevice_queue+0x26b/0x370 [ 413.187357][T15460] ? hsr_del_nodes+0x78/0x90 [ 413.191971][T15460] ? __pfx_hsr_dellink+0x10/0x10 [ 413.197063][T15460] rtnl_dellink+0x52b/0x8d0 [ 413.201593][T15460] ? __pfx_rtnl_dellink+0x10/0x10 [ 413.207068][T15460] ? validate_chain+0x11e/0x5920 [ 413.212034][T15460] ? __pfx_lock_acquire+0x10/0x10 [ 413.217376][T15460] ? __pfx_lock_release+0x10/0x10 [ 413.222492][T15460] ? __pfx_rtnl_dellink+0x10/0x10 [ 413.227745][T15460] rtnetlink_rcv_msg+0x791/0xcf0 [ 413.233071][T15460] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 413.236017][ T5849] Bluetooth: hci4: command tx timeout [ 413.238564][T15460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.249349][T15460] netlink_rcv_skb+0x206/0x480 [ 413.254141][T15460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.259896][T15460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.265225][T15460] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.270631][T15460] netlink_unicast+0x7f6/0x990 [ 413.275399][T15460] ? __pfx_netlink_unicast+0x10/0x10 [ 413.280938][T15460] ? __virt_addr_valid+0x45f/0x530 [ 413.286401][T15460] ? __phys_addr_symbol+0x2f/0x70 [ 413.291460][T15460] ? __check_object_size+0x47a/0x730 [ 413.297052][T15460] netlink_sendmsg+0x8de/0xcb0 [ 413.301839][T15460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.307525][T15460] ? aa_sock_msg_perm+0x91/0x160 [ 413.312512][T15460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.318050][T15460] __sock_sendmsg+0x221/0x270 [ 413.322747][T15460] ____sys_sendmsg+0x53a/0x860 [ 413.327802][T15460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.333113][T15460] ? __fget_files+0x2a/0x410 [ 413.337986][T15460] ? __fget_files+0x2a/0x410 [ 413.342606][T15460] __sys_sendmsg+0x269/0x350 [ 413.347410][T15460] ? __pfx_futex_wake+0x10/0x10 [ 413.352450][T15460] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.357902][T15460] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.364292][T15460] ? do_syscall_64+0x100/0x230 [ 413.369306][T15460] ? do_syscall_64+0xb6/0x230 [ 413.374011][T15460] do_syscall_64+0xf3/0x230 [ 413.378799][T15460] ? clear_bhb_loop+0x35/0x90 [ 413.383506][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.389629][T15460] RIP: 0033:0x7f2125b8cde9 [ 413.394068][T15460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.414137][T15460] RSP: 002b:00007f2126935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.422899][T15460] RAX: ffffffffffffffda RBX: 00007f2125da6080 RCX: 00007f2125b8cde9 [ 413.431036][T15460] RDX: 0000000020040000 RSI: 00004000000003c0 RDI: 000000000000000d [ 413.439286][T15460] RBP: 00007f2125c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.447546][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.455802][T15460] R13: 0000000000000000 R14: 00007f2125da6080 R15: 00007ffcafc99448 [ 413.463828][T15460] [ 413.467081][T15460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.474370][T15460] CPU: 0 UID: 0 PID: 15460 Comm: syz.2.2639 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 413.485134][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 413.495205][T15460] Call Trace: [ 413.498491][T15460] [ 413.501420][T15460] dump_stack_lvl+0x241/0x360 [ 413.506094][T15460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.511287][T15460] ? __pfx__printk+0x10/0x10 [ 413.515880][T15460] ? _printk+0xd5/0x120 [ 413.520043][T15460] ? __init_begin+0x41000/0x41000 [ 413.525055][T15460] ? vscnprintf+0x5d/0x90 [ 413.529437][T15460] panic+0x349/0x880 [ 413.533359][T15460] ? __warn+0x174/0x4d0 [ 413.537524][T15460] ? __pfx_panic+0x10/0x10 [ 413.541966][T15460] __warn+0x344/0x4d0 [ 413.545949][T15460] ? unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.552552][T15460] report_bug+0x2b3/0x500 [ 413.556882][T15460] ? unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.563479][T15460] handle_bug+0x60/0x90 [ 413.567635][T15460] exc_invalid_op+0x1a/0x50 [ 413.572134][T15460] asm_exc_invalid_op+0x1a/0x20 [ 413.576984][T15460] RIP: 0010:unregister_netdevice_many_notify+0x1b35/0x2070 [ 413.584182][T15460] Code: 58 5c f8 48 8b 4c 24 08 48 8b 09 4c 39 f9 0f 84 49 01 00 00 48 89 cb e8 d9 1a f5 f7 48 89 d9 e9 8b ef ff ff e8 cc 1a f5 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 be 1a f5 f7 90 0f 0b 90 eb 97 e8 b3 1a [ 413.603794][T15460] RSP: 0018:ffffc9000df8efa0 EFLAGS: 00010283 [ 413.609865][T15460] RAX: ffffffff89cc9c94 RBX: ffff88805c3ea1a8 RCX: 0000000000080000 [ 413.617835][T15460] RDX: ffffc9000e0c9000 RSI: 000000000000e64e RDI: 000000000000e64f [ 413.625887][T15460] RBP: ffffc9000df8f190 R08: ffffffff89cc9b99 R09: 1ffffffff1fda874 [ 413.633880][T15460] R10: dffffc0000000000 R11: fffffbfff1fda875 R12: ffff888049eba000 [ 413.641858][T15460] R13: dffffc0000000000 R14: ffff88805c3ea000 R15: ffffc9000df8f200 [ 413.649834][T15460] ? unregister_netdevice_many_notify+0x1a39/0x2070 [ 413.656430][T15460] ? unregister_netdevice_many_notify+0x1b34/0x2070 [ 413.663041][T15460] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 413.669889][T15460] ? kasan_quarantine_put+0xdc/0x230 [ 413.675174][T15460] ? unregister_netdevice_queue+0x26b/0x370 [ 413.681076][T15460] ? hsr_del_nodes+0x78/0x90 [ 413.685666][T15460] ? __pfx_hsr_dellink+0x10/0x10 [ 413.690605][T15460] rtnl_dellink+0x52b/0x8d0 [ 413.695115][T15460] ? __pfx_rtnl_dellink+0x10/0x10 [ 413.700147][T15460] ? validate_chain+0x11e/0x5920 [ 413.705083][T15460] ? __pfx_lock_acquire+0x10/0x10 [ 413.710129][T15460] ? __pfx_lock_release+0x10/0x10 [ 413.715206][T15460] ? __pfx_rtnl_dellink+0x10/0x10 [ 413.720228][T15460] rtnetlink_rcv_msg+0x791/0xcf0 [ 413.725156][T15460] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 413.730287][T15460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.735764][T15460] netlink_rcv_skb+0x206/0x480 [ 413.740532][T15460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.745990][T15460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.751288][T15460] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.756507][T15460] netlink_unicast+0x7f6/0x990 [ 413.761307][T15460] ? __pfx_netlink_unicast+0x10/0x10 [ 413.766600][T15460] ? __virt_addr_valid+0x45f/0x530 [ 413.771720][T15460] ? __phys_addr_symbol+0x2f/0x70 [ 413.776751][T15460] ? __check_object_size+0x47a/0x730 [ 413.782040][T15460] netlink_sendmsg+0x8de/0xcb0 [ 413.786807][T15460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.792087][T15460] ? aa_sock_msg_perm+0x91/0x160 [ 413.797033][T15460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.802319][T15460] __sock_sendmsg+0x221/0x270 [ 413.806998][T15460] ____sys_sendmsg+0x53a/0x860 [ 413.811766][T15460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.817050][T15460] ? __fget_files+0x2a/0x410 [ 413.821669][T15460] ? __fget_files+0x2a/0x410 [ 413.826338][T15460] __sys_sendmsg+0x269/0x350 [ 413.830941][T15460] ? __pfx_futex_wake+0x10/0x10 [ 413.835796][T15460] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.840937][T15460] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.847265][T15460] ? do_syscall_64+0x100/0x230 [ 413.852035][T15460] ? do_syscall_64+0xb6/0x230 [ 413.856709][T15460] do_syscall_64+0xf3/0x230 [ 413.861208][T15460] ? clear_bhb_loop+0x35/0x90 [ 413.865885][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.871774][T15460] RIP: 0033:0x7f2125b8cde9 [ 413.876184][T15460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.895806][T15460] RSP: 002b:00007f2126935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.904242][T15460] RAX: ffffffffffffffda RBX: 00007f2125da6080 RCX: 00007f2125b8cde9 [ 413.912228][T15460] RDX: 0000000020040000 RSI: 00004000000003c0 RDI: 000000000000000d [ 413.920198][T15460] RBP: 00007f2125c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.928163][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.936127][T15460] R13: 0000000000000000 R14: 00007f2125da6080 R15: 00007ffcafc99448 [ 413.944106][T15460] [ 413.947377][T15460] Kernel Offset: disabled [ 413.951694][T15460] Rebooting in 86400 seconds..