last executing test programs: 32.947160074s ago: executing program 4 (id=972): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) socketpair(0xf, 0x5, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) getsockopt(r1, 0xff, 0x3, &(0x7f0000000040)=""/235, &(0x7f0000000140)=0xeb) 32.857557437s ago: executing program 4 (id=974): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x9c, &(0x7f0000000e40)=""/156, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x9c, &(0x7f0000000e40)=""/156, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x7, <r4=>0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0xd4, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0xb8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x7f7f, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x0, @random=0x4, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x80, 0x0, 0x0, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0x5, 0x1}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x4000001fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x8, 0x1, 0xd, 0x41}}, @void, [{0xdd, 0x43, "766f364f6852c521b07e56aa92ddb503ef857c83458cd39e183464226f09c6ba2d3bb61e337cb5fc05bf1efa32ca3037a4ab273c264027aa7eb9b059684af1e7dc1adb"}]}}]}, 0xd4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0xd4, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0xb8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x7f7f, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x0, @random=0x4, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x80, 0x0, 0x0, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0x5, 0x1}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x4000001fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x8, 0x1, 0xd, 0x41}}, @void, [{0xdd, 0x43, "766f364f6852c521b07e56aa92ddb503ef857c83458cd39e183464226f09c6ba2d3bb61e337cb5fc05bf1efa32ca3037a4ab273c264027aa7eb9b059684af1e7dc1adb"}]}}]}, 0xd4}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000000100)=0x38, 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000000c0), 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r12=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000080000002e00000008000300", @ANYRES32=r12, @ANYBLOB="050034008b0000000800c9000c17fffe"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048800) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) 32.622913359s ago: executing program 4 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket(0x2, 0x6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x820}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100), 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 32.307380739s ago: executing program 4 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x140f, 0x2, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x10004010) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0xf0}, 0xfd}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff, 'ipvlan1\x00', 'hsr0\x00', {0xff}, {}, 0x21, 0x3, 0x40}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x5, 0x2, 0x4, 0x6, 0x2], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x6, 0x0, 0x4, 0x8, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x2], 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x6, 0x4, 0x5, 0x1, 0x5], 0x5, 0x2}, {0x1000, [0x4, 0x0, 0x3, 0x3, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 22.503617301s ago: executing program 4 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x140f, 0x2, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x10004010) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0xf0}, 0xfd}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff, 'ipvlan1\x00', 'hsr0\x00', {0xff}, {}, 0x21, 0x3, 0x40}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x5, 0x2, 0x4, 0x6, 0x2], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x6, 0x0, 0x4, 0x8, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x2], 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x6, 0x4, 0x5, 0x1, 0x5], 0x5, 0x2}, {0x1000, [0x4, 0x0, 0x3, 0x3, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 12.067946568s ago: executing program 4 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x140f, 0x2, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x10004010) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0xf0}, 0xfd}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff, 'ipvlan1\x00', 'hsr0\x00', {0xff}, {}, 0x21, 0x3, 0x40}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x5, 0x2, 0x4, 0x6, 0x2], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x6, 0x0, 0x4, 0x8, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x2], 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x6, 0x4, 0x5, 0x1, 0x5], 0x5, 0x2}, {0x1000, [0x4, 0x0, 0x3, 0x3, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 2.309548172s ago: executing program 3 (id=1270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="958bba6cda1f57a4bf03e06d0ee0147f4213fb1d31a73a901938420b16cf271ab5544e6498a51900826c", 0x2a}, {&(0x7f0000000040)="943398fe87", 0x5}], 0x2}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000840) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) socket$isdn_base(0x22, 0x3, 0x0) 2.137051435s ago: executing program 3 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {}, {0xc, 0xd}}}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, 0x0) 1.588826502s ago: executing program 3 (id=1278): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="869726", 0x3}], 0x1}}], 0x1, 0x20004000) (async) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="869726", 0x3}], 0x1}}], 0x1, 0x20004000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f00000000c0)=@gcm_256={{0x303}, "2343e0372d71975c", "72109b6b8e6770879b0890640c738385b9626fe81f748e432834ec7242e382f3", "6929dd33", "c3fe92742955d445"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f00000000c0)=@gcm_256={{0x303}, "2343e0372d71975c", "72109b6b8e6770879b0890640c738385b9626fe81f748e432834ec7242e382f3", "6929dd33", "c3fe92742955d445"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) close(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@setlink={0x40, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x40}}, 0x0) 1.500140879s ago: executing program 0 (id=1280): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10) 1.413711036s ago: executing program 0 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="18", 0x1}, {&(0x7f0000000340)="c3d638979940ec4aed6f76334d527b4a563c893f585d718e72e6a28c5f28f995d314b4356ec5d0dd10f0dc3a1e07ec26090b5c2eedb885ee565b827aadde75a45e4a9c60ee24c51b9034d7f59cdb6b81ebd77fc0021c4d579a59916b87ff79e3078b7dc276dd417db7d3e79564393ad63a6eab8403a7975cdf7d33da099f96c14bd575c07f9c", 0x86}, {&(0x7f0000000100)="1ab6011261240ec445798a91c81c19ae1fa6efd570fbe785ca96a41f8fe0f05f12dff3f77761ae3641f699ecb1d9a3cf0242f9d1a28c027d1f5509726b35b885eefe6b8aa25abc9d34e7528f65593e164f5086f4df9c4d402e993a05e819c974", 0x60}, {&(0x7f00000002c0)="79476f7e4b3c000afba2c4b1d292aac59086e4e18c2d8906253a704f7a5dcff4", 0x20}, {&(0x7f0000000400)="d4a10ea175de40c95b59f35571e1ac4c326981df7ff78651861a78a4e331d1d4cbbac3a04690139ab7b55e289d7cc07a09c8357c4fb2ce99085a770dd7ad236c183fb070ff71461e152fca9e3f3f227c8007099fadbcfea7101b99b7b8c2ab0367283be9ca8e46a387dea15ee69e64adf6598dc8f7352bc866f1000897dc", 0x7e}, {&(0x7f0000000480)="3cd1d4a8c0f813b2a88e832e7a099785ee6e838967b771d255ac74d08fd0fced34043b8a9112269543a296ab8c364b94ca8c045891edae9b78c662eb57f4862e8e9d09df08e671e776b1", 0x4a}], 0x6}}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0x1}}) shutdown(r1, 0x1) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300)) close(0x3) setsockopt(r0, 0x6, 0x71, &(0x7f0000000200)="fb8cf14c00000000f760a85e23e3a28b1fe989fe7305b2be2ccc94a1f45216426e37789fc9324d28b8defbcf0e8f08a9da54d4a6b4464722584072b3109bb0989a9d8f7719a707f3676b09cbe8b6dee54b951723fef76e5edc4fa68023aabb8250c0a56c731acfb75aa5a05156285b7f3729e9e65d29f67964f1e72ca2257d3374fe349051ba789153db", 0x8a) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 1.312005315s ago: executing program 1 (id=1284): r0 = socket$nl_crypto(0x10, 0x3, 0x15) write(r0, &(0x7f0000000000)="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", 0xfa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r2, 0x400, 0x70bd2b, 0x4, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x72, 0xa9, @random="a8af8ff88f1449c6cc3d9ea5b0ba0e45328716fbfa126f95b09618aaf8ef98a8aa6b1322626aa9ca995125d2c703d508b3240da280eed12798037eb2532bde3b414b0791a321b8fe2f966d130de3578e96b16f1e79563ff3b9d5a756e93607bbbc4330dc4d5070dd6907d436d6b8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={<r4=>0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={r4, 0x9d}, 0x8) r5 = socket(0xa, 0x6, 0xe) r6 = socket$kcm(0x29, 0x5, 0x0) sendto$rxrpc(r5, &(0x7f0000000400)="e2a613128fba", 0x6, 0x8000, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc4200}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, r2, 0x200, 0x70bd28, 0x5, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x14}, 0x4000060) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000006c0)=0xf1, 0x4) close(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={<r8=>0x0}, &(0x7f00000010c0)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001100)={<r9=>0x0}, &(0x7f0000001140)=0xc) sendmsg$netlink(r0, &(0x7f0000002980)={&(0x7f0000000700)=@proc={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc, &(0x7f00000028c0)=[{&(0x7f0000000880)={0x634, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0xa6, 0x0, 0x0, @uid=r7}, @nested={0x18, 0xc8, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x122}, @nested={0x4, 0x49}, @typed={0x8, 0x6a, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x170, 0xc4, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x13d}, @generic="6bc55fcfcc100aa7639b21763499496f795a0920b8b16100a1a62a583ab14ac28fb417142f7920c063aea682472141c6254bfa0a38f3c47f5427660155d2520a3dec6b1fdfeddb20f42348dff86b3c47e6855a6ac2ff9fc1fd9d0707ac6d95526e4dcd6f3d1e4e67a25d5315bd41753abcaf32adde8cd94b595ce0e9ffb840da9cdb4727935fcb473481ede70e7ddbf96dc4deb8be4adf875eb12f0b85549870452c61be67d718bfa41cb1b866ee30446d684bfa8fcd6a", @generic="4978f8f85c8dc09dfa95ceb45b8600b86e26860f2dbc22070b9af9d5dbb841e4a2a93f66f2fc9c1f3a81df4ed57449e3021c3500e09ce2d11424c3dacd6d6fba68700a2a0c5365733c6acc638e34a07579feb6420c103bb8c27611d2ddea22ad79d98866de7128253f2d4efaddfb676d5f4f94ae4421f9c28b4763e4fbc2447595d1c2a948cb2084fcc81c25900e1e753ce487b1963d79338ae26988b4", @typed={0x5, 0x10c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x60}, @nested={0x4, 0x16}]}, @nested={0x13d, 0xa0, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @u32}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@multicast2}, @generic="e50e1c957534a42ee4af54edf9de21f6268b244a0bec4bfa97cde761dd25bf2cb98381084067ac3fe481449f14d720e457e6bb984bbb0ccbd1bcbcbbaec6f165220587e41a9ea4b1370e2e6eb87de745b126f20f6f7407311c0a1e5e329f241f0659adfd3340e47fb0e32b7f70", @typed={0x8, 0xd9, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="0177022b6d18a7ddd65221b57a6bd0dc092cc607d5fc647bd49956e174f809699cab08cba8897891e78e35a8e2284b036ffd680203d90357f3742f18c676e146cc28df41c749a07013cd08401e76539cb712b107da725b3b817b42e788d3c26833914c5e985a69a4a4a05903efacdde15f660f19f3ec3b19107d384d753b437d53913b0679a222a23a8a2fe3ac249c22a13a8153fd225c36fd6f5dc8e97860c92dc034537c1a0fbb", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x134}]}, @nested={0x39, 0x131, 0x0, 0x1, [@generic="205500055642a4c7d563387689726a59c26d8ec624f6f6762c38400d718025143e351ebac767d677d3855f4699", @typed={0x4, 0x1a}, @nested={0x4, 0x43}]}, @typed={0x11, 0xc9, 0x0, 0x0, @str='0000:00:10.0\x00'}, @generic="3fe4f345f475c2d61d5c2701467c0da3bac54f1529d15e52c5405069adaa9908660776ef6af0c870ae7dc5e84bfb34aaca66b9be207c3e865d1ea484117b5d6ce3952286ca35af78792b916592f6a3894c7dcfa5a2c4a98eb9876e22ec1bfe7a8630048daad9017ade0f2a651119", @nested={0x16c, 0x83, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x97}, @generic="97ae69bf903e1ef0ec91d34d58dc0df661d65dd9f5e00a172beb94ced7ed7669336e4f167b8c2aa14e9012d0fa055deb4f9018ef2711472c375d236c1dc1511095fd35238c047560b291839e561c03541a23a24eee7450baec3cc9354601a10d032581ccddd1b97a08f29037f8f4e8070c8945475dfbb3c4cf1d4c94448c2bedaf64b579bc232a276ad2598cbde05fb9a9bbe324bebe59cd0be951e1afd6", @nested={0x4, 0xae}, @typed={0x8, 0x116, 0x0, 0x0, @u32=0x29d}, @generic="05f55c26091400de91a1c42f0062faf8a6624fd4c219d2dc6f059ace3a4acc5dc6c327a0175bb31a1ff032ace178c2213b4df545ac33fb69d15dcb73be419bc5a6ee1c8d718cef", @generic="cd4c4d6a5414e787d9b1bee6f8deb35a3469e465885f55b0180411e808d98d2eb44e8dcf4f2aea98c56a6cbe744475a20118bdd2044d8278fa0b42b1673af1a91d767d10869f1fddd73d34214f196c1edf0ccb6b63959d9ec88633733b702b07aa8c2f0757c23c313a237b", @nested={0x4, 0xda}]}, @nested={0x14, 0x6d, 0x0, 0x1, [@typed={0xc, 0x38, 0x0, 0x0, @str='devlink\x00'}, @typed={0x4, 0x76}]}, @nested={0x113, 0x8, 0x0, 0x1, [@generic="3fc0648436b9ddbbdcf4c75737305e3df98ee77b1ae92f8886e9e8a21b7ed7d7fceec8c6767c709db26cb265fe937824a2b055047be5e4d4c4cd39170b082324c89db61af7ddac6deca107b366287182c6f00150853a9e07a93b10a358a73b68de7bfd32de430edd6165567f53838f86973bc85656ff6403e586b4a6aeeae983b89c59195fa7302bc5f4c37e24ed08fe4d802db16723e098006b45e6a1a312262a5c9722ba7805213db68b40fdc45f6d0958afb35a2347718cff7526602953468756f33f5b07f4ce2c709f893af60dfcd563ed54ae4fce0b6db7e278bd1ee555ae29075d68734ff2c5a24e371226d8a9e43d9322dcaed5", @typed={0x14, 0x111, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x43}]}]}, 0x634}, {&(0x7f0000000ec0)={0x24, 0x15, 0x20, 0x70bd29, 0x25dfdbfe, "", [@typed={0xc, 0xae, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xed, 0x0, 0x0, @fd=r5}]}, 0x24}, {&(0x7f0000000f00)={0x14, 0x13, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0x4, 0x12b}]}, 0x14}, {&(0x7f0000000f40)={0x10c, 0x23, 0x100, 0x70bd29, 0x25dfdbfb, "", [@typed={0xfc, 0xdf, 0x0, 0x0, @binary="b67391086192f7a9e58d0e8deca916674a27f5a313c73ec19418e3839d21a503860e6902e0753ba5810eab32de67f2db0c48ae3b839fd77bab27b29d508468c2252a2559d7fecc9f846eee126ed09ddf8258614044c8c3495e8d3f44727473ed147f1ce5f344f90864c21d01832895484fbd3521de1fb32607bc6ab2161822b775e0ad161dbb3cc501c1b11382ab7725e872505c2c039da318db2589aa8cc1eeaee97651e1c9e33d91eb3a79dd98af68c17e618eee2764cb2e3f0dc4bdabdc72bbc5691b80b2e9a9922cb028088ee6a77d998f3081bbd169217a0476ee20f21638ad114a03afe13785e985f621f7002432d42586cda62a05"}]}, 0x10c}, {&(0x7f0000001180)={0x418, 0x2f, 0x400, 0x70bd28, 0x25dfdbff, "", [@nested={0x110, 0x8b, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x87}, @generic="2a70fff950ad8904cd89e2ce074b9ebcc94f64c83c4c833496ee5afd73104f245bdddc47b8cf499c7876a482d5b0d171e9994d3ed2626c4a3739636cb6eb2df4c81f8246cb31f7410d08d4578a761fcdfb9b7593c603c547c29a2d7410a4d924f9ae380f4bf9406a96bf7fc7b0fb34116dcdce23b2b3a05dfe9f03d03231d4026cebcbaf4823ff36d958885deed386a629e91250f17b1d4a5e1eb9f1a20a9d3fdd85c3553b912ee77cf4bc55d7d4ce4a48889ff5ffe33cb148871db0a56febf3a9877dc9838c86149daf3548f9f6a4d19015", @generic="48a44b41a0e919a736079724b278a9e37c0389898dbe6164502ba08d192f", @nested={0x4, 0x73}]}, @nested={0x9c, 0xd5, 0x0, 0x1, [@typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x106}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x22}, @generic="31814ed1cebdb82f87f5dbfb889020c59aec9d0291e646081c877e7476047c079a4f8fc203b3f54dbf0c226fa7fe824ceb09a5f79a65626120d1b5596a4abca800d12643b35ce114f30f04eca95d9ec9bf670f36590f5fdf6b0425b61565c6f713b16895cc8b94cf", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x3}]}, @nested={0xe1, 0xa9, 0x0, 0x1, [@nested={0x4, 0x36}, @nested={0x4, 0xd4}, @typed={0x6, 0xa5, 0x0, 0x0, @str='*\x00'}, @generic="c7402c3265e9a5dd7dbc30129eae9a7e76739b43a68bab052226b6a8b8cf20ad3246c16ef5660b72de0fee4a506a7d06de71eeb77c6ea565a4185579b3bafc4775bb4e261a281d76a00b6e6e97a7c227e19fa4fc30a6fdf3e186e496687d8fcfceb8de0a529e57a08737d29397c4d7f4e901e670d1988041437b2dd7a3d054e0c3c069992c3a7a58772370dd9459414cc01f4e76f02ed3c8cf180bfea9218acd027432c86850bb30389f692fd1e744d23290c22c56f9f43dd4f010de4ab0c49dd5430df2d2", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x10001}]}, @generic="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", @nested={0x34, 0xf4, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0x8, 0x22, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x12d}, @typed={0xf, 0x29, 0x0, 0x0, @str='secondname\x00'}, @nested={0x4, 0x29}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @fd=r1}]}, @generic="503a10e1a450c97f61c084d89a46904dfad20bd17cea0268234bf8b08ed84eb7bd36e374891510cc53230bd8711c349014b814ff488fa23a77ec13"]}, 0x418}, {&(0x7f00000015c0)={0x128, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0x61, 0xb6, 0x0, 0x1, [@nested={0x4, 0xb1}, @nested={0x4, 0x30}, @generic="a92ef08ba1bffe0a71de98fd3b4537a5fcdf12c94198baef556cdd3a1d7a0403f29e33a35bb4dc96c534a7f7c569b2e9818c9dc4d830328f05368d7c2aa8df0bb8f33ead249cc05b61e2a4176ff3f5c793dfc93c35"]}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r1}, @generic="ef2e8b4613328ddc7ddae29f5ed04532ac28ad55240eef989372d990e4b1e2bf44fb934427c16290bfbb84b0fede5d3cfdaa97ff97aaba84fa", @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="6b8a2dc203e5f9cab22130f5dbc17d8062cf7666a19184576b19e692b17ac769cf1034276f0128ada0f87c00ee9dd3ef4c8cf46036e28ec63b61fac34bcfe72f10606f2a40abab1a7aae713b2852546f7143cc01e19f17a3e189527abd14937e99416fe5e3149b67b7"]}, 0x128}, {&(0x7f0000001700)={0x11b4, 0x16, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xbf, 0xfb, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="87193dd2ec07f66a8a8c6bd7afe4851dfbdc6db4b7fd410216b0a7fd74e73b2be8f67a283669728ed49a2b799adb8ca17e16c03bb8ddc7684a2128769244b87bd3425d93c30a62498e0d9518960371b50d493a8f4a2538072a9bf551a4c0e808b3c9a87f158e0f0af81a2b3a16f4344c8ca095c08d0b1f91e6d2331c7a1e571f33d511d3f7685b97a66a21a2921f18334e72f5ab479b6e3deef34e0cbf19bdf2b4af3f58e7716714f31e30a6bf59fd", @nested={0x4, 0x147}, @nested={0x4, 0x5}]}, @generic="0bffc168af73196d8a139e33d36fa012ff4f005847c5bd8f7c467b033ac830d276968654b26be2964e4af1fa2ded537a181cff04a75c2810cd237eff03251438e852f161ac662b061485c2e6c0f76aa6f52ae889109a1010106bd9d8c84b579fc3dd9a24ad75943e01679c02940a28a7a343bb975a72546d60559e22c92dc640e58639800fb20c99c9abf1df9354411e", @nested={0x8, 0x54, 0x0, 0x1, [@nested={0x4, 0x6}]}, @generic="5c9269f1aa57eb716cc21de2a2b1af8459207df821ca8415dcbe1aea645a977463b623e047a4497edf8fcaaf32e61caf30428ef908", @nested={0x14, 0x1d, 0x0, 0x1, [@typed={0x4, 0xc1}, @typed={0x5, 0x12f, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x108}]}, @generic="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"]}, 0x11b4}], 0x7, &(0x7f0000002940)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x24008051}, 0x40048080) sendto$inet6(r5, &(0x7f00000029c0)="95b761069f2c082f5c1681f3906e818681833ccad164cc48a1623de5cb562150f3cb63f853f085b0cde1b84a98ba4a1cf112acec61d3a865ea42033a50927e3c4b8eb4c442cfccde87e8301f39feebd2240f35e9a5abf3a962f2adab1a2dfeb1bfe94f94e67748b678108cbce0f0f3c1c0aef5df019243c5042026e15a0cb1eb41c13cdfe4d7866c78498e89cfdc08aa8381782caa2b8c22e91970a279586797683772df", 0xa4, 0x80, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r10, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x480d2) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffff7, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), r5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x30, r11, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'veth0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002e40), r10) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r12, 0x10, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000002f40)=0x1, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000002f80)=0x6, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x7c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x7c}}, 0x95) 1.175530547s ago: executing program 3 (id=1285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES32=0x0], 0x38}}, 0x4005885) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) 1.117954281s ago: executing program 2 (id=1286): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r6=>0x0}) bind$can_j1939(r4, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket$inet6_dccp(0xa, 0x6, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) 953.056585ms ago: executing program 3 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f0000001040), &(0x7f00000000c0)=0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r8, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) (async) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000800) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 946.13562ms ago: executing program 1 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(r3, r1, 0x0, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000005f004b7d8ebc00a2040000000044d1ff00fa0000005e8a0000000001000000f9c0d51f22f15fff4baedc682894e9a81b6d23f3666e980773c92a84cf655a6af9c100b073b504ff1891a38a323f51343799bda92a965c8301218d74721dce89e7eeefdfb7d36e4ccecf05e90201705ae2a87696761db3cc81ab758b4ad4d92c30135fb4c767ed45fa17b073a068a20ed5e2bdea", @ANYRES32=0x0, @ANYRES32=r0], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 757.899002ms ago: executing program 1 (id=1289): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003521108004500003800000000000190789078120002282500000000000000002f00007f000001000000002400bcc550b76b1d1cd24473f17643a84be37888561a364c4b8800"/93], 0x0) 617.319757ms ago: executing program 0 (id=1290): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000000)="8f2a0bc2000000000000000e05908705000d63e286a5cefe", 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r6=>0x0}) sendmsg$can_j1939(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r6, 0x1, {0x1, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f00000001c0)="2f056464ece60bec", 0x8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1b4, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x138, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="fbfe3866f2ac", {0x0, 0x80}, @broadcast, @void, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="6a7a8f2e1f619e48dc96fac990b5741a8e47f96cead716acb209cde701a8302ddeb81b0217dc1622b13c0149d20040592524028392fd69548e9f39c8c1fa7f2bbeb59a7793f7f143398866dba08830d80d2da1324d2caafc2665777b48f4781e4d9cf1713d093a32de2da1c81016cfeea85f5df490bff801a5eaf40d0e85dea35a1298d871f4010fb6ac0f3d9f34ea4c7521592c2fd177785e16dd1b84d6a1e49d1205a74622ef25027bae42a1085948c216ceab0a477e747f1ec6c81d3f5b1854eb965ecc4f902b63c759dbdd351a050ef96e2c7f479e1a558b6b72429b0f61d4081910fa17d6f8056df5e7ae354893a53240c46d2bb8b99b056b7634105a84e65883ecf760ab5f0bec752241017aaed49d"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x5d, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @random="a57c0398f3a0", {0x3, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x40, @random=0x7, 0x61c, @val, @val, @void, @val={0x4, 0x6, {0x8, 0x9, 0x7fff, 0xf0}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x8, 0xcd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x4, 0x6}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2}}}}]}, 0x1b4}, 0x1, 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 616.044348ms ago: executing program 3 (id=1291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'macsec0\x00', {0x4}, 0x10}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000005c0)={0x0, 0x2}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5452, 0x56f2555e9cec5953) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000000000000000000a28000000000a010100fcffff5d1affd1020100000900010073797a300000000008000240000000032c000000030a01030000e6ff000000c9b00000000908010073797a30000000000900030073797a32000000001400000011001f2cea256041a71a601844507fb253740b1d34e550521612f6a5032e62003365075fd55077013679c09088e5e006159dffa4b81c4aa8ce82e67181cd71cdef8c6bfd7d694c26564d44f3ac698ba0835465855c035f6e22de1bbe22897e188ec29154ebf31fdd260a2ac7363346314567b61a60a540051e4681146cb6935738b83953ff671875ea7d559d578fcd39e04988"], 0x7c}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54010000100033060087f433b4d73abcfda09c6b6bd800000000000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e000100"/268], 0x154}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000380)={r6, r8, 0xf1, 0xda, &(0x7f0000000640)="89d7bb7fb1f73ea289f800209d1ce317d7bb02e5f836d68694799ea15e76a6ada94e9035dbcbf5d15d24e7d88423a7db6e02a0efde3a75b1610b4392b373e73fcbbed47abe1f77db0a55abac13d37f9a571c0607d9a5a455856a182d3fd7bfe0c7ca2249daa9da57463385479d73af0b53dab82074f2be6ef0cb617d2ac737380e4cf173cabc3f08d2507f903a9d7a2ada7078e39f9bb8af0b477a15d3745b0a40a9f473d34d8d1394ca02269a9dc7bc1f89e70f7040b9476e61d52b9a33ae06eff7c1f2d3e08877e297e4ee58b438d9edacc34d5081dcaa4906", 0x93, 0xf8, 0x8, 0x80, 0x3, 0x1, 0x6, 'syz0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020073797a3200004b000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000010006aa5b991b813b224df250000000047823f5e79098337c2e10a6749c97db7b00cedb1af979e3c7a8b58dbce0f34357e0ad1c27d84a6efe2cc6b26505915dc3db591c03031e21316d26885e8ef86fcb05ac2d40222eac18a1538d1af6f", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400ff0f0000"], 0x40}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x80, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xdab}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8faa}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2000}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048045}, 0x68010) 614.719152ms ago: executing program 2 (id=1292): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x9a}}, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6(0xa, 0x200000000003, 0x87) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87}, @routing={0x3b, 0x2, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', <r10=>0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) bind$xdp(r8, &(0x7f0000000280)={0x2c, 0xf, r10, 0x17}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x8, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0xe, 0x5}, {0x5, 0x2}, {0xd, 0x2}, {0x7, 0x3}, {0x10, 0x2}, {0x6, 0x2}]}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0x7, 0x5}]}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x4, 0xd1a}, {0xd, 0x80000001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xdb7a}}]}, {0x0, [0x30, 0x0, 0x30, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000400)=""/255, 0xd8, 0xff, 0x1, 0x3, 0x0, @void, @value}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x4, 0x5, 0xd089, r7, 0x200, '\x00', r10, r7, 0x4, 0x5, 0x0, 0xf, @value=r11, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 591.627467ms ago: executing program 1 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r3, 0x80184947, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200102}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, 0x0, 0x2, 0x201, 0x0, 0x0, {0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8049}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000240)=[{{0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r6, &(0x7f0000000280)={0x1d, r5}, 0x10) close(r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) 457.616489ms ago: executing program 2 (id=1294): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f0000000080)="0314b74d72c437c0587b7a091cdff0a85f9c62a66a64ddab45925029a4c7a3243611873e45eb73771d28b08550ca2f7a4ba62a231689ec16b6f1acdec1885e21fc3bdcd48dfe255ebb8dc15cb057958abc4166b0f4beb8be5504fc123d16071681a33b42f792f9cc1323b3642fe0a84858f2f7a542747f85b8b3acd41583cfb7603d742c0ce9d35de5f101e4c2bde0246590b1c5ec1cb51dc45fdca026d55b36ad13a764499c3f50fd2ff62413e9789bad889f42bdd1ca8c", 0xb8, 0x4, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast2, 0x8, 0x3}, 0x20) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) 397.318434ms ago: executing program 0 (id=1295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x4004) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) listen(r0, 0x10001) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}]}}]}, 0x3c}}, 0x24000004) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 336.096293ms ago: executing program 1 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf250000000008000400ac1e010108000400ac1414bb0800021000000000080002000100000008000800020000000c000300030000000000000014000c00fe880000000000000000000000000100080031a38c4e000014000c0000000000000000000000000000000001"], 0x78}, 0x1, 0x0, 0x0, 0x8084}, 0x1) unshare(0x2a040000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r2, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) unshare(0x20040600) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) 273.909661ms ago: executing program 2 (id=1297): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$inet(r1, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)='p', 0x1}], 0x1}, 0x4000) (async) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x801) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r0, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) (async, rerun: 64) r6 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x190, 0x190, 0x2d8, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'caif0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private0, @loopback, [], [], 'macvlan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x54}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1}}}}}}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg(r6, &(0x7f00000005c0)={&(0x7f0000000480)=@caif=@dgm={0x25, 0xffffff00, 0x9}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)="0a9a60403ddc57f506a0f627a5e99111c257ce365d918945155c5858ad728bc2a5140a510b6dfb1a544517367184bc93ef2b1fe14cd869cf475118c53b3622475f21b5a747e2b12951", 0x49}], 0x1}, 0x80040) (async) close(r0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x3, 0x7, 0x6, 0x0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 213.441481ms ago: executing program 0 (id=1298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={<r2=>0x0, 0x200000}, &(0x7f0000000040)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000100000008000100000082"], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r2, 0x9, 0xff, 0xcfdd}, &(0x7f00000000c0)=0x10) 192.860727ms ago: executing program 1 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r3) pread64(r0, 0x0, 0x0, 0x910c) socket$unix(0x1, 0x2, 0x0) 152.747221ms ago: executing program 2 (id=1300): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x2000000000000079, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000140)={0x1f, @any, 0x8}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) shutdown(r5, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) (async) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) (async, rerun: 32) getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000040), 0x0) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0xfc}}, 0x0) 65.469516ms ago: executing program 0 (id=1301): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0xe8f392a871dbe50e, &(0x7f00000000c0), 0x4) (async) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0, <r3=>0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x13, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) 0s ago: executing program 2 (id=1302): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x49) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3, 0xc647}, &(0x7f00000000c0)=0x8) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="00214717a70700000000030640710a069d317ebbaaa672f6338ab00f40f8ef5e405b14f358de15c2ad710d258d702e5cf1d5", 0x32}], 0x1, 0x20000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfffffff7}, 0x1c) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000b920ff88e8c2ca7339fd23a9dd1fa98ebef7c18c74263a67c70b7e970357674521aaf0d643a432b1048995f83521ad7045ce747ccd4216a4c1d9a6b40f74cf933c36d5f56d26749f04aa873be03a0ee7055117198b5c52b9bc46c5aca1232c188065813f3459a191360459de44b59eacaaff42adb7012d15f2158a49275aa8eb8b1715", @ANYRES16=r5, @ANYBLOB="01000000000000000000300000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): DUID 00:04:87:04:3c:41:30:05:a7:f7:d5:81:12:9d:2d:df:74:1f forked to background, child pid 5496 [ 36.999772][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.012762][ T5497] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. syzkaller login: [ 55.301342][ T5815] cgroup: Unknown subsys name 'net' [ 55.423144][ T5815] cgroup: Unknown subsys name 'cpuset' [ 55.431873][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.761037][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.391803][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.401596][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.420421][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.428755][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.437338][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.445353][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.450696][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.453300][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.460434][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.481432][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.489074][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.502733][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.510626][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.521534][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.533833][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.543920][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.552488][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.552974][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.568472][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.569813][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.583533][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.584088][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.599719][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.599961][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.609955][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.622579][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.631641][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.639810][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.647504][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.671498][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.947787][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 61.014540][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 61.148727][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.157054][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.164606][ T5827] bridge_slave_0: entered allmulticast mode [ 61.173221][ T5827] bridge_slave_0: entered promiscuous mode [ 61.207169][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.214549][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.221988][ T5827] bridge_slave_1: entered allmulticast mode [ 61.228601][ T5827] bridge_slave_1: entered promiscuous mode [ 61.275370][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 61.286370][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.298925][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.311841][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 61.320852][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.328021][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.335578][ T5825] bridge_slave_0: entered allmulticast mode [ 61.342288][ T5825] bridge_slave_0: entered promiscuous mode [ 61.370050][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.377486][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.384952][ T5825] bridge_slave_1: entered allmulticast mode [ 61.392276][ T5825] bridge_slave_1: entered promiscuous mode [ 61.426116][ T5827] team0: Port device team_slave_0 added [ 61.438205][ T5827] team0: Port device team_slave_1 added [ 61.518965][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.526094][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.552913][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.569124][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.596209][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.603453][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.629698][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.647351][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.678782][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.687068][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.694433][ T5840] bridge_slave_0: entered allmulticast mode [ 61.701691][ T5840] bridge_slave_0: entered promiscuous mode [ 61.709051][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.716795][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.724226][ T5840] bridge_slave_1: entered allmulticast mode [ 61.731690][ T5840] bridge_slave_1: entered promiscuous mode [ 61.745964][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 61.797027][ T5825] team0: Port device team_slave_0 added [ 61.806754][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.814254][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.821529][ T5838] bridge_slave_0: entered allmulticast mode [ 61.828182][ T5838] bridge_slave_0: entered promiscuous mode [ 61.845838][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.857172][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.874124][ T5825] team0: Port device team_slave_1 added [ 61.889950][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.897355][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.904823][ T5838] bridge_slave_1: entered allmulticast mode [ 61.912088][ T5838] bridge_slave_1: entered promiscuous mode [ 61.957397][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.964559][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.990977][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.019684][ T5827] hsr_slave_0: entered promiscuous mode [ 62.026234][ T5827] hsr_slave_1: entered promiscuous mode [ 62.045013][ T5840] team0: Port device team_slave_0 added [ 62.054252][ T5840] team0: Port device team_slave_1 added [ 62.075086][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.082149][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.116234][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.129703][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.170688][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.191532][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.198604][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.224686][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.236996][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.244260][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.270674][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.339381][ T5825] hsr_slave_0: entered promiscuous mode [ 62.346159][ T5825] hsr_slave_1: entered promiscuous mode [ 62.352494][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.360599][ T5825] Cannot create hsr debugfs directory [ 62.366280][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.373794][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.381507][ T5836] bridge_slave_0: entered allmulticast mode [ 62.388136][ T5836] bridge_slave_0: entered promiscuous mode [ 62.398110][ T5838] team0: Port device team_slave_0 added [ 62.427115][ T5840] hsr_slave_0: entered promiscuous mode [ 62.433674][ T5840] hsr_slave_1: entered promiscuous mode [ 62.439849][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.448001][ T5840] Cannot create hsr debugfs directory [ 62.453877][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.461333][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.468517][ T5836] bridge_slave_1: entered allmulticast mode [ 62.475389][ T5836] bridge_slave_1: entered promiscuous mode [ 62.491609][ T5835] Bluetooth: hci1: command tx timeout [ 62.493245][ T5838] team0: Port device team_slave_1 added [ 62.555280][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.571323][ T5835] Bluetooth: hci0: command tx timeout [ 62.586579][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.593867][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.620004][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.641137][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.654681][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.662090][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.688770][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.730308][ T5835] Bluetooth: hci2: command tx timeout [ 62.735533][ T5843] Bluetooth: hci3: command tx timeout [ 62.735916][ T53] Bluetooth: hci4: command tx timeout [ 62.781271][ T5836] team0: Port device team_slave_0 added [ 62.808656][ T5838] hsr_slave_0: entered promiscuous mode [ 62.817527][ T5838] hsr_slave_1: entered promiscuous mode [ 62.823936][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.831764][ T5838] Cannot create hsr debugfs directory [ 62.847036][ T5836] team0: Port device team_slave_1 added [ 62.919249][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.926810][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.953376][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.966283][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.973315][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.000682][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.134293][ T5836] hsr_slave_0: entered promiscuous mode [ 63.145278][ T5836] hsr_slave_1: entered promiscuous mode [ 63.153001][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.160960][ T5836] Cannot create hsr debugfs directory [ 63.173727][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.184168][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.212558][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.247140][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.312867][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.342525][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.367952][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.379451][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.433824][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.458966][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.480059][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.493881][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.530916][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.546105][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.564281][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.600079][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.647046][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.677413][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.686863][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.712868][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.734484][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.762682][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.818957][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.836625][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.854105][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.861715][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.873352][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.880559][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.895533][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.902698][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.948244][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.955868][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.039592][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.065197][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.111584][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.132995][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.145647][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.152852][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.186802][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.202936][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.210074][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.244421][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.259973][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.267151][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.283815][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.291054][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.355205][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.362401][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.380603][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.387771][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.472260][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.503272][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.561889][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.571296][ T53] Bluetooth: hci1: command tx timeout [ 64.650895][ T53] Bluetooth: hci0: command tx timeout [ 64.762935][ T5827] veth0_vlan: entered promiscuous mode [ 64.811004][ T53] Bluetooth: hci4: command tx timeout [ 64.811608][ T5843] Bluetooth: hci3: command tx timeout [ 64.816441][ T53] Bluetooth: hci2: command tx timeout [ 64.842390][ T5827] veth1_vlan: entered promiscuous mode [ 64.859550][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.894469][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.930019][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.988535][ T5827] veth0_macvtap: entered promiscuous mode [ 64.998566][ T5827] veth1_macvtap: entered promiscuous mode [ 65.027527][ T5836] veth0_vlan: entered promiscuous mode [ 65.069461][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.079018][ T5838] veth0_vlan: entered promiscuous mode [ 65.091248][ T5836] veth1_vlan: entered promiscuous mode [ 65.119769][ T5840] veth0_vlan: entered promiscuous mode [ 65.129371][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.141311][ T5838] veth1_vlan: entered promiscuous mode [ 65.156902][ T5840] veth1_vlan: entered promiscuous mode [ 65.178610][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.189752][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.198789][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.208168][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.238552][ T5836] veth0_macvtap: entered promiscuous mode [ 65.268908][ T5836] veth1_macvtap: entered promiscuous mode [ 65.283069][ T5838] veth0_macvtap: entered promiscuous mode [ 65.291638][ T5825] veth0_vlan: entered promiscuous mode [ 65.331986][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.346569][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.357680][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.372083][ T5825] veth1_vlan: entered promiscuous mode [ 65.386539][ T5840] veth0_macvtap: entered promiscuous mode [ 65.397783][ T5838] veth1_macvtap: entered promiscuous mode [ 65.425819][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.436727][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.448650][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.474073][ T5840] veth1_macvtap: entered promiscuous mode [ 65.484289][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.493184][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.502548][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511399][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.541141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.549154][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.602422][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.623016][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.633476][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.644698][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.655860][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.669283][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.681165][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.692276][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.702872][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.713083][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.725041][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.736151][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.768356][ T5825] veth0_macvtap: entered promiscuous mode [ 65.782857][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.791896][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.795593][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.813551][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.816396][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.824810][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.842410][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.858167][ T5825] veth1_macvtap: entered promiscuous mode [ 65.865623][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.880641][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.881451][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.894149][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.909371][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.920670][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931631][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.942582][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.952771][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.963451][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.974339][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.984284][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.001789][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013259][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.024125][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.034438][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.045058][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.056113][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.065513][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.074496][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.084214][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.095349][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130075][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.131218][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.154348][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.163797][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.173199][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.205938][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.205956][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.205972][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.233265][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.243771][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.255876][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.266692][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.277346][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.287705][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.298742][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.321538][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.372390][ T5908] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 66.380541][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.435259][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.447091][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456257][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.465142][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.475568][ T5911] trusted_key: syz.0.1 sent an empty control message without MSG_MORE. [ 66.569048][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.599285][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.630504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.654468][ T53] Bluetooth: hci1: command tx timeout [ 66.661882][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.713945][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.730549][ T53] Bluetooth: hci0: command tx timeout [ 66.747972][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.807936][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.872828][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.886406][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 66.895417][ T53] Bluetooth: hci2: command tx timeout [ 66.901143][ T53] Bluetooth: hci3: command tx timeout [ 66.906577][ T53] Bluetooth: hci4: command tx timeout [ 66.965330][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.979549][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.987778][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.000225][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.313877][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.351147][ T5926] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 67.453070][ T5937] Zero length message leads to an empty skb [ 67.518216][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.529244][ T5926] team0: Port device netdevsim0 added [ 67.540882][ T5942] x_tables: duplicate underflow at hook 2 [ 67.730101][ T5948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'. [ 67.766040][ T5950] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 67.876375][ T5957] tipc: Started in network mode [ 67.890553][ T5957] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 67.920981][ T5957] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 68.738118][ T5835] Bluetooth: hci1: command tx timeout [ 68.754562][ T5989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28'. [ 68.774022][ T5994] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 68.788009][ T5994] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 68.793284][ T5989] netlink: zone id is out of range [ 68.796945][ T5994] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 68.810761][ T5835] Bluetooth: hci0: command tx timeout [ 68.824286][ T5994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.30'. [ 68.833914][ T5989] netlink: zone id is out of range [ 68.839074][ T5989] netlink: zone id is out of range [ 68.847490][ T5989] netlink: zone id is out of range [ 68.852947][ T5989] netlink: zone id is out of range [ 68.855339][ T5996] netlink: 'syz.4.31': attribute type 11 has an invalid length. [ 68.866356][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 68.908503][ T5989] netlink: zone id is out of range [ 68.924646][ T5989] netlink: zone id is out of range [ 68.942787][ T5989] netlink: zone id is out of range [ 68.963230][ T5989] netlink: zone id is out of range [ 68.970854][ T5835] Bluetooth: hci4: command tx timeout [ 68.971016][ T53] Bluetooth: hci3: command tx timeout [ 68.976272][ T5835] Bluetooth: hci2: command tx timeout [ 69.000911][ T5989] netlink: zone id is out of range [ 69.033548][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 69.184469][ T6009] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 69.321753][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 69.351802][ T6017] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 69.371000][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 69.502210][ T6026] netlink: 'syz.0.40': attribute type 21 has an invalid length. [ 69.554886][ T6026] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.569296][ T6031] xt_cgroup: xt_cgroup: no path or classid specified [ 69.590637][ T6026] netlink: 'syz.0.40': attribute type 15 has an invalid length. [ 69.602448][ T6033] warning: `syz.4.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.437946][ T6069] netlink: 'syz.2.54': attribute type 33 has an invalid length. [ 70.712716][ T6079] netlink: 'syz.3.57': attribute type 2 has an invalid length. [ 71.421933][ T6103] net veth1_virt_wifi : renamed from virt_wifi0 [ 71.439520][ T6105] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 71.504047][ T6107] __nla_validate_parse: 6 callbacks suppressed [ 71.504065][ T6107] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 71.695145][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.713638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.823499][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 71.926009][ T6129] SET target dimension over the limit! [ 72.179575][ T6138] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 72.232205][ T6141] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.492798][ T6153] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.623438][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.75'. [ 72.677511][ T6157] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 72.902305][ T6168] Bluetooth: MGMT ver 1.23 [ 72.922317][ T6168] netlink: 'syz.0.81': attribute type 32 has an invalid length. [ 72.939620][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 72.960956][ T6168] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 73.076152][ T6180] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 73.680373][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 73.841249][ T6217] x_tables: unsorted entry at hook 2 [ 73.866840][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 74.130621][ T6230] Cannot find add_set index 0 as target [ 74.336925][ T6238] x_tables: duplicate underflow at hook 1 [ 74.779734][ T6246] netlink: 'syz.4.106': attribute type 7 has an invalid length. [ 75.146776][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 75.366958][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.379010][ T6272] batadv_slave_1: entered promiscuous mode [ 75.456433][ T6271] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 75.465996][ T6281] netlink: 'syz.1.116': attribute type 29 has an invalid length. [ 75.474793][ T6271] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 75.509552][ T6281] netlink: 'syz.1.116': attribute type 29 has an invalid length. [ 75.546603][ T6281] netlink: 500 bytes leftover after parsing attributes in process `syz.1.116'. [ 75.558987][ T6281] unsupported nla_type 40 [ 75.736171][ T6288] syzkaller0: entered promiscuous mode [ 75.747626][ T6288] syzkaller0: entered allmulticast mode [ 75.782091][ T6288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.119'. [ 75.791256][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 75.894260][ T6294] netlink: 'syz.4.122': attribute type 2 has an invalid length. [ 76.286859][ T6302] x_tables: duplicate underflow at hook 2 [ 76.548173][ T6313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 76.585781][ T6316] netlink: 'syz.4.130': attribute type 11 has an invalid length. [ 78.188688][ T6315] netlink: 168 bytes leftover after parsing attributes in process `syz.3.131'. [ 78.352928][ T6339] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.379607][ T6339] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 78.428722][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 78.457083][ T6348] nbd: must specify a size in bytes for the device [ 78.796499][ T6367] netlink: 'syz.0.147': attribute type 11 has an invalid length. [ 78.881450][ T6358] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.892627][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 78.901849][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 78.939632][ T6370] netlink: 216 bytes leftover after parsing attributes in process `syz.0.148'. [ 78.949648][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 78.962116][ T6372] net_ratelimit: 64 callbacks suppressed [ 78.962136][ T6372] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.007253][ T6374] netlink: zone id is out of range [ 79.015879][ T6374] netlink: zone id is out of range [ 79.023334][ T6372] tls_set_device_offload: netdev not found [ 79.052023][ T6370] netlink: 216 bytes leftover after parsing attributes in process `syz.0.148'. [ 79.097769][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 79.099046][ T6379] xt_hashlimit: invalid interval [ 79.246792][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 79.253227][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 79.441999][ T6393] bond2: entered promiscuous mode [ 79.448251][ T6393] bond2: entered allmulticast mode [ 79.454072][ T6393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.550365][ T6396] syzkaller0: entered allmulticast mode [ 79.569064][ T6396] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 79.587735][ T6396] syzkaller0: Linktype set failed because interface is up [ 79.594557][ T5876] syzkaller0: tun_net_xmit 76 [ 81.301501][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 81.886957][ T6431] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 81.938457][ T1203] cfg80211: failed to load regulatory.db [ 82.167087][ T6431] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.175844][ T6441] sctp: [Deprecated]: syz.3.171 (pid 6441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.175844][ T6441] Use struct sctp_sack_info instead [ 82.641288][ T6473] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004 [ 82.737327][ T6477] xt_bpf: check failed: parse error [ 83.201398][ T6512] __nla_validate_parse: 8 callbacks suppressed [ 83.201419][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 83.225779][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 83.410483][ T6509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.422948][ T6509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.438923][ T6509] bond0 (unregistering): Released all slaves [ 84.084557][ T6537] veth0_macvtap: left promiscuous mode [ 84.128498][ T6549] veth0_to_hsr: invalid flags given to default FDB implementation [ 84.630871][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 84.908222][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 85.125339][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 85.163357][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 85.193442][ T6603] netlink: 'syz.3.205': attribute type 12 has an invalid length. [ 85.196549][ T6610] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 85.209121][ T6611] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 85.218315][ T6603] netlink: 'syz.3.205': attribute type 11 has an invalid length. [ 85.324973][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.358440][ T6610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.411456][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 85.801259][ T6649] netlink: 'syz.2.218': attribute type 7 has an invalid length. [ 85.844815][ T6649] netlink: 'syz.2.218': attribute type 8 has an invalid length. [ 86.053997][ T6664] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 86.204041][ T6676] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 86.227342][ T6676] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 86.317812][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 86.339269][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.226'. [ 86.459638][ T6688] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 86.746356][ T6703] netlink: 'syz.0.234': attribute type 29 has an invalid length. [ 86.757911][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 86.784045][ T6703] netlink: 'syz.0.234': attribute type 29 has an invalid length. [ 86.991234][ T6714] validate_nla: 1 callbacks suppressed [ 86.991256][ T6714] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 87.104562][ T5831] IPVS: starting estimator thread 0... [ 87.107253][ T6714] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 87.210790][ T6725] IPVS: using max 28 ests per chain, 67200 per kthread [ 87.296623][ T6738] netlink: 'syz.4.245': attribute type 5 has an invalid length. [ 87.418801][ T6735] syzkaller0: entered promiscuous mode [ 87.429407][ T6735] syzkaller0: entered allmulticast mode [ 87.461224][ T6746] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 87.574339][ T6759] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 87.614608][ T6759] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 88.011624][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 89.576028][ T6790] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.775651][ T6810] __nla_validate_parse: 10 callbacks suppressed [ 89.775671][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 89.918136][ T6821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.270'. [ 89.961785][ T6812] netlink: 'syz.2.267': attribute type 4 has an invalid length. [ 90.003061][ T6828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.271'. [ 90.070583][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 90.301778][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.278'. [ 90.409510][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 90.702572][ T6872] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 90.732896][ T6872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.747698][ T6871] bond1: (slave ip6gretap1): making interface the new active one [ 90.756611][ T6871] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.874121][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 90.905450][ T6882] netlink: 80 bytes leftover after parsing attributes in process `syz.3.289'. [ 90.915205][ T6882] netlink: 80 bytes leftover after parsing attributes in process `syz.3.289'. [ 91.095372][ T6895] netlink: 'syz.4.293': attribute type 3 has an invalid length. [ 91.369963][ T6911] netem: unknown loss type 0 [ 91.376741][ T6911] netem: change failed [ 91.495531][ T6923] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 91.586110][ T6923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.743194][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 92.040854][ T6962] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 92.123047][ T6974] netlink: 'syz.3.316': attribute type 2 has an invalid length. [ 92.839469][ T7039] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 92.878713][ T7037] sit0: entered promiscuous mode [ 92.904512][ T7037] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 92.922712][ T7043] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 93.059444][ T7048] vlan2: entered promiscuous mode [ 93.094104][ T7052] sock: sock_set_timeout: `syz.3.335' (pid 7052) tries to set negative timeout [ 93.687494][ T7086] xt_TCPMSS: Only works on TCP SYN packets [ 94.050054][ T7108] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 94.085198][ T7108] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 94.295396][ T7126] IPv6: sit1: Disabled Multicast RS [ 94.341883][ T7126] netlink: 'syz.4.360': attribute type 11 has an invalid length. [ 94.349988][ T7130] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 94.767582][ T7153] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 94.822922][ T7157] openvswitch: netlink: Message has 1275 unknown bytes. [ 94.829936][ T7157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.860954][ T7153] team0: Port device netdevsim0 removed [ 94.975980][ T7171] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 95.340341][ T7191] __nla_validate_parse: 7 callbacks suppressed [ 95.340362][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 95.420487][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 95.452059][ T7200] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.384'. [ 95.487050][ T7200] netlink: zone id is out of range [ 95.509905][ T7200] netlink: zone id is out of range [ 95.529355][ T7200] netlink: get zone limit has 8 unknown bytes [ 95.610508][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.611244][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.858663][ T7218] veth0_vlan: left promiscuous mode [ 96.136494][ T7218] veth0_vlan: entered promiscuous mode [ 96.226918][ T7251] x_tables: duplicate underflow at hook 2 [ 96.378125][ T7261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.387844][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.397323][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.861283][ T7295] x_tables: duplicate underflow at hook 2 [ 96.891984][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.403'. [ 97.076269][ T7311] netlink: 'syz.0.410': attribute type 13 has an invalid length. [ 97.227546][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 97.320551][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 97.344611][ T7329] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 97.372087][ T7329] tipc: Trying to set illegal importance in message [ 97.601210][ T7343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 97.649545][ T7335] xt_CT: No such helper "snmp" [ 97.750399][ T7347] x_tables: duplicate underflow at hook 2 [ 97.878609][ T7356] netlink: get zone limit has 8 unknown bytes [ 98.086128][ T7370] xt_hashlimit: overflow, rate too high: 0 [ 98.131321][ T7378] ipt_REJECT: ECHOREPLY no longer supported. [ 98.315305][ T7389] atomic_op ffff88807fbce998 conn xmit_atomic 0000000000000000 [ 98.421789][ T7388] syz.4.438 (7388) used greatest stack depth: 17456 bytes left [ 98.506235][ T7402] netlink: 'syz.0.442': attribute type 12 has an invalid length. [ 98.517397][ T7402] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 98.604007][ T7406] dvmrp0: entered allmulticast mode [ 98.619151][ T7407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 98.638474][ T7412] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 99.160539][ T7442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.211809][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 99.268927][ T7448] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 99.315751][ T7448] team0: Cannot enslave team device to itself [ 99.660842][ T7462] netlink: 'syz.2.466': attribute type 10 has an invalid length. [ 99.684775][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.693712][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.729728][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.736967][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.745225][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.752465][ T7462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.762835][ T7462] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.956095][ T7472] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 100.028961][ T7479] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 100.071084][ T7479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.399671][ T7497] __nla_validate_parse: 12 callbacks suppressed [ 100.399692][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 100.657123][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 100.739295][ T7509] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 100.832360][ T7509] bond2: entered allmulticast mode [ 100.858960][ T7509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.878959][ T7509] bond1: (slave bond2): Enslaving as an active interface with an up link [ 101.162478][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 101.190418][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 101.343682][ T5876] IPVS: starting estimator thread 0... [ 101.449639][ T7535] netlink: 'syz.1.486': attribute type 8 has an invalid length. [ 101.459047][ T7533] IPVS: using max 22 ests per chain, 52800 per kthread [ 101.747197][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 101.787334][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 101.801582][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 101.818624][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 102.035444][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 102.062691][ T7574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.107449][ T7570] team1: entered promiscuous mode [ 102.127059][ T7570] 8021q: adding VLAN 0 to HW filter on device team1 [ 102.682680][ T7593] gtp0: entered promiscuous mode [ 102.707755][ T7593] gtp0: entered allmulticast mode [ 102.958832][ T7598] sit0: entered promiscuous mode [ 102.965151][ T7598] vlan2: entered promiscuous mode [ 102.975921][ T7598] sit0: left promiscuous mode [ 103.414453][ T7615] sctp: [Deprecated]: syz.2.511 (pid 7615) Use of int in maxseg socket option. [ 103.414453][ T7615] Use struct sctp_assoc_value instead [ 104.053666][ T7642] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 104.107061][ T7642] netlink: 228 bytes leftover after parsing attributes in process `syz.4.517'. [ 104.136597][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 104.364010][ T7659] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 104.430346][ T7661] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 104.439816][ T7661] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 104.615906][ T7650] netlink: 'syz.2.519': attribute type 6 has an invalid length. [ 104.658373][ T7666] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 104.668176][ T7666] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 104.914990][ T7673] openvswitch: netlink: IP tunnel dst address not specified [ 105.966053][ T7699] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 106.013975][ T7705] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 106.182407][ T7716] __nla_validate_parse: 1 callbacks suppressed [ 106.182425][ T7716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.538'. [ 106.664616][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 106.681868][ T7751] netlink: 216 bytes leftover after parsing attributes in process `syz.2.545'. [ 106.718025][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 106.745134][ T7755] netlink: 80 bytes leftover after parsing attributes in process `syz.3.548'. [ 106.759423][ T7755] nbd: illegal input index 61504 [ 106.774100][ T7755] netlink: 76 bytes leftover after parsing attributes in process `syz.3.548'. [ 107.103406][ T7780] netlink: 'syz.0.556': attribute type 3 has an invalid length. [ 107.130551][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 107.133375][ T7786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.269842][ T7796] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 107.354594][ T7800] nftables ruleset with unbound set [ 107.394287][ T7805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.564'. [ 107.416390][ T7805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.564'. [ 107.436025][ T7805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.564'. [ 107.504274][ T7813] tunl0: entered promiscuous mode [ 107.544406][ T7813] netlink: 'syz.3.566': attribute type 3 has an invalid length. [ 107.629459][ T7821] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 107.795171][ T7833] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 107.817435][ T7833] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 108.196921][ T7847] netlink: 'syz.3.578': attribute type 4 has an invalid length. [ 108.357967][ T7851] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.436021][ T7858] batadv_slave_1: entered promiscuous mode [ 108.550402][ T7865] bond1: entered allmulticast mode [ 108.557281][ T7865] bond1 (unregistering): Released all slaves [ 108.698063][ T7874] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 108.841341][ T7880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.183440][ T7852] batadv_slave_1: left promiscuous mode [ 109.254875][ T7901] validate_nla: 2 callbacks suppressed [ 109.254895][ T7901] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 109.269012][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.292072][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.404781][ T7907] bond1: entered allmulticast mode [ 109.426705][ T7907] bond1 (unregistering): Released all slaves [ 109.766194][ T7941] Driver unsupported XDP return value 0 on prog (id 125) dev N/A, expect packet loss! [ 110.153959][ T7968] netlink: 'syz.2.614': attribute type 12 has an invalid length. [ 110.631689][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 110.655119][ T7984] netlink: 'syz.1.618': attribute type 32 has an invalid length. [ 110.663328][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 110.679862][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 110.686429][ T7984] (unnamed net_device) (uninitialized): option coupled_control: invalid value (4) [ 110.877251][ T57] vxcan1 speed is unknown, defaulting to 1000 [ 110.914615][ T7993] infiniband syz2: set active [ 110.933296][ T7993] infiniband syz2: added vxcan1 [ 111.009260][ T8003] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 111.037080][ T7993] RDS/IB: syz2: added [ 111.041945][ T7993] smc: adding ib device syz2 with port count 1 [ 111.048535][ T7993] smc: ib device syz2 port 1 has pnetid [ 111.057496][ T5876] vxcan1 speed is unknown, defaulting to 1000 [ 111.067408][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 111.243522][ T5828] IPVS: starting estimator thread 0... [ 111.252713][ T8005] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.266551][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 111.350261][ T8009] IPVS: using max 25 ests per chain, 60000 per kthread [ 111.543671][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 111.594055][ T8023] __nla_validate_parse: 15 callbacks suppressed [ 111.594077][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 111.760715][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 111.872470][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 112.044505][ T8041] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.639'. [ 112.054332][ T8041] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.639'. [ 112.197941][ T8050] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.218044][ T8050] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.245455][ T8050] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.411603][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'. [ 112.534950][ T8070] vlan1: entered promiscuous mode [ 112.541801][ T8070] vlan1: left promiscuous mode [ 112.848312][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 112.876719][ T8085] netlink: 9 bytes leftover after parsing attributes in process `syz.1.653'. [ 112.901871][ T8085] 0�: renamed from hsr_slave_1 (while UP) [ 112.952489][ T8085] 0�: entered allmulticast mode [ 112.958116][ T8085] A link change request failed with some changes committed already. Interface c0� may have been left with an inconsistent configuration, please check. [ 112.974992][ T8092] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 113.021972][ T8085] sctp: [Deprecated]: syz.1.653 (pid 8085) Use of int in max_burst socket option deprecated. [ 113.021972][ T8085] Use struct sctp_assoc_value instead [ 113.189982][ T8108] vxcan1: tx address claim with dest, not broadcast [ 113.305951][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.665'. [ 113.401500][ T8120] veth1_to_hsr: entered promiscuous mode [ 113.455739][ T8126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.669'. [ 113.483346][ T8126] netlink: 256 bytes leftover after parsing attributes in process `syz.4.669'. [ 113.492132][ T8116] bond4: entered allmulticast mode [ 113.494059][ T8126] unsupported nlmsg_type 40 [ 113.535661][ T8116] bond4 (unregistering): Released all slaves [ 113.578968][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 113.579054][ T8119] veth1_to_hsr: left promiscuous mode [ 113.589933][ T8133] netlink: 'syz.0.672': attribute type 2 has an invalid length. [ 113.695977][ T8126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.922660][ T8126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.097605][ T8126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.255216][ T8126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.456574][ T8126] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.512185][ T8126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.553834][ T8126] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.688251][ T8126] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.784577][ T8183] bond3: entered allmulticast mode [ 114.815510][ T8183] bond3 (unregistering): Released all slaves [ 115.231744][ T8221] netlink: 'syz.3.697': attribute type 21 has an invalid length. [ 115.412513][ T8229] netlink: 'syz.2.699': attribute type 11 has an invalid length. [ 116.117311][ T8283] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 116.513548][ T8306] C: renamed from lo (while UP) [ 116.532747][ T8306] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 116.696514][ T8313] bond1: entered allmulticast mode [ 116.702406][ T8318] __nla_validate_parse: 16 callbacks suppressed [ 116.702423][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 116.744816][ T8313] bond1 (unregistering): Released all slaves [ 116.764354][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 116.914913][ T8340] netlink: 'syz.3.730': attribute type 2 has an invalid length. [ 116.952032][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 117.089526][ T8345] syz.1.733[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.089632][ T8345] syz.1.733[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.129590][ T8345] syz.1.733[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.396922][ T8367] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 117.458958][ T8367] team0: Device ipvlan2 is already an upper device of the team interface [ 117.485219][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 117.535242][ T8376] netlink: 'syz.3.738': attribute type 7 has an invalid length. [ 117.544881][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 117.844724][ T8390] macvlan0: entered promiscuous mode [ 117.874368][ T8390] macvlan0: left promiscuous mode [ 117.915843][ T8389] sch_fq: defrate 0 ignored. [ 117.923186][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 117.934571][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 117.968016][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 117.996276][ T8402] bond3: entered allmulticast mode [ 118.037832][ T8402] bond3 (unregistering): Released all slaves [ 118.172925][ T8411] netlink: 'syz.1.745': attribute type 8 has an invalid length. [ 118.222441][ T8411] Dead loop on virtual device ipvlan1, fix it urgently! [ 118.372267][ T8411] syz.1.745 (8411) used greatest stack depth: 6296 bytes left [ 118.485506][ T8421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.747'. [ 118.589792][ T8440] netlink: 2 bytes leftover after parsing attributes in process `syz.1.754'. [ 118.610376][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.620393][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.626166][ T8440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.689172][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.908291][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 118.915105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.923148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.931062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.938983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.946851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.954817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.962788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.970793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.978653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.986646][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.994548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.002522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.010628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.018577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.026478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.034490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.042401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.050386][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.058237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.066298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.074391][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.082387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.090445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.098368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.106265][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.114228][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.122111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.129998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.137873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.145834][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.153727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.161706][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.169551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.177598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.185487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.193454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.201423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.209348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.217241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.225220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.233118][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.241081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.248927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.257155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.265132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.273125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.281025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.288928][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.296811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.304775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.312686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.320656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.328504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.336459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.344321][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.352380][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.360338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.368308][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.376219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.384230][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.392125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.400078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.407986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.415958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.423843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.431891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.439748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.447740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.455643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.463620][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.471511][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.479428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.487492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.495636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.503531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.511495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.519429][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.527417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.535311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.543295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.551226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.559239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.567129][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.575066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.582961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.590886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.598718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.606675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.614563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.622536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.630417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.638298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.646239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.654209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.662135][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.716029][ T8466] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 119.772185][ T8466] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 120.163307][ T29] audit: type=1107 audit(1734388511.280:2): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='���$J�N�����(�� (:�TX���wMKt�i��)Dn?"6�@u�_l@�E���NM�wn��A���~�hheGvmK�#a�`�H�i�YZ������@g�����,�P�*��Sx���fF��`�ȟ���hEv1GT�0ۇ�΅"��Q�3����>;vsp���' [ 120.198211][ T8484] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 120.208304][ T8484] NCSI netlink: No device for ifindex 14700037 [ 120.214742][ T8487] ip6tnl2: entered promiscuous mode [ 120.671028][ T8516] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 121.176973][ T8543] netlink: 'syz.1.787': attribute type 11 has an invalid length. [ 121.196967][ T8543] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 121.229019][ T8547] nftables ruleset with unbound chain [ 121.655679][ T8577] xt_CONNSECMARK: invalid mode: 0 [ 121.712192][ T8585] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 121.734048][ T8585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.744381][ T8585] __nla_validate_parse: 12 callbacks suppressed [ 121.744399][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 121.760607][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 121.892812][ T8593] netlink: 'syz.1.804': attribute type 2 has an invalid length. [ 122.125870][ T8608] vxcan1 speed is unknown, defaulting to 1000 [ 122.161903][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 122.207799][ T8617] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 122.214265][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 122.359896][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 122.373190][ T8625] syz.4.813[8625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.373286][ T8625] syz.4.813[8625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.407603][ T8625] syz.4.813[8625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.470719][ T8629] lo: entered allmulticast mode [ 122.516463][ T8625] lo: left allmulticast mode [ 122.578634][ T8625] netlink: 'syz.4.813': attribute type 2 has an invalid length. [ 122.622434][ T8638] xt_bpf: check failed: parse error [ 122.805557][ T8646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.905548][ T8646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.955898][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 123.005244][ T8638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.083248][ T8661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.118395][ T8657] vlan2: entered promiscuous mode [ 123.135427][ T8657] vlan2: entered allmulticast mode [ 123.150929][ T8657] bond1: entered allmulticast mode [ 123.156249][ T8657] bond1: entered promiscuous mode [ 123.164540][ T8657] bond1: left allmulticast mode [ 123.169608][ T8657] bond1: left promiscuous mode [ 123.197673][ T8638] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 123.206901][ T8646] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 123.223691][ T8653] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 123.580952][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 123.636849][ T8695] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 123.715528][ T8697] bond2: entered allmulticast mode [ 123.732139][ T8697] bond2 (unregistering): Released all slaves [ 123.959969][ T8711] delete_channel: no stack [ 124.123860][ T8695] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 124.155749][ T8718] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 124.498070][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 124.658994][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 124.693461][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 124.756636][ T8755] tipc: Started in network mode [ 124.762030][ T8755] tipc: Node identity ffff, cluster identity 4711 [ 124.768557][ T8755] tipc: Node number set to 65535 [ 125.384531][ T8792] bond1: entered allmulticast mode [ 125.399522][ T8792] bond1 (unregistering): Released all slaves [ 125.619206][ T8803] TCP: TCP_TX_DELAY enabled [ 125.698048][ T8812] ip6t_rpfilter: unknown options [ 125.793361][ T8807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.884045][ T8819] tap0: tun_chr_ioctl cmd 1074025676 [ 125.899698][ T8819] tap0: owner set to 0 [ 125.923002][ T8819] xt_hashlimit: max too large, truncated to 1048576 [ 126.003425][ T8807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.024469][ T8837] veth1: entered promiscuous mode [ 126.035066][ T8837] veth1: left promiscuous mode [ 126.087559][ T8807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.192876][ T8807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.324079][ T8807] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.342906][ T8807] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.368532][ T8807] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.399060][ T8807] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.984254][ T8891] validate_nla: 65 callbacks suppressed [ 126.984276][ T8891] netlink: 'syz.4.890': attribute type 7 has an invalid length. [ 127.307857][ T8913] __nla_validate_parse: 10 callbacks suppressed [ 127.307879][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'. [ 127.319847][ T8915] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 127.360060][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 127.428824][ T8917] batadv0: entered promiscuous mode [ 127.453597][ T8917] netlink: 100 bytes leftover after parsing attributes in process `syz.4.900'. [ 127.601100][ T8933] netlink: 164 bytes leftover after parsing attributes in process `syz.1.904'. [ 127.629501][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.805759][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 127.821490][ T8946] netlink: 'syz.0.905': attribute type 9 has an invalid length. [ 127.859750][ T8946] netlink: 244 bytes leftover after parsing attributes in process `syz.0.905'. [ 128.058849][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.910'. [ 128.079351][ T8960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.910'. [ 128.110687][ T8960] netlink: 'syz.2.910': attribute type 5 has an invalid length. [ 128.130641][ T8960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.910'. [ 128.179315][ T8971] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.912'. [ 128.191430][ T8968] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.230627][ T8971] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.724524][ T8995] bond3: entered allmulticast mode [ 128.795381][ T8995] bond3 (unregistering): Released all slaves [ 128.844772][ T8999] lo speed is unknown, defaulting to 1000 [ 128.876396][ T8999] lo speed is unknown, defaulting to 1000 [ 128.914362][ T8999] lo speed is unknown, defaulting to 1000 [ 129.017845][ T9013] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 129.098811][ T9013] bond1: entered allmulticast mode [ 129.117513][ T9018] netlink: 'syz.3.928': attribute type 7 has an invalid length. [ 129.152808][ T8999] infiniband syz0: set active [ 129.158822][ T8999] infiniband syz0: added lo [ 129.171999][ T9013] bond1 (unregistering): Released all slaves [ 129.215351][ T9016] batadv0: entered promiscuous mode [ 129.239483][ T8999] RDS/IB: syz0: added [ 129.239948][ T5828] lo speed is unknown, defaulting to 1000 [ 129.248773][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.277358][ T8999] smc: adding ib device syz0 with port count 1 [ 129.306835][ T8999] smc: ib device syz0 port 1 has pnetid [ 129.370505][ T973] lo speed is unknown, defaulting to 1000 [ 129.377659][ T8999] lo speed is unknown, defaulting to 1000 [ 129.701688][ T8999] lo speed is unknown, defaulting to 1000 [ 129.936251][ T8999] lo speed is unknown, defaulting to 1000 [ 130.145508][ T8999] lo speed is unknown, defaulting to 1000 [ 130.216111][ T9084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.352492][ T9093] v: renamed from veth1_virt_wifi (while UP) [ 130.372481][ T9093] netlink: 'syz.2.949': attribute type 3 has an invalid length. [ 130.474128][ T8999] lo speed is unknown, defaulting to 1000 [ 130.594139][ T9104] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 130.648357][ T9104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.712617][ T9108] bond3: (slave gretap1): making interface the new active one [ 130.762040][ T9108] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 130.799657][ T9110] xt_socket: unknown flags 0x4 [ 130.823785][ T9110] netlink: 'syz.1.953': attribute type 9 has an invalid length. [ 130.919558][ T9117] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 130.945169][ T9120] netlink: 'syz.4.957': attribute type 4 has an invalid length. [ 131.201304][ T9141] infiniband syz0: set active [ 131.247456][ T57] lo speed is unknown, defaulting to 1000 [ 131.358145][ T9161] IPVS: set_ctl: invalid protocol: 92 172.20.20.62:20000 [ 131.397510][ T9167] tipc: Started in network mode [ 131.416626][ T9167] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.438404][ T9167] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.466414][ T9167] tipc: Enabled bearer <udp:s>, priority 10 [ 131.571984][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.710231][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.850752][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.990215][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.153797][ T9209] x_tables: duplicate underflow at hook 1 [ 132.265060][ T9214] syz.1.983[9214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.265705][ T9214] syz.1.983[9214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.372882][ T9217] __nla_validate_parse: 21 callbacks suppressed [ 132.372905][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 132.549847][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 132.551484][ T8] tipc: Node number set to 2886997162 [ 132.578964][ T9223] validate_nla: 4 callbacks suppressed [ 132.578982][ T9223] netlink: 'syz.2.988': attribute type 2 has an invalid length. [ 132.908742][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.926010][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.957405][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.973579][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.983478][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.993277][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.040610][ T9244] vxcan1 speed is unknown, defaulting to 1000 [ 133.111699][ T9259] netlink: ct family unspecified [ 133.132342][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.138983][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.142496][ T9259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.183338][ T9244] lo speed is unknown, defaulting to 1000 [ 133.474944][ T9275] syzkaller0: entered promiscuous mode [ 133.480598][ T9275] syzkaller0: entered allmulticast mode [ 133.495138][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 133.847401][ T9291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.411405][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 134.627688][ T9299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1006'. [ 135.057103][ T5835] Bluetooth: hci4: command tx timeout [ 135.647785][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.655180][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.662929][ T9244] bridge_slave_0: entered allmulticast mode [ 135.670391][ T9244] bridge_slave_0: entered promiscuous mode [ 135.679277][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.688049][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.706519][ T9244] bridge_slave_1: entered allmulticast mode [ 135.718663][ T9244] bridge_slave_1: entered promiscuous mode [ 135.898548][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.927369][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.056988][ T9326] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1013'. [ 136.073693][ T9244] team0: Port device team_slave_0 added [ 136.092710][ T9244] team0: Port device team_slave_1 added [ 136.147422][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.147427][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 136.196966][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.223924][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.237088][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.244206][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.270960][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.365480][ T9244] hsr_slave_0: entered promiscuous mode [ 136.378907][ T9244] hsr_slave_1: entered promiscuous mode [ 136.385727][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.400836][ T9244] Cannot create hsr debugfs directory [ 136.417804][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 136.637945][ T9244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.802243][ T9244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.995896][ T9357] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 137.038725][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1024'. [ 137.080670][ T9244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.130351][ T5835] Bluetooth: hci4: command tx timeout [ 137.153502][ T9244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.188794][ T9369] x_tables: duplicate underflow at hook 1 [ 137.211012][ T9378] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'. [ 137.221684][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'. [ 137.353296][ T9384] x_tables: ip_tables: udp match: only valid for protocol 17 [ 137.466132][ T9244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.482977][ T9244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.513131][ T9244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.542957][ T9244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.752233][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.792728][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.805767][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 137.814723][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.814838][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.830544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.837661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.854367][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 137.890226][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1035'. [ 138.363204][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.594630][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 138.627043][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 138.658351][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 138.680864][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1044'. [ 138.717678][ T9453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1045'. [ 138.898339][ T9244] veth0_vlan: entered promiscuous mode [ 138.980475][ T9244] veth1_vlan: entered promiscuous mode [ 139.105583][ T9468] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 139.150036][ T9244] veth0_macvtap: entered promiscuous mode [ 139.198222][ T9244] veth1_macvtap: entered promiscuous mode [ 139.210785][ T5835] Bluetooth: hci4: command tx timeout [ 139.248791][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 139.277318][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.314453][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.329651][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.345181][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.360254][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.371447][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.381682][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.392560][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.404986][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.418682][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.430047][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.439992][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.460835][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.471675][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.483296][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.500188][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.519843][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.531677][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.561823][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 139.603514][ T9244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.635516][ T9244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.661084][ T9244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.699639][ T9244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.901505][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.909460][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.977243][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.990276][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.187792][ T9521] bridge_slave_1: left allmulticast mode [ 140.201360][ T9521] bridge_slave_1: left promiscuous mode [ 140.207586][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.229501][ T9521] bridge_slave_0: left allmulticast mode [ 140.237332][ T9521] bridge_slave_0: left promiscuous mode [ 140.244541][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.304010][ T9521] bond0: (slave bridge0): Releasing backup interface [ 140.352897][ T9522] netlink: 'syz.3.1062': attribute type 29 has an invalid length. [ 140.382655][ T9519] netlink: 'syz.3.1062': attribute type 29 has an invalid length. [ 141.094978][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.373004][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.385800][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.398089][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.406729][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.410540][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.431120][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.440822][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.480429][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.507723][ T9537] vxcan1 speed is unknown, defaulting to 1000 [ 141.585809][ T9537] lo speed is unknown, defaulting to 1000 [ 141.684581][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.800399][ T51] bridge_slave_1: left allmulticast mode [ 141.808012][ T51] bridge_slave_1: left promiscuous mode [ 141.815639][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.828463][ T51] bridge_slave_0: left allmulticast mode [ 141.834810][ T51] bridge_slave_0: left promiscuous mode [ 141.841304][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.094992][ T9543] netlink: 'syz.1.1069': attribute type 3 has an invalid length. [ 142.484538][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.505960][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.519041][ T51] bond0 (unregistering): Released all slaves [ 142.535046][ T9543] netlink: 'syz.1.1069': attribute type 11 has an invalid length. [ 142.686867][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 142.812112][ T9591] __nla_validate_parse: 6 callbacks suppressed [ 142.812130][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 142.865533][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 143.039295][ T9591] netlink: 'syz.3.1079': attribute type 15 has an invalid length. [ 143.050302][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1081'. [ 143.499163][ T5876] IPVS: starting estimator thread 0... [ 143.530515][ T5835] Bluetooth: hci4: command tx timeout [ 143.590749][ T9610] IPVS: using max 24 ests per chain, 57600 per kthread [ 145.154512][ T51] hsr_slave_0: left promiscuous mode [ 145.169578][ T51] hsr_slave_1: left promiscuous mode [ 145.186568][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.197552][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.206492][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.214353][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.235346][ T51] veth1_macvtap: left promiscuous mode [ 145.241420][ T51] veth0_macvtap: left promiscuous mode [ 145.247086][ T51] veth1_vlan: left promiscuous mode [ 145.253767][ T51] veth0_vlan: left promiscuous mode [ 145.610374][ T5835] Bluetooth: hci4: command tx timeout [ 145.698078][ T51] team0 (unregistering): Port device team_slave_1 removed [ 145.747167][ T51] team0 (unregistering): Port device team_slave_0 removed [ 146.218617][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.249300][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.280676][ T9537] bridge_slave_0: entered allmulticast mode [ 146.287751][ T9537] bridge_slave_0: entered promiscuous mode [ 146.322205][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.329356][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.357050][ T9537] bridge_slave_1: entered allmulticast mode [ 146.368561][ T9537] bridge_slave_1: entered promiscuous mode [ 146.628190][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.702878][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.802740][ T9648] xt_bpf: check failed: parse error [ 146.859088][ T9537] team0: Port device team_slave_0 added [ 146.892864][ T9537] team0: Port device team_slave_1 added [ 147.004701][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.017030][ T9660] syz.0.1096[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.017133][ T9660] syz.0.1096[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.029077][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.081360][ T9660] syz.0.1096[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.086333][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.121330][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.128325][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.167595][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.192239][ T9666] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.297302][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.379389][ T9537] hsr_slave_0: entered promiscuous mode [ 147.418814][ T9537] hsr_slave_1: entered promiscuous mode [ 147.429546][ T9537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.438467][ T9537] Cannot create hsr debugfs directory [ 147.690464][ T5835] Bluetooth: hci4: command tx timeout [ 147.708978][ T9690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.709562][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1104'. [ 147.791823][ T9694] netlink: 'syz.0.1105': attribute type 2 has an invalid length. [ 147.993469][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 148.332457][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 148.403281][ T9537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.442846][ T9537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.462968][ T9537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.502943][ T9537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.722329][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.770888][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 148.778079][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.805004][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.812393][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.841133][ T9760] bridge_slave_1: left allmulticast mode [ 148.846830][ T9760] bridge_slave_1: left promiscuous mode [ 148.875005][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.918371][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 148.946173][ T9760] bridge_slave_0: left allmulticast mode [ 148.953309][ T9760] bridge_slave_0: left promiscuous mode [ 148.959244][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.035265][ T9777] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.061919][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.069078][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.244229][ T9785] tipc: Enabled bearer <udp:s>, priority 10 [ 149.300521][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1133'. [ 149.472443][ T9806] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1130'. [ 149.653032][ T9814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.704738][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.751594][ T9821] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1139'. [ 149.773861][ T5835] Bluetooth: hci4: command tx timeout [ 149.809519][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 149.951661][ T9838] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 149.959452][ T9838] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1144'. [ 150.069088][ T9848] delete_channel: no stack [ 150.080614][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 150.271337][ T9537] veth0_vlan: entered promiscuous mode [ 150.284992][ T9537] veth1_vlan: entered promiscuous mode [ 150.307353][ T9537] veth0_macvtap: entered promiscuous mode [ 150.353432][ T9537] veth1_macvtap: entered promiscuous mode [ 150.428803][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.488782][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.515225][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.527061][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.545764][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.557452][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.570533][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.581183][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.592297][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.615371][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.626778][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.650416][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.663038][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.673722][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.684439][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.697512][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.709899][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.723524][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.796509][ T9537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.805850][ T9537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.821374][ T9537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.830396][ T9537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.907104][ T9883] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 151.007669][ T9887] bond5: entered allmulticast mode [ 151.040726][ T9890] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 151.049091][ T9890] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 151.108062][ T9891] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.117427][ T9891] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.126634][ T9891] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.135764][ T9891] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.146586][ T9891] vxlan0: entered promiscuous mode [ 151.151905][ T9891] vxlan0: entered allmulticast mode [ 151.169008][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.177115][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.235931][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.244129][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.616520][ T9920] netlink: 'syz.0.1164': attribute type 33 has an invalid length. [ 151.624664][ T9922] xt_l2tp: v2 doesn't support IP mode [ 151.969342][ T9942] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 152.140062][ T9942] bond7: entered allmulticast mode [ 152.154817][ T9952] vlan1: entered promiscuous mode [ 152.160827][ T9952] bond0: entered promiscuous mode [ 152.165906][ T9952] bond_slave_0: entered promiscuous mode [ 152.172756][ T9952] bond_slave_1: entered promiscuous mode [ 152.187090][ T9952] bond0: left promiscuous mode [ 152.192398][ T9952] bond_slave_0: left promiscuous mode [ 152.197996][ T9952] bond_slave_1: left promiscuous mode [ 152.368815][ T9967] delete_channel: no stack [ 152.547339][ T9980] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 152.602722][ T9935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.027128][T10000] syzkaller1: entered promiscuous mode [ 153.033507][T10000] syzkaller1: entered allmulticast mode [ 153.077049][ T9935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.236554][ T9935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.307318][ T9935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.438572][T10009] "syz.1.1191" (10009) uses obsolete ecb(arc4) skcipher [ 153.447930][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.468846][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.480108][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.511240][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.539523][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.561638][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.467765][T10015] vxcan1 speed is unknown, defaulting to 1000 [ 155.579405][T10015] lo speed is unknown, defaulting to 1000 [ 155.622672][T10035] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 155.657183][ T9935] bridge_slave_1: left allmulticast mode [ 155.663344][ T9935] bridge_slave_1: left promiscuous mode [ 155.669061][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.676862][ T5843] Bluetooth: hci4: command tx timeout [ 155.707633][T10040] netlink: 'syz.0.1198': attribute type 13 has an invalid length. [ 155.717435][ T9935] bridge_slave_0: left allmulticast mode [ 155.739250][ T9935] bridge_slave_0: left promiscuous mode [ 155.745460][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.838430][T10047] netlink: 'syz.3.1200': attribute type 3 has an invalid length. [ 156.256452][ T9935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.267355][ T9935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.277930][ T9935] bond0 (unregistering): Released all slaves [ 156.298177][T10035] batman_adv: batadv0: Adding interface: team0 [ 156.304668][T10035] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.330412][T10035] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 156.376352][T10053] __nla_validate_parse: 75 callbacks suppressed [ 156.376374][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1200'. [ 156.530743][T10062] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.1204'. [ 156.544268][T10062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.674512][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.955458][T10015] chnl_net:caif_netlink_parms(): no params data found [ 157.003051][T10084] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 157.031724][T10087] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 157.039650][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 157.069644][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 157.118205][T10088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.180024][T10091] netlink: 'syz.3.1207': attribute type 21 has an invalid length. [ 157.270976][T10087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.418900][ T9935] hsr_slave_0: left promiscuous mode [ 157.431660][ T9935] hsr_slave_1: left promiscuous mode [ 157.457388][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.485473][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.528403][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.555376][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.630591][ T9935] veth1_macvtap: left promiscuous mode [ 157.636274][ T9935] veth0_macvtap: left promiscuous mode [ 157.642870][ T9935] veth1_vlan: left promiscuous mode [ 157.648212][ T9935] veth0_vlan: left promiscuous mode [ 157.690771][ T5843] Bluetooth: hci4: command tx timeout [ 158.135630][ T9935] team0 (unregistering): Port device team_slave_1 removed [ 158.188459][ T9935] team0 (unregistering): Port device team_slave_0 removed [ 158.656280][T10094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.839908][T10120] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 158.856384][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.874417][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.882701][T10015] bridge_slave_0: entered allmulticast mode [ 158.889730][T10015] bridge_slave_0: entered promiscuous mode [ 158.899761][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.913317][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.940616][T10015] bridge_slave_1: entered allmulticast mode [ 158.957187][T10015] bridge_slave_1: entered promiscuous mode [ 158.970463][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 158.998848][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 159.020952][T10121] bond4: entered allmulticast mode [ 159.027924][T10121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.038671][T10132] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 159.063008][T10121] bond3: (slave bond4): making interface the new active one [ 159.084890][T10121] bond3: (slave bond4): Enslaving as an active interface with an up link [ 159.242052][T10129] gtp0: left allmulticast mode [ 159.247939][T10138] tipc: MTU too low for tipc bearer [ 159.270746][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 159.277491][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.322304][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.495992][T10015] team0: Port device team_slave_0 added [ 159.543438][T10149] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 159.572907][T10154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1227'. [ 159.604276][T10015] team0: Port device team_slave_1 added [ 159.773325][ T5843] Bluetooth: hci4: command tx timeout [ 159.806678][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.835578][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.861988][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.876450][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.883584][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.902059][T10178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.909578][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.001558][T10181] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 160.039125][T10015] hsr_slave_0: entered promiscuous mode [ 160.101103][T10015] hsr_slave_1: entered promiscuous mode [ 160.108601][T10183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'. [ 160.119071][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.128513][T10015] Cannot create hsr debugfs directory [ 160.210531][T10184] bond6: entered allmulticast mode [ 160.233768][T10184] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.240544][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 160.262304][T10184] bond5: (slave bond6): making interface the new active one [ 160.276755][T10184] bond5: (slave bond6): Enslaving as an active interface with an up link [ 160.291900][T10200] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 160.326695][T10191] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 160.432348][T10206] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 160.462207][ T9934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.488336][ T9934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.515301][T10206] veth1_macvtap: left promiscuous mode [ 160.821587][T10229] raw_sendmsg: syz.2.1250 forgot to set AF_INET. Fix it! [ 160.943050][T10234] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 160.973349][T10236] geneve2: entered promiscuous mode [ 160.978617][T10236] geneve2: entered allmulticast mode [ 161.019000][T10237] netlink: 'syz.2.1251': attribute type 11 has an invalid length. [ 161.198398][T10015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.220361][T10015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.242284][T10015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.262448][T10015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.271039][T10247] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 161.343565][T10253] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 161.363424][T10254] bond7: entered allmulticast mode [ 161.385684][T10254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 161.404515][T10254] bond6: (slave bond7): making interface the new active one [ 161.417124][T10254] bond6: (slave bond7): Enslaving as an active interface with an up link [ 161.499733][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.563118][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.602128][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.609273][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.666762][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.673945][ T9934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.778555][T10015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.798663][T10015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.853469][ T5843] Bluetooth: hci4: command tx timeout [ 161.923439][T10283] __nla_validate_parse: 2 callbacks suppressed [ 161.923460][T10283] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1264'. [ 161.948367][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 161.957882][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 161.974255][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 162.026540][T10289] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1264'. [ 162.063601][T10283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1264'. [ 162.077271][T10293] dvmrp0: left allmulticast mode [ 162.139296][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.206963][T10301] x_tables: duplicate underflow at hook 2 [ 162.509878][T10015] veth0_vlan: entered promiscuous mode [ 162.829444][T10318] team0 (unregistering): Port device team_slave_0 removed [ 162.855018][T10318] team0 (unregistering): Port device team_slave_1 removed [ 162.883546][T10321] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 162.904857][T10015] veth1_vlan: entered promiscuous mode [ 162.993153][T10015] veth0_macvtap: entered promiscuous mode [ 163.023184][T10015] veth1_macvtap: entered promiscuous mode [ 163.047625][T10318] tipc: Disabling bearer <eth:syzkaller0> [ 163.080815][T10346] dvmrp0: entered allmulticast mode [ 163.122206][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.160258][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.178370][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.189232][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.199316][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.210230][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.220645][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.231205][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.242247][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.252096][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.262709][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.272595][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.283347][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.293282][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.303791][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.314004][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.324501][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.335456][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.413539][T10015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.424833][T10015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.461769][T10015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.486486][T10015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.567711][T10371] syz.2.1286[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.567818][T10371] syz.2.1286[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.620720][T10371] syz.2.1286[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.833734][ T9935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.869708][ T9935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.947792][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.978758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.080791][T10399] netlink: 'syz.3.1291': attribute type 32 has an invalid length. [ 164.432117][T10419] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 164.492622][T10419] bond8: entered allmulticast mode [ 164.507498][T10419] 8021q: adding VLAN 0 to HW filter on device bond8 [ 164.532411][T10419] bond7: (slave bond8): making interface the new active one [ 164.556287][T10419] bond7: (slave bond8): Enslaving as an active interface with an up link [ 164.584353][ T9932] ------------[ cut here ]------------ [ 164.589894][ T9932] WARNING: CPU: 1 PID: 9932 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1e3/0x250 [ 164.601173][ T9932] Modules linked in: [ 164.605106][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: kworker/u8:13 Not tainted 6.13.0-rc2-syzkaller-00146-g922b4b955a03 #0 [ 164.617611][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 164.627855][ T9932] Workqueue: events_unbound cfg80211_wiphy_work [ 164.634542][ T9932] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 164.641223][ T9932] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 b1 91 dd ff e8 dc 14 6a f6 90 0f 0b 90 e9 b5 fe ff ff e8 ce 14 6a f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 90 96 19 90 80 e1 07 80 c1 03 38 [ 164.661583][ T9932] RSP: 0018:ffffc90003537998 EFLAGS: 00010293 [ 164.667697][ T9932] RAX: ffffffff8b354972 RBX: 0000000000000001 RCX: ffff8880589e5a00 [ 164.675801][ T9932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 164.684086][ T9932] RBP: ffffc90003537b60 R08: ffffffff8b3548bc R09: 1ffffffff2853f1f [ 164.692444][ T9932] R10: dffffc0000000000 R11: fffffbfff2853f20 R12: dffffc0000000000 [ 164.700534][ T9932] R13: dffffc0000000000 R14: ffff888059bb0e40 R15: ffff8880300c4120 [ 164.708539][ T9932] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 164.717558][ T9932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.724510][ T9932] CR2: 0000001b306eeec0 CR3: 000000000e736000 CR4: 00000000003526f0 [ 164.732954][ T9932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.741023][ T9932] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.749244][ T9932] Call Trace: [ 164.753206][ T9932] <TASK> [ 164.756173][ T9932] ? __warn+0x165/0x4d0 [ 164.760446][ T9932] ? ieee80211_start_next_roc+0x1e3/0x250 [ 164.766210][ T9932] ? report_bug+0x2b3/0x500 [ 164.770807][ T9932] ? ieee80211_start_next_roc+0x1e3/0x250 [ 164.776657][ T9932] ? handle_bug+0x60/0x90 [ 164.781376][ T9932] ? exc_invalid_op+0x1a/0x50 [ 164.786100][ T9932] ? asm_exc_invalid_op+0x1a/0x20 [ 164.791206][ T9932] ? ieee80211_start_next_roc+0x12c/0x250 [ 164.796967][ T9932] ? ieee80211_start_next_roc+0x1e2/0x250 [ 164.802819][ T9932] ? ieee80211_start_next_roc+0x1e3/0x250 [ 164.808572][ T9932] ? ieee80211_start_next_roc+0x1e2/0x250 [ 164.814690][ T9932] ieee80211_scan_work+0x1cc/0x1d30 [ 164.819958][ T9932] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.826065][ T9932] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 164.831816][ T9932] ? rcu_is_watching+0x15/0xb0 [ 164.836622][ T9932] cfg80211_wiphy_work+0x2db/0x480 [ 164.842107][ T9932] ? process_scheduled_works+0x976/0x1840 [ 164.848139][ T9932] process_scheduled_works+0xa66/0x1840 [ 164.854111][ T9932] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.860237][ T9932] ? assign_work+0x364/0x3d0 [ 164.864876][ T9932] worker_thread+0x870/0xd30 [ 164.869541][ T9932] ? __kthread_parkme+0x169/0x1d0 [ 164.874993][ T9932] ? __pfx_worker_thread+0x10/0x10 [ 164.880227][ T9932] kthread+0x2f0/0x390 [ 164.884336][ T9932] ? __pfx_worker_thread+0x10/0x10 [ 164.889506][ T9932] ? __pfx_kthread+0x10/0x10 [ 164.894694][ T9932] ret_from_fork+0x4b/0x80 [ 164.899145][ T9932] ? __pfx_kthread+0x10/0x10 [ 164.904084][ T9932] ret_from_fork_asm+0x1a/0x30 [ 164.908904][ T9932] </TASK> [ 164.912042][ T9932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.919343][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: kworker/u8:13 Not tainted 6.13.0-rc2-syzkaller-00146-g922b4b955a03 #0 [ 164.930286][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 164.940366][ T9932] Workqueue: events_unbound cfg80211_wiphy_work [ 164.946644][ T9932] Call Trace: [ 164.949923][ T9932] <TASK> [ 164.952864][ T9932] dump_stack_lvl+0x241/0x360 [ 164.957568][ T9932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.962784][ T9932] ? __pfx__printk+0x10/0x10 [ 164.967401][ T9932] ? vscnprintf+0x5d/0x90 [ 164.971743][ T9932] panic+0x349/0x880 [ 164.975662][ T9932] ? __warn+0x174/0x4d0 [ 164.979823][ T9932] ? __pfx_panic+0x10/0x10 [ 164.984246][ T9932] ? ret_from_fork_asm+0x1a/0x30 [ 164.989182][ T9932] __warn+0x344/0x4d0 [ 164.993174][ T9932] ? ieee80211_start_next_roc+0x1e3/0x250 [ 164.998894][ T9932] report_bug+0x2b3/0x500 [ 165.003224][ T9932] ? ieee80211_start_next_roc+0x1e3/0x250 [ 165.008941][ T9932] handle_bug+0x60/0x90 [ 165.013095][ T9932] exc_invalid_op+0x1a/0x50 [ 165.017605][ T9932] asm_exc_invalid_op+0x1a/0x20 [ 165.022542][ T9932] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 165.028867][ T9932] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 b1 91 dd ff e8 dc 14 6a f6 90 0f 0b 90 e9 b5 fe ff ff e8 ce 14 6a f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 90 96 19 90 80 e1 07 80 c1 03 38 [ 165.048466][ T9932] RSP: 0018:ffffc90003537998 EFLAGS: 00010293 [ 165.054542][ T9932] RAX: ffffffff8b354972 RBX: 0000000000000001 RCX: ffff8880589e5a00 [ 165.062519][ T9932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 165.070503][ T9932] RBP: ffffc90003537b60 R08: ffffffff8b3548bc R09: 1ffffffff2853f1f [ 165.078472][ T9932] R10: dffffc0000000000 R11: fffffbfff2853f20 R12: dffffc0000000000 [ 165.086439][ T9932] R13: dffffc0000000000 R14: ffff888059bb0e40 R15: ffff8880300c4120 [ 165.094413][ T9932] ? ieee80211_start_next_roc+0x12c/0x250 [ 165.100212][ T9932] ? ieee80211_start_next_roc+0x1e2/0x250 [ 165.105957][ T9932] ? ieee80211_start_next_roc+0x1e2/0x250 [ 165.111695][ T9932] ieee80211_scan_work+0x1cc/0x1d30 [ 165.116919][ T9932] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 165.122904][ T9932] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 165.128536][ T9932] ? rcu_is_watching+0x15/0xb0 [ 165.133307][ T9932] cfg80211_wiphy_work+0x2db/0x480 [ 165.138421][ T9932] ? process_scheduled_works+0x976/0x1840 [ 165.144134][ T9932] process_scheduled_works+0xa66/0x1840 [ 165.149690][ T9932] ? __pfx_process_scheduled_works+0x10/0x10 [ 165.155678][ T9932] ? assign_work+0x364/0x3d0 [ 165.160273][ T9932] worker_thread+0x870/0xd30 [ 165.164872][ T9932] ? __kthread_parkme+0x169/0x1d0 [ 165.169893][ T9932] ? __pfx_worker_thread+0x10/0x10 [ 165.174996][ T9932] kthread+0x2f0/0x390 [ 165.179080][ T9932] ? __pfx_worker_thread+0x10/0x10 [ 165.184183][ T9932] ? __pfx_kthread+0x10/0x10 [ 165.188768][ T9932] ret_from_fork+0x4b/0x80 [ 165.193182][ T9932] ? __pfx_kthread+0x10/0x10 [ 165.197769][ T9932] ret_from_fork_asm+0x1a/0x30 [ 165.202545][ T9932] </TASK> [ 165.205835][ T9932] Kernel Offset: disabled [ 165.210224][ T9932] Rebooting in 86400 seconds..