last executing test programs: 1m2.240823179s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 53.107700731s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 42.683549238s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 33.267324325s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 21.263357898s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 10.934808419s ago: executing program 3 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0e0000000400000008000000053548d876ff321592530d59a64ba5f194655a96914ac1d6f9f261b599dfd1ccc87fca9fed045ca12627c72247c10e589789812ae377bbfedeba3d521ac37113c25a4dadbff28155f31a21aeca6c9ae3ad5eadc2dc2008167c7afea3b8870911af9411371ee3b5786f3b9103e2b2b2aac1dfb0dea741b15577a98fecf46bda1701d324e4115e1ae671e8fe16acf232a6e1586578246602b0185034fbf57d1ddcb50fc0d6a6279ffeb540f7fa8e9e4a9208b58f6517f751cdbf27c4e54b550cf0f6af5fe3a848f145837375a6f9537561ff6ba4", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000044a1bc1c8f6d31280ae436f0af745670292629c6b39cc21b950e05eaab0a70ebf4a20dbb1a0293b5515f27662dce0e6971cfe5142e3a3125f42e149998eb2fb392bef56961813a198ee1bbb368987cb31f882f1886ab5a328b55b2404acfcaea67cc99f8b1e8d9c80e1e1788348ea12be5a0749325f37292baf88438029b670bd68ae792cc6c2e52be1711afca243ff31f949d3cd50a8c231373f0acaed7b4faa997ecee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=ANY=[@ANYBLOB="1840000900fffffffffddadf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='-{et_prio '], 0xa) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000ffffffff000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b0000040000000000000000000000184b0000faffffff0000000000000000181b0000ede0cbe3f3f05fdf9e17ce9ea1", @ANYRES32=r8, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005b000000184a0000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000a00)=""/245, 0x41100, 0x12, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x0, 0x1}, 0x10, 0x135f0, r2, 0x2, &(0x7f0000000780)=[r1, r1, r1, r1, 0x1, r1, r1, r8], &(0x7f0000000b00)=[{0x0, 0x4, 0x7, 0x1}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0xfbc, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYBLOB="9a59d13825d7e0132d7033a42c68ad7660487e04fbd18b19ff41930924ddbf3d406c01c19d7614fa7133ab83d896f4e7ce8e3f61c7b5369a8705be00c1d5c0697689f7c55868b66f806d7d52e5fafe547def9b73deed0344c85ca439815f88c410b35a7dff39d67929280b472e6a8df2eece577890372efc66971402d7b70218e70a9943a1bf9f5fd5177643d79ff56d0e9229cfdf65b82ca8654e6ddc75bee491ecbbc6629d32fab086ddabb724840c77"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4106, 0x100a}, {&(0x7f0000000c40)=""/23, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f00000014c0)=""/204, 0xf4}, {&(0x7f00000002c0)=""/40, 0x35}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0xd, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000ffdbdf25ee0000000400928053bd8d2fafd667d1dca9b39dcf4da9f88a3cb324f35dbce8accef85cf5460c"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) write(r10, 0x0, 0x0) 3.155382368s ago: executing program 0 (id=1392): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000132ae57f60014001a80100004800c0005"], 0x34}}, 0x0) 3.025161555s ago: executing program 0 (id=1393): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x40000aa}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x62}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x20}}, 0x4004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc094}, 0x40080) 2.826180907s ago: executing program 0 (id=1396): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f0000000300)=@ethtool_eee={0x44, 0x86da, 0x8, 0x92, 0xaf, 0x9c7, 0x5, 0x2, [0x9, 0x1ff]}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r6, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x800) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000001080)={0x11, 0xf6, r9, 0x1, 0x1, 0x6, @local}, 0x14) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000080)=0x400, 0x4) sendto$packet(r12, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0x22, 0x0, &(0x7f00000000c0)={0x11, 0x18, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xb7}]}, 0x30}}, 0x488c0) 2.378974121s ago: executing program 0 (id=1400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x3d0, 0xd0, 0xd0, 0x1a0, 0x3d0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x302}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0, @local}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0xec, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x8, 0x3, 0x3, 0x8, 0x2, 0x7}, [@TCA_NETEM_LOSS={0x40, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xf, 0x2, 0x2df2, 0x80000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xd61, 0x1ff, 0xee5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x6, 0xb, 0x4}}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x6, 0xfffe0, 0x9, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4296, 0x10000, 0x2, 0xfffff800}}, @NETEM_LOSS_GI={0x18, 0x1, {0x200, 0x3, 0xa, 0xfffffc01}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x2, 0x401, 0x2}}]}]}}}]}, 0xec}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) ioctl(r9, 0x8b1b, &(0x7f0000000040)) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.196108137s ago: executing program 0 (id=1403): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000940)={&(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="281dd827bd7010fddbdf25047c000008003680040002000c000180060006008e0a00"/50], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/239, &(0x7f0000000100)=0xef) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 2.136025685s ago: executing program 4 (id=1404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0xebe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r2}, @exit, @call={0x85, 0x0, 0x0, 0x36}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.999675768s ago: executing program 4 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket(0x1a, 0xa, 0x4) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @loopback}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001d00000200000000e700002507000000"], 0x14}}, 0x0) 1.844092115s ago: executing program 4 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) 1.820599337s ago: executing program 0 (id=1411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 1.394122498s ago: executing program 1 (id=1412): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x4020940d, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x18}}], 0x1, 0x44000) 1.393798364s ago: executing program 2 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) 1.393374468s ago: executing program 4 (id=1414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f000000f680)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket(0x22, 0x800, 0x10) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x6}}}, 0x24}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x60, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) 1.156111264s ago: executing program 1 (id=1415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x80}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x20040840) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000117977382a5a3163ef43dd0da49f68001c", @ANYRES32=r3, @ANYBLOB="000007000a000200aaaaaaaaaaaa0000"], 0x28}}, 0x0) 1.155366308s ago: executing program 2 (id=1416): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9f45, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000000090104000000000000000005000be50900010073797a31000000000800034000003afe08000640000000000c000480080001400000080008000540000000120800034037e361db0800064000000000080089a5e5ca0abd"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9f45, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000000090104000000000000000005000be50900010073797a31000000000800034000003afe08000640000000000c000480080001400000080008000540000000120800034037e361db0800064000000000080089a5e5ca0abd"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) 1.132051176s ago: executing program 4 (id=1417): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e8100220086dd6d0000000009110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20000990787a703993a891c9bf6babc1434ad1989ffe6e2a1bf340cbcc954ae6a3e077334f5d1739422351587e1c8fa61c943b35829c646c50285ecafc18ce33cb2a8c2a08ff17f765a40100000000000000a7b4c07c1e550aaae4f324890e733c4a2e5e5aac6b83424c50770a86950e5d642ddaca4a"], 0x43) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="ce6fefa2eef3e1e10e8c051c93beaf75c517", @ANYRES64, @ANYRES16, @ANYBLOB="0bc5909355"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000480)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @default, @netrom={'nr', 0x0}, 0x8, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e28000000000000e4ff0000000000000000020400edffffff00e7f3f297bf08fbd620cbe3fb4ed25a16fa963a9973cc3fee52365f0f54e65dfb332404adf683cb636971030bfd32fea900e31f4016478efb8c16eef4cdfeb67c6f757bf8252fcb3ba2928ec910c28569dac2eb284c193d5d94c404f8c02d2582e181b0bb123d987dbcfd084d8a8d6dc9cc5450c4a818914b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 940.577076ms ago: executing program 2 (id=1418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x7f, &(0x7f0000000100)=""/127, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x2}, 0x10, 0x1d739, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0x1, 0x6}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0xfc}}, 0x0) 755.68521ms ago: executing program 1 (id=1419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x12, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000340)=""/40, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x696, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x1, 0x40ea07b3, 0x2, 0xa}, {0x5, 0x4, 0xc, 0x4}], 0x10, 0x2645, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, 0xffffffffffffffff, 0x36, 0x14, 0x0, @void, @value=r1, @void, @void, r0}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0xfffffffd}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x410, 0xe8, 0xe8, 0xe8, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7fff, 0x1003}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @local, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0xf, {@mac=@random, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xac, 0x3, 0x0, 0x0, "b3e4daf584250ceaaf7825e5d7aeda156bf0cc5502de69e9bc05d0c49bec731753e007203e40d2bff2c46828872f73adb9f03b599c71611fc11a663e7ecc87ab"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) socket$nl_xfrm(0x10, 0x3, 0x6) 652.57762ms ago: executing program 4 (id=1420): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0xc00}, 0x8) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, 0x0}, 0x3000c085) 447.496927ms ago: executing program 2 (id=1421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="24791321c25034a94500000400000000000000216d000340000000070800034000000005"], 0x24}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) 371.073338ms ago: executing program 1 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r1, 0x100, 0x0, 0x0, {0x36}}, 0x14}}, 0x0) 274.25432ms ago: executing program 1 (id=1423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x2}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 231.611657ms ago: executing program 2 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) 35.723061ms ago: executing program 1 (id=1425): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x26}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000c7f645cd000008000300", @ANYRES32=r5], 0x44}}, 0x4000004) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x4}, 0x50) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @empty, 0x80000001}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1}}) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) r9 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r9, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r1, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x40081) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x26}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000c7f645cd000008000300", @ANYRES32=r5], 0x44}}, 0x4000004) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x4}, 0x50) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @empty, 0x80000001}, 0x1c) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1}}) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) getpeername$qrtr(r9, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r1, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x40081) (async) 0s ago: executing program 2 (id=1426): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xa14, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf4, 0x2, [@TCA_CGROUP_ACT={0xb0, 0x1, [@m_csum={0xac, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x61, 0x6, "e74670b59cabc7fa65697fe66a1ce059a1d20f485ae35387641d50a8c5c10c4c6cedb532531e5f7e635039fa9779c4a2c773aacace496b10b0ff8db305aab6261fa1aa50614ac51e5a7a1f2ff850a61103f39752f321152b34d838a149"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x8e8, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'netpci0\x00'}, @TCA_FW_POLICE={0x838, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x80000000, 0x80, 0xfffffff5, 0x1, 0x7fffffff, 0x40, 0x9, 0xc127, 0x4, 0x0, 0x5, 0xf, 0x3, 0xff, 0x5, 0x7, 0x7, 0x763d, 0x6, 0x7, 0x7, 0x1, 0x8, 0x9, 0x8, 0xfffffff9, 0x8, 0x50e, 0x9, 0x0, 0xa1, 0x6, 0x9, 0x10000, 0x53346c5a, 0x8, 0x7, 0x8115, 0x6, 0xe, 0x9, 0x5c13, 0xd, 0x8, 0x7, 0xdee8, 0x5, 0x8, 0x3, 0x8, 0x9, 0x6, 0xffffffff, 0x596de8af, 0x3, 0x2ee1d98c, 0x89cc, 0x6, 0x1, 0x101, 0xa, 0xfffffff1, 0x8, 0x9, 0x5, 0x8001, 0x7, 0x12c0, 0x3, 0x3ff, 0x0, 0xd34, 0xeda, 0xffffffff, 0x6, 0xfffff9bf, 0x2de, 0x7, 0x0, 0x9, 0xfb40, 0x3, 0x4, 0xffff3c35, 0x5, 0x9, 0x6, 0x1, 0xbf89, 0x7, 0x9c, 0x10, 0x9, 0x81, 0x3, 0x5, 0x5, 0x0, 0x3, 0x8, 0x3, 0xf4, 0x3, 0x1, 0x20000000, 0x3, 0xd, 0x2, 0x1ff, 0x6, 0x9, 0x22db6f4a, 0xcef, 0x3, 0x10, 0x8, 0x2, 0x1, 0x1, 0x7, 0x9, 0x7fffffff, 0x0, 0x1000, 0x7, 0x100, 0x4, 0x7, 0x8, 0xfffffffa, 0xfff, 0x4, 0x400, 0xf, 0x8, 0xfffffffe, 0x4, 0x3, 0x0, 0x5e5b, 0x774, 0x8, 0xea, 0x3, 0x7, 0x3, 0x0, 0x6, 0x3, 0xf, 0x0, 0x68, 0x0, 0x56b, 0x3ff, 0xfffffff8, 0x0, 0x5, 0x1, 0x1, 0x7, 0xf32, 0x3, 0x6, 0x80000000, 0x6, 0x40, 0x2, 0x633, 0xfffffffb, 0xb, 0x9, 0x9, 0x28e, 0x3, 0xfffffffe, 0x2, 0x6, 0x8000, 0x1f, 0x8, 0xffff6532, 0x81, 0x0, 0x3b4966d, 0x4, 0x3, 0x5, 0x2, 0x9, 0x0, 0x3, 0x2, 0x4, 0x8, 0x615, 0x9, 0x1, 0x5, 0xa5f7, 0x1, 0x20000000, 0x13ac8d12, 0x2, 0x0, 0x0, 0x3, 0x7, 0xf43, 0xb6, 0x3, 0x80000000, 0xb, 0x80e, 0x81, 0xff, 0x1, 0x1, 0xd89b, 0x0, 0x2, 0x6, 0x6, 0xdd0, 0x0, 0xf9c5, 0x1, 0x200, 0x1e, 0x1, 0x7f, 0x3, 0x2, 0xf18, 0x3, 0x7, 0x0, 0x7, 0x2, 0xc45, 0x1, 0x9, 0x3, 0x3, 0x6, 0x1, 0x1, 0x1, 0x5, 0x6, 0x3, 0x7, 0xffff0001, 0x1ff, 0x7]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x5, 0x9, 0x8, 0x7fffffff, 0xfffffff8, 0x2, 0x1, 0x0, 0x6, 0x8, 0x6b, 0xbe7a, 0xea9, 0xff, 0xf5, 0x2, 0x7, 0xffffff00, 0x1, 0x2, 0x40, 0x43, 0x5, 0xc6, 0x1, 0x7, 0x4, 0xffff, 0x1, 0x2, 0x36, 0xf375, 0x1, 0xfff, 0x7ff, 0x49, 0xa, 0x8, 0x6, 0x2, 0xcff, 0xfffffffb, 0x1, 0x5, 0x50, 0x68a, 0x65, 0x0, 0x3, 0xffff68e7, 0x1, 0xe, 0x5, 0xfffffffe, 0x1, 0x6, 0xe2, 0xfd, 0x8000, 0x3, 0x1, 0x9, 0x9, 0x5, 0x5f, 0x9, 0x7, 0xfff, 0x1c3e2bc2, 0x737e, 0x4, 0x3ff, 0x9, 0x6, 0x7, 0x2, 0xfffffffd, 0x200, 0x1, 0x7fffffff, 0x2, 0x1, 0x101, 0x8000, 0x7, 0x6, 0xffffff79, 0x8, 0x4, 0x4, 0xac2, 0x3, 0x2, 0x2, 0x6d1, 0x4, 0xd, 0xe01c, 0xfffffbff, 0x6, 0x8, 0x80, 0x1ff, 0x8, 0x7c, 0x400000, 0xa, 0x3, 0xd78, 0x100, 0x0, 0x8a6d, 0x7, 0x1, 0x6, 0x8000, 0xc, 0x9, 0x1, 0x1, 0x0, 0x4, 0x2, 0xfe19, 0x4, 0x401, 0x101, 0x0, 0xffffffc5, 0xd, 0x2, 0x4, 0x90000000, 0x4, 0x7, 0x0, 0x42, 0x5d, 0xffffffff, 0x9355, 0x6, 0x2, 0x1, 0x7, 0xfffffffd, 0x3, 0x1, 0x8001, 0x4, 0x5, 0xd, 0x2, 0x4, 0x40000, 0x8000, 0x9, 0x7, 0x0, 0xffff, 0xc89, 0x2f3, 0x2, 0x6, 0x1ff, 0xffffffff, 0xfffff000, 0x7, 0x8001, 0x1, 0x4, 0xc4, 0x7fffffff, 0x101, 0x4, 0xffffff85, 0xa3, 0x7, 0x3, 0x5, 0x80, 0x0, 0x7ff, 0x9, 0x6, 0x8, 0xaf, 0x9, 0x4, 0x7, 0x8, 0x6, 0xf28, 0x0, 0x10, 0x2, 0xb, 0xd1, 0x2, 0x7f, 0x8, 0x1, 0x0, 0x3, 0x5, 0xffff, 0x1, 0x8, 0x2, 0x8, 0x1000, 0x401, 0xfb9, 0xb2, 0x3, 0x85, 0x1, 0x7, 0x8, 0x6, 0x7, 0x9, 0x7, 0x9, 0x5, 0x2, 0x74, 0x9, 0x4, 0x1, 0xb07, 0x1200000, 0x9cc, 0xfd, 0x0, 0x2, 0x8, 0xfffffff9, 0x3ff, 0x5, 0x1ff, 0x206a, 0x7, 0x2, 0xffff, 0x9, 0xfffffc00, 0x59, 0x8, 0x9, 0x6cb, 0x7, 0x0, 0x97, 0x2]}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_INDEV={0x14, 0x3, 'bond0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x429}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}, @TCA_FW_POLICE={0x58, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0xb, 0x2, 0x2, {0x7, 0x1, 0x9, 0x4, 0x1, 0xff}, {0x8, 0x0, 0x140a, 0x9f, 0x5, 0x1}, 0x3, 0x0, 0x7fffffff}}]}]}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): ][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650145][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.711056][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.873145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.889452][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.899229][ T5940] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.908820][ T5940] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.918339][ T5940] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.927768][ T5940] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.941100][ T5940] Zero length message leads to an empty skb [ 99.024707][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.058020][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.084935][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.103616][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.155827][ T5850] Bluetooth: hci0: command tx timeout [ 99.207516][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.238084][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.251678][ T5850] Bluetooth: hci2: command tx timeout [ 99.257709][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.282230][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.298979][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.315052][ T5850] Bluetooth: hci3: command tx timeout [ 99.320886][ T5853] Bluetooth: hci4: command tx timeout [ 99.320896][ T5843] Bluetooth: hci1: command tx timeout [ 99.352729][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.377465][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.862933][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 100.024248][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.089710][ T5963] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 100.232349][ T5980] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 100.470912][ T5987] netlink: 108 bytes leftover after parsing attributes in process `syz.2.19'. [ 100.671806][ T30] audit: type=1107 audit(1744234572.998:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='K WÉø׬%Ç+"ðx±½’x÷šµê¬²5Oï„ï™JÆ…µaìuxZ)+Š0«ôE4GM.Ùµ»˜”»é\úú勤Ö(¥…¸Z5¸¬ÐÕÖµÜ.gn[ »kht¢ˆ\\HÒ®JÉ\Ä£æ+bȵ-Ë@z [ 100.671806][ T30] <–1€bÙŸ=œ>4a H”]+ðüÊiE' [ 100.777245][ T6003] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 101.350188][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 101.365396][ T6031] Bluetooth: MGMT ver 1.23 [ 101.446392][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.792696][ T6043] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 101.793802][ T3082] IPVS: starting estimator thread 0... [ 101.960350][ T6058] IPVS: using max 29 ests per chain, 69600 per kthread [ 101.969058][ T6052] sctp: failed to load transform for md5: -2 [ 102.265194][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.356091][ T6087] netlink: 1088 bytes leftover after parsing attributes in process `syz.4.45'. [ 102.853201][ T6120] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 102.903922][ T6120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.54'. [ 104.018376][ T6153] netdevsim netdevsim2: Direct firmware load for . [ 104.018376][ T6153] failed with error -2 [ 104.044587][ T6153] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 104.044587][ T6153] [ 105.034551][ T6211] xt_policy: too many policy elements [ 105.727120][ T6251] warning: `syz.4.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.913834][ T6259] __nla_validate_parse: 3 callbacks suppressed [ 105.913856][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 106.494987][ T6288] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 106.551216][ T6293] sctp: [Deprecated]: syz.2.103 (pid 6293) Use of int in maxseg socket option. [ 106.551216][ T6293] Use struct sctp_assoc_value instead [ 106.850329][ T6304] netlink: 160 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.861965][ T6304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.874787][ T6304] netlink: 7 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.888433][ T6304] netlink: 'syz.1.106': attribute type 6 has an invalid length. [ 106.917278][ T6304] netlink: 'syz.1.106': attribute type 5 has an invalid length. [ 106.925448][ T6304] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 106.933208][ T6304] netlink: 'syz.1.106': attribute type 6 has an invalid length. [ 106.941459][ T6304] netlink: 7 bytes leftover after parsing attributes in process `syz.1.106'. [ 107.099801][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.415707][ T6322] netlink: 'syz.0.109': attribute type 11 has an invalid length. [ 107.429162][ T6319] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 107.444886][ T6319] netlink: 'syz.3.112': attribute type 4 has an invalid length. [ 107.452578][ T6319] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.112'. [ 107.488115][ T6324] batman_adv: batadv0: Adding interface: dummy0 [ 107.500825][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 107.503168][ T6324] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.545650][ T6324] batman_adv: batadv0: Interface activated: dummy0 [ 107.552484][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 107.573183][ T6330] xfrm1: entered promiscuous mode [ 107.581560][ T6330] xfrm1: entered allmulticast mode [ 107.600534][ T6332] batadv0: mtu less than device minimum [ 107.636985][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.649394][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.661417][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.673546][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.685595][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.697644][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.709587][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.721613][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.733663][ T6332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.816118][ T6341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 107.892685][ T6324] macvlan2: entered promiscuous mode [ 107.898288][ T6324] macvlan2: entered allmulticast mode [ 107.907450][ T6324] batadv0: entered promiscuous mode [ 107.929183][ T6324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.937957][ T6344] sctp: [Deprecated]: syz.4.117 (pid 6344) Use of int in maxseg socket option. [ 107.937957][ T6344] Use struct sctp_assoc_value instead [ 107.962005][ T6344] sctp: [Deprecated]: syz.4.117 (pid 6344) Use of int in maxseg socket option. [ 107.962005][ T6344] Use struct sctp_assoc_value instead [ 107.977769][ T6324] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 108.432388][ T6366] netlink: 'syz.0.124': attribute type 13 has an invalid length. [ 108.486643][ T6364] netlink: 'syz.0.124': attribute type 13 has an invalid length. [ 108.541097][ T6364] netlink: 'syz.0.124': attribute type 58 has an invalid length. [ 108.545509][ T6366] netlink: 'syz.0.124': attribute type 58 has an invalid length. [ 109.917108][ T6434] hsr0: entered promiscuous mode [ 109.924072][ T6434] hsr_slave_0: left promiscuous mode [ 109.933208][ T6434] hsr_slave_1: left promiscuous mode [ 110.040608][ T6434] hsr0 (unregistering): left promiscuous mode [ 110.231134][ T6446] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 110.857613][ T6472] x_tables: duplicate entry at hook 3 [ 110.938562][ T6468] __nla_validate_parse: 10 callbacks suppressed [ 110.938585][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 111.465942][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 111.488248][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 111.564980][ T6493] netlink: 248 bytes leftover after parsing attributes in process `syz.3.165'. [ 111.686801][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 111.813429][ T6515] Bluetooth: MGMT ver 1.23 [ 111.833210][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 111.934907][ T6521] netlink: 100 bytes leftover after parsing attributes in process `syz.0.170'. [ 112.191105][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.254799][ T6535] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 112.271352][ T6535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.177'. [ 112.569278][ T6556] netlink: 'syz.3.179': attribute type 13 has an invalid length. [ 112.633366][ T6556] netlink: 'syz.3.179': attribute type 58 has an invalid length. [ 112.641669][ T6556] netlink: 152 bytes leftover after parsing attributes in process `syz.3.179'. [ 112.917402][ T6577] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 112.953889][ T6580] x_tables: duplicate underflow at hook 4 [ 113.487833][ T6605] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 113.586298][ T6605] veth0_macvtap: left promiscuous mode [ 113.664879][ T6596] can: request_module (can-proto-4) failed. [ 113.969491][ T6621] netlink: 'syz.2.196': attribute type 12 has an invalid length. [ 114.459163][ T6645] Unsupported ieee802154 address type: 0 [ 115.357229][ T6681] netlink: 'syz.4.209': attribute type 27 has an invalid length. [ 116.013865][ T6707] __nla_validate_parse: 8 callbacks suppressed [ 116.013885][ T6707] netlink: 668 bytes leftover after parsing attributes in process `syz.0.218'. [ 116.102539][ T6707] netlink: 668 bytes leftover after parsing attributes in process `syz.0.218'. [ 116.163147][ T6713] netlink: 668 bytes leftover after parsing attributes in process `syz.0.218'. [ 116.184926][ T6716] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 116.234689][ T6713] netlink: 668 bytes leftover after parsing attributes in process `syz.0.218'. [ 116.553703][ T6738] netlink: 'syz.1.225': attribute type 19 has an invalid length. [ 116.631068][ T6739] netlink: 'syz.4.226': attribute type 12 has an invalid length. [ 116.988748][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.000096][ T6763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.234'. [ 117.317865][ T6778] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 117.341918][ T6776] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 117.699274][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 118.353331][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 118.408068][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.300321][ T6843] vlan2: entered allmulticast mode [ 119.311339][ T6843] bond0: entered allmulticast mode [ 119.326372][ T6847] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 119.335320][ T6850] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 119.450515][ T6843] bond_slave_0: entered allmulticast mode [ 119.477851][ T6843] bond_slave_1: entered allmulticast mode [ 119.635593][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 119.744976][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 119.758930][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 119.970330][ T6879] vlan2: entered promiscuous mode [ 119.995888][ T6879] bridge0: entered promiscuous mode [ 120.027907][ T6879] vlan2: entered allmulticast mode [ 120.033087][ T6879] bridge0: entered allmulticast mode [ 120.051976][ T6892] ipt_REJECT: ECHOREPLY no longer supported. [ 121.102012][ T6936] __nla_validate_parse: 4 callbacks suppressed [ 121.102035][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 121.150325][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 121.829363][ T6967] vxcan1: entered allmulticast mode [ 121.934152][ T6970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.963657][ T6975] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 121.974201][ T6970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.040898][ T6979] netlink: 156 bytes leftover after parsing attributes in process `syz.4.294'. [ 122.073685][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 122.233708][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 122.242964][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 122.259918][ T6987] netlink: 'syz.4.294': attribute type 14 has an invalid length. [ 122.278192][ T6987] netlink: 'syz.4.294': attribute type 13 has an invalid length. [ 122.542314][ T6992] netlink: 256 bytes leftover after parsing attributes in process `syz.4.297'. [ 122.560006][ T6992] netlink: 'syz.4.297': attribute type 9 has an invalid length. [ 122.930244][ T7002] netlink: 232 bytes leftover after parsing attributes in process `syz.1.301'. [ 122.939934][ T7013] netlink: 288 bytes leftover after parsing attributes in process `syz.4.305'. [ 122.973199][ T7002] netlink: 232 bytes leftover after parsing attributes in process `syz.1.301'. [ 124.629264][ T7104] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 125.261723][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.291610][ T7137] raw_sendmsg: syz.3.334 forgot to set AF_INET. Fix it! [ 125.545416][ T7145] net_ratelimit: 15 callbacks suppressed [ 125.545437][ T7145] netlink: zone id is out of range [ 125.569173][ T7145] netlink: zone id is out of range [ 125.623638][ T7145] netlink: get zone limit has 8 unknown bytes [ 125.843245][ T7163] dvmrp0: entered allmulticast mode [ 126.223864][ T7189] __nla_validate_parse: 30 callbacks suppressed [ 126.223896][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 126.252523][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 126.906704][ T7223] netlink: 256 bytes leftover after parsing attributes in process `syz.0.356'. [ 127.220204][ T7237] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.361'. [ 127.248245][ T7233] tipc: Enabling of bearer rejected, failed to enable media [ 127.277218][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.364'. [ 127.277765][ T7237] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.361'. [ 127.313034][ T7244] syz.2.362 (7244) used greatest stack depth: 19504 bytes left [ 127.395419][ T5853] Bluetooth: hci0: command tx timeout [ 127.541149][ T7247] netlink: 830 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.567194][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 127.621194][ T7258] x_tables: duplicate underflow at hook 1 [ 127.805470][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 128.728243][ T5844] IPVS: starting estimator thread 0... [ 128.814570][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 128.834818][ T7312] IPVS: using max 31 ests per chain, 74400 per kthread [ 128.851081][ T7310] dccp_close: ABORT with 20 bytes unread [ 129.878449][ T7361] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 130.087992][ T7368] xt_limit: Overflow, try lower: 2147483649/128 [ 130.381738][ T7367] netlink: 'syz.1.405': attribute type 2 has an invalid length. [ 130.429678][ T5853] block nbd0: Receive control failed (result -32) [ 130.754801][ T7394] netlink: 'syz.0.414': attribute type 7 has an invalid length. [ 130.762643][ T7394] netlink: 'syz.0.414': attribute type 8 has an invalid length. [ 130.791910][ T7394] gretap0: entered promiscuous mode [ 130.806245][ T7394] gretap0: left promiscuous mode [ 131.078510][ T7406] lo: entered promiscuous mode [ 131.107708][ T7406] netlink: 'syz.4.418': attribute type 10 has an invalid length. [ 131.157045][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.208895][ T7411] veth1_macvtap: left promiscuous mode [ 131.241267][ T7406] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.316644][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.337724][ T7405] lo: left promiscuous mode [ 131.451360][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.521063][ T7418] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 131.547949][ T7424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.555320][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 131.571038][ T7418] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 131.589722][ T7424] __nla_validate_parse: 3 callbacks suppressed [ 131.589779][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 131.627255][ T7418] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 131.707447][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.953445][ T7432] netlink: zone id is out of range [ 131.969643][ T7432] netlink: zone id is out of range [ 131.983731][ T7432] netlink: zone id is out of range [ 131.989651][ T7432] netlink: zone id is out of range [ 132.022562][ T7432] netlink: zone id is out of range [ 132.031208][ T7432] netlink: zone id is out of range [ 132.064320][ T7432] netlink: zone id is out of range [ 132.071684][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 132.084537][ T7432] netlink: zone id is out of range [ 132.091054][ T7432] netlink: zone id is out of range [ 132.099480][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.148483][ T67] bridge_slave_1: left allmulticast mode [ 132.152465][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.164098][ T67] bridge_slave_1: left promiscuous mode [ 132.172096][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.180219][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.187524][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.188700][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.206052][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.243688][ T67] bridge_slave_0: left allmulticast mode [ 132.251973][ T67] bridge_slave_0: left promiscuous mode [ 132.262100][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.305588][ T7445] xt_SECMARK: invalid mode: 0 [ 132.439302][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 132.551435][ T7456] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 132.559486][ T7456] netlink: 'syz.1.435': attribute type 3 has an invalid length. [ 132.569014][ T7456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.435'. [ 132.579207][ T7456] NCSI netlink: No device for ifindex 131080 [ 132.836397][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.842653][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865863][ T67] bond_slave_0: left allmulticast mode [ 132.915791][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.960210][ T67] bond_slave_1: left allmulticast mode [ 132.995945][ T67] bond0 (unregistering): Released all slaves [ 133.031606][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.140194][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.451421][ T7479] x_tables: duplicate underflow at hook 2 [ 133.750346][ T7491] netlink: 'syz.0.445': attribute type 11 has an invalid length. [ 133.815946][ T67] hsr_slave_0: left promiscuous mode [ 133.868453][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 133.889869][ T67] hsr_slave_1: left promiscuous mode [ 133.915366][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.934688][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.956544][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.969617][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.001570][ T67] veth1_macvtap: left promiscuous mode [ 134.015533][ T67] veth0_macvtap: left promiscuous mode [ 134.021378][ T67] veth1_vlan: left promiscuous mode [ 134.035640][ T67] veth0_vlan: left promiscuous mode [ 134.274740][ T5850] Bluetooth: hci2: command tx timeout [ 134.565987][ T67] team0 (unregistering): Port device team_slave_1 removed [ 134.600713][ T67] team0 (unregistering): Port device team_slave_0 removed [ 135.095618][ T7517] x_tables: duplicate underflow at hook 1 [ 135.115277][ T7517] SET target dimension over the limit! [ 135.420128][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.447135][ T7524] team0: Port device bond0 added [ 135.612210][ T7529] x_tables: unsorted entry at hook 2 [ 135.650695][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 135.930470][ T7542] xt_hashlimit: max too large, truncated to 1048576 [ 136.000224][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.009045][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.025801][ T7440] bridge_slave_0: entered allmulticast mode [ 136.034058][ T7440] bridge_slave_0: entered promiscuous mode [ 136.071098][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.100806][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.129195][ T7440] bridge_slave_1: entered allmulticast mode [ 136.172606][ T7440] bridge_slave_1: entered promiscuous mode [ 136.238920][ T7563] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 136.263562][ T7563] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.461'. [ 136.297938][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.328402][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.354616][ T5850] Bluetooth: hci2: command tx timeout [ 136.514522][ T7568] netlink: 5072 bytes leftover after parsing attributes in process `syz.2.465'. [ 136.538805][ T7440] team0: Port device team_slave_0 added [ 136.551792][ T5938] IPVS: starting estimator thread 0... [ 136.569318][ T7440] team0: Port device team_slave_1 added [ 136.580718][ T7568] netlink: 5072 bytes leftover after parsing attributes in process `syz.2.465'. [ 136.655891][ T7570] IPVS: using max 24 ests per chain, 57600 per kthread [ 136.972317][ T7580] team0 (unregistering): Port device team_slave_0 removed [ 136.989937][ T7580] team0 (unregistering): Port device team_slave_1 removed [ 137.021235][ T7580] team0 (unregistering): Port device bond0 removed [ 137.061025][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.068632][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.141939][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.254747][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.266253][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.294997][ T7593] sctp: [Deprecated]: syz.1.470 (pid 7593) Use of int in max_burst socket option. [ 137.294997][ T7593] Use struct sctp_assoc_value instead [ 137.320036][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.363163][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 137.382735][ T7600] tipc: Enabling of bearer rejected, failed to enable media [ 137.526170][ T7440] hsr_slave_0: entered promiscuous mode [ 137.537305][ T7440] hsr_slave_1: entered promiscuous mode [ 137.551864][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.580440][ T7440] Cannot create hsr debugfs directory [ 137.701385][ T7610] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.030280][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 138.226054][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 138.325741][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 138.374529][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 138.438022][ T5850] Bluetooth: hci2: command tx timeout [ 138.528066][ T7640] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 138.623555][ T7644] net_ratelimit: 396 callbacks suppressed [ 138.623576][ T7644] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 138.873442][ T7440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.928895][ T7440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.979890][ T7440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.010980][ T7652] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 139.030124][ T7440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.249299][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 139.299507][ T7666] geneve2: entered promiscuous mode [ 139.417954][ T7671] netlink: 'syz.2.497': attribute type 3 has an invalid length. [ 139.432721][ T7671] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.497'. [ 139.561731][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.576181][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.497'. [ 139.670386][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.740695][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.748011][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.831331][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.839310][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.140641][ T7694] tipc: Enabling of bearer rejected, failed to enable media [ 140.472047][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.514995][ T5850] Bluetooth: hci2: command tx timeout [ 140.592798][ T7440] veth0_vlan: entered promiscuous mode [ 140.628873][ T7723] netlink: 244 bytes leftover after parsing attributes in process `syz.2.512'. [ 140.652921][ T7718] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 140.659854][ T7440] veth1_vlan: entered promiscuous mode [ 140.661446][ T7718] netlink: 'syz.0.510': attribute type 3 has an invalid length. [ 140.708768][ T7718] netlink: 224 bytes leftover after parsing attributes in process `syz.0.510'. [ 140.741857][ T7718] NCSI netlink: No device for ifindex 0 [ 140.843773][ T7724] syzkaller0: entered promiscuous mode [ 140.877353][ T7724] syzkaller0: entered allmulticast mode [ 140.888208][ T7720] tipc: Started in network mode [ 140.893695][ T7720] tipc: Node identity 6ee95ae4f177, cluster identity 4711 [ 140.909259][ T7720] tipc: Enabled bearer , priority 0 [ 140.962737][ T7739] dvmrp0: entered allmulticast mode [ 140.980256][ T7440] veth0_macvtap: entered promiscuous mode [ 140.992991][ T7440] veth1_macvtap: entered promiscuous mode [ 141.090155][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.102387][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.112369][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.127318][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.137794][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.148557][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.161536][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.202295][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.227191][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.241141][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.285046][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.303503][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.314983][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.330652][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.363221][ T7440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.380241][ T7440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.389684][ T7440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.390860][ T7757] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 141.403538][ T7440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.439238][ T7719] tipc: Resetting bearer [ 142.016523][ T10] tipc: Node number set to 2677955300 [ 142.877498][ T7719] tipc: Disabling bearer [ 142.888262][ T7757] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 142.923198][ T7775] netlink: 'syz.0.524': attribute type 25 has an invalid length. [ 142.940039][ T7775] netlink: 'syz.0.524': attribute type 7 has an invalid length. [ 143.046856][ T7780] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 143.178237][ T7780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.272771][ T7780] __nla_validate_parse: 1 callbacks suppressed [ 143.272792][ T7780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'. [ 143.499465][ T7787] bond1: (slave ip6gretap1): making interface the new active one [ 143.520867][ T7787] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 143.663525][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.532'. [ 143.759366][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 143.998996][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 144.623543][ T7837] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004 [ 144.656111][ T7837] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 144.680864][ T7843] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 144.980032][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 145.001974][ T7853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.025222][ T7851] hsr_slave_0: left promiscuous mode [ 145.050808][ T7851] hsr_slave_1: left promiscuous mode [ 145.120959][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 145.207090][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.217210][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.225412][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.233911][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.242732][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.616804][ T7878] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 145.801219][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 145.879614][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 145.930138][ T7885] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 146.009956][ T7884] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 146.068456][ T7885] veth0_macvtap: left promiscuous mode [ 146.374737][ T7862] chnl_net:caif_netlink_parms(): no params data found [ 146.581528][ T7905] netlink: 13 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.827832][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.838563][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 146.853402][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.862193][ T7862] bridge_slave_0: entered allmulticast mode [ 146.898024][ T7862] bridge_slave_0: entered promiscuous mode [ 146.965280][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.977918][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.990599][ T7862] bridge_slave_1: entered allmulticast mode [ 147.040571][ T7862] bridge_slave_1: entered promiscuous mode [ 147.257585][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.281012][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.297600][ T7937] IPv6: Can't replace route, no match found [ 147.315075][ T5850] Bluetooth: hci2: command tx timeout [ 147.534054][ T7862] team0: Port device team_slave_0 added [ 147.610261][ T7862] team0: Port device team_slave_1 added [ 147.752245][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.767946][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.853940][ T7862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.879099][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.900271][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.901227][ T7966] sctp: [Deprecated]: syz.0.580 (pid 7966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.901227][ T7966] Use struct sctp_sack_info instead [ 147.945911][ T7862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.267900][ T7862] hsr_slave_0: entered promiscuous mode [ 148.285806][ T7862] hsr_slave_1: entered promiscuous mode [ 148.292258][ T7862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.320857][ T7862] Cannot create hsr debugfs directory [ 148.502644][ T7997] netlink: 'syz.4.585': attribute type 5 has an invalid length. [ 148.634561][ T8001] netlink: 'syz.2.587': attribute type 21 has an invalid length. [ 148.673062][ T8001] __nla_validate_parse: 2 callbacks suppressed [ 148.673082][ T8001] netlink: 156 bytes leftover after parsing attributes in process `syz.2.587'. [ 148.746912][ T8001] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 148.878120][ T8004] netlink: 'syz.4.588': attribute type 11 has an invalid length. [ 148.886680][ T8004] netlink: 224 bytes leftover after parsing attributes in process `syz.4.588'. [ 149.071133][ T7862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.214217][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.227086][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.239680][ T7862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.344165][ T7862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.366733][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.377421][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.395036][ T5850] Bluetooth: hci2: command tx timeout [ 149.568966][ T7862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.870564][ T7862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.918074][ T7862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.966762][ T7862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.989114][ T7862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.015048][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 150.221937][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.306478][ T7862] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.337988][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.345241][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.481868][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.489109][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.657339][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.177515][ T7862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.285005][ T7862] veth0_vlan: entered promiscuous mode [ 151.389377][ T7862] veth1_vlan: entered promiscuous mode [ 151.476199][ T5850] Bluetooth: hci2: command tx timeout [ 151.496819][ T7862] veth0_macvtap: entered promiscuous mode [ 151.507733][ T7862] veth1_macvtap: entered promiscuous mode [ 151.527858][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.538706][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.550393][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.564885][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.575434][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.587140][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.605208][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.622568][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.650089][ T8125] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 151.652136][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.724200][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.754489][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.788810][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.826417][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.846581][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.869343][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.879831][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.890873][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.902384][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.949494][ T7862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.984521][ T7862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044491][ T7862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.053278][ T7862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.205144][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'. [ 152.987008][ T8188] tipc: Failed to obtain node identity [ 152.992558][ T8188] tipc: Enabling of bearer rejected, failed to enable media [ 153.016604][ T8188] netlink: ct family unspecified [ 153.028131][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 153.050920][ T8188] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.701579][ T8228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.792108][ T8229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.113861][ T8242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 154.268709][ T8252] sctp: [Deprecated]: syz.0.656 (pid 8252) Use of int in max_burst socket option deprecated. [ 154.268709][ T8252] Use struct sctp_assoc_value instead [ 154.353985][ T8254] __nla_validate_parse: 2 callbacks suppressed [ 154.354008][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 154.371018][ T8256] sctp: [Deprecated]: syz.0.656 (pid 8256) Use of int in max_burst socket option deprecated. [ 154.371018][ T8256] Use struct sctp_assoc_value instead [ 154.413648][ T8258] syz.2.658 uses old SIOCAX25GETINFO [ 154.549518][ T8263] netlink: 'syz.2.659': attribute type 4 has an invalid length. [ 154.580808][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.620921][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.626886][ T8267] netlink: 'syz.2.659': attribute type 21 has an invalid length. [ 154.637934][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.648551][ T8267] netlink: 'syz.2.659': attribute type 20 has an invalid length. [ 154.657830][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.667091][ T8267] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.676426][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.982957][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 155.055072][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 155.075548][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 155.157340][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 155.366424][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.373666][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.402841][ T8264] bridge_slave_0: entered allmulticast mode [ 155.423970][ T8264] bridge_slave_0: entered promiscuous mode [ 155.454296][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.491653][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 155.511204][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.527595][ T8264] bridge_slave_1: entered allmulticast mode [ 155.544169][ T8264] bridge_slave_1: entered promiscuous mode [ 155.726733][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.762527][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.908566][ T8264] team0: Port device team_slave_0 added [ 155.926201][ T8308] syzkaller1: entered promiscuous mode [ 155.931831][ T8308] syzkaller1: entered allmulticast mode [ 155.990359][ T8264] team0: Port device team_slave_1 added [ 156.122225][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 156.179809][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.184601][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 156.193753][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.314713][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.334122][ T8332] netlink: 108 bytes leftover after parsing attributes in process `syz.0.677'. [ 156.336902][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.371815][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.408381][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.637867][ T8264] hsr_slave_0: entered promiscuous mode [ 156.655387][ T8264] hsr_slave_1: entered promiscuous mode [ 156.672101][ T8264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.684525][ T8264] Cannot create hsr debugfs directory [ 156.724687][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'. [ 156.755124][ T5850] Bluetooth: hci2: command tx timeout [ 157.513194][ T8403] netlink: 'syz.4.689': attribute type 28 has an invalid length. [ 157.582627][ T8403] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 157.637909][ T8403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.689'. [ 157.682540][ T8403] netlink: 'syz.4.689': attribute type 11 has an invalid length. [ 157.721911][ T8413] pim6reg: entered allmulticast mode [ 157.793294][ T8415] netlink: 'syz.4.691': attribute type 6 has an invalid length. [ 157.893113][ T8264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.921024][ T8416] vxcan1: left allmulticast mode [ 157.926522][ T8416] pim6reg: left allmulticast mode [ 157.951176][ T8419] sch_fq: defrate 0 ignored. [ 158.087108][ T8422] nbd: couldn't find device at index 65536 [ 158.126040][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 158.147676][ T8264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.340154][ T8264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.436515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.590140][ T8264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.592349][ T8442] nbd: illegal input index 61504 [ 158.641717][ T8444] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 158.834590][ T5850] Bluetooth: hci2: command tx timeout [ 159.075294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.126223][ T8464] veth0: entered promiscuous mode [ 159.139438][ T8264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.166353][ T8264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.186747][ T8464] veth0: left promiscuous mode [ 159.195528][ T8264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.263328][ T8264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.336520][ T8472] Driver unsupported XDP return value 0 on prog (id 239) dev N/A, expect packet loss! [ 159.435354][ T8472] vcan0: entered promiscuous mode [ 159.440530][ T8472] vcan0: entered allmulticast mode [ 159.531638][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.588881][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.656104][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.663303][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.711570][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.718768][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.789200][ T8485] __nla_validate_parse: 3 callbacks suppressed [ 159.789222][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 159.935656][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 160.138015][ T8497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 160.201152][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 160.351709][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.446431][ T8510] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 160.556211][ T8264] veth0_vlan: entered promiscuous mode [ 160.599973][ T8264] veth1_vlan: entered promiscuous mode [ 160.717570][ T8264] veth0_macvtap: entered promiscuous mode [ 160.740169][ T8264] veth1_macvtap: entered promiscuous mode [ 160.792685][ T8526] netlink: 'syz.1.722': attribute type 8 has an invalid length. [ 160.803356][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.820209][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.839907][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.862424][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.894448][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.914775][ T5850] Bluetooth: hci2: command tx timeout [ 160.944435][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.961147][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.971694][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.982282][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.992817][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.008536][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.044086][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.063033][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.094983][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.105872][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.122001][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.129314][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 161.133418][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.151533][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.162522][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 161.172191][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.182629][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.196377][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.208641][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.273510][ T8264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.302985][ T8264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.320443][ T8264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.330325][ T8264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.342537][ T8546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.730'. [ 161.407051][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 161.630597][ T8553] netlink: 232 bytes leftover after parsing attributes in process `syz.1.733'. [ 161.815659][ T8560] netlink: 'syz.0.734': attribute type 2 has an invalid length. [ 162.013332][ T8572] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 162.097688][ T8569] syzkaller1: entered promiscuous mode [ 162.103408][ T8569] syzkaller1: entered allmulticast mode [ 162.316715][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 162.500831][ T8592] netlink: 'syz.4.746': attribute type 4 has an invalid length. [ 162.562293][ T8592] netlink: 'syz.4.746': attribute type 4 has an invalid length. [ 163.285889][ T8599] netlink: 68 bytes leftover after parsing attributes in process `syz.1.749'. [ 164.093684][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.104115][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.113551][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.127483][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.138496][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.491306][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 164.728869][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.736389][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.744015][ T8641] bridge_slave_0: entered allmulticast mode [ 164.752403][ T8641] bridge_slave_0: entered promiscuous mode [ 164.769985][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.778822][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.786785][ T8641] bridge_slave_1: entered allmulticast mode [ 164.795492][ T8641] bridge_slave_1: entered promiscuous mode [ 164.842682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.954627][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.098117][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.281076][ T8641] team0: Port device team_slave_0 added [ 165.312678][ T8641] team0: Port device team_slave_1 added [ 165.376241][ T8694] x_tables: duplicate underflow at hook 1 [ 165.436230][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.447351][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.507072][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.521165][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.528335][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.573052][ T8698] __nla_validate_parse: 3 callbacks suppressed [ 165.573075][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 165.588851][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.677824][ T8700] pimreg: entered allmulticast mode [ 165.853794][ T8641] hsr_slave_0: entered promiscuous mode [ 165.888180][ T8641] hsr_slave_1: entered promiscuous mode [ 165.901625][ T8641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.914252][ T8641] Cannot create hsr debugfs directory [ 166.197264][ T5850] Bluetooth: hci2: command tx timeout [ 166.523146][ T8734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.533084][ T8734] bond0: (slave bond1): Enslaving as an active interface with an up link [ 166.670951][ T8641] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.758513][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 166.771243][ T8751] vxlan1: entered promiscuous mode [ 166.779373][ T8751] vxlan1: entered allmulticast mode [ 166.803014][ T8751] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 166.912887][ T8641] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.943068][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 167.099883][ T8777] netlink: 300 bytes leftover after parsing attributes in process `syz.1.798'. [ 167.147898][ T8641] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.276305][ T8641] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.647162][ T8641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.685354][ T8641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.711806][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 167.732712][ T8641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.768547][ T8641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.096950][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.137954][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.190729][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.197983][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.235823][ T8826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'. [ 168.275184][ T5850] Bluetooth: hci2: command tx timeout [ 168.287955][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.295186][ T8392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.318224][ T8826] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 168.335338][ T8826] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 168.585249][ T8840] bridge_slave_0: left allmulticast mode [ 168.590965][ T8840] bridge_slave_0: left promiscuous mode [ 168.613018][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.631776][ T8840] bridge_slave_1: left allmulticast mode [ 168.640268][ T8840] bridge_slave_1: left promiscuous mode [ 168.649646][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.666745][ T8840] bond0: (slave bond_slave_0): Releasing backup interface [ 168.690090][ T8840] bond0: (slave bond_slave_1): Releasing backup interface [ 168.731586][ T8840] team0: Failed to send options change via netlink (err -105) [ 168.739993][ T8840] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 168.749813][ T8840] team0: Port device team_slave_0 removed [ 168.791009][ T8840] team0: Failed to send options change via netlink (err -105) [ 168.810729][ T8840] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 168.821708][ T8840] team0: Port device team_slave_1 removed [ 168.828821][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.837346][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.853794][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.863475][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.956158][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 169.085955][ T8850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.111737][ T8850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.323049][ T8850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.336232][ T8850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.477135][ T8850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.488079][ T8850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.549995][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.821'. [ 169.733615][ T8850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.756074][ T8850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.900586][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.990270][ T8850] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.000111][ T8850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.039469][ T8877] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 170.063070][ T8850] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.073980][ T8850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.127088][ T8850] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.154662][ T8850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.192300][ T8850] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.224928][ T8850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.266822][ T8641] veth0_vlan: entered promiscuous mode [ 170.317073][ T8641] veth1_vlan: entered promiscuous mode [ 170.354711][ T5850] Bluetooth: hci2: command tx timeout [ 170.445513][ T8641] veth0_macvtap: entered promiscuous mode [ 170.471286][ T8641] veth1_macvtap: entered promiscuous mode [ 170.521761][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.553177][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.581485][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.605681][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.616375][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.626994][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.637111][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.658587][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.670512][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.681647][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.692544][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.710907][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.738060][ T8900] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 170.746607][ T8900] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.831'. [ 170.765134][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.777169][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.804411][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.836097][ T8901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 170.845746][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.868454][ T8906] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 170.876637][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.892588][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.902886][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 170.912128][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.924609][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.941330][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.952323][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.978801][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.028385][ T8641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.058609][ T8641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.078328][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 171.096955][ T8641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.106946][ T8641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.323322][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 171.551958][ T8919] dccp_invalid_packet: P.Data Offset(0) too small [ 171.595548][ T8919] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 171.812764][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 171.830791][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 171.852057][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.843'. [ 171.915745][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 172.746501][ T8952] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20000 [ 172.771271][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 172.905244][ T8959] xt_policy: too many policy elements [ 173.240071][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.256320][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.266414][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.276933][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.285200][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.904622][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 174.103562][ T9007] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 174.112588][ T9007] macsec1: entered allmulticast mode [ 174.122228][ T9007] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 174.133891][ T9007] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 174.141213][ T9007] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 174.232268][ T9011] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.532210][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 174.565601][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.586692][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.605552][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.612914][ T8970] bridge_slave_0: entered allmulticast mode [ 174.626876][ T8970] bridge_slave_0: entered promiscuous mode [ 174.643098][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.656217][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.663647][ T8970] bridge_slave_1: entered allmulticast mode [ 174.680820][ T8970] bridge_slave_1: entered promiscuous mode [ 174.783903][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.809736][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.820087][ T9043] syzkaller1: entered promiscuous mode [ 174.826681][ T9043] syzkaller1: entered allmulticast mode [ 174.918756][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 175.129162][ T8970] team0: Port device team_slave_0 added [ 175.143507][ T9062] bridge_slave_0: left allmulticast mode [ 175.149665][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.194102][ T9062] bridge_slave_1: left allmulticast mode [ 175.200350][ T9062] bridge_slave_1: left promiscuous mode [ 175.208937][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.235645][ T9062] bond0: (slave bond_slave_0): Releasing backup interface [ 175.249597][ T9062] bond0: (slave bond_slave_1): Releasing backup interface [ 175.280397][ T9062] team0: Port device team_slave_0 removed [ 175.308714][ T9062] team0: Port device team_slave_1 removed [ 175.314870][ T5850] Bluetooth: hci2: command tx timeout [ 175.333872][ T9062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.356339][ T9062] bond0: (slave netdevsim0): Releasing backup interface [ 175.382853][ T9062] bond0: (slave bond1): Releasing backup interface [ 175.450031][ T9065] team0: Mode changed to "loadbalance" [ 175.470340][ T8970] team0: Port device team_slave_1 added [ 175.610661][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.624272][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.662120][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.685538][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.692625][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.733115][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.819488][ T8970] hsr_slave_0: entered promiscuous mode [ 175.827444][ T8970] hsr_slave_1: entered promiscuous mode [ 175.834194][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.852001][ T9088] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 175.852988][ T8970] Cannot create hsr debugfs directory [ 176.153460][ T9106] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 176.202266][ T9104] geneve2: entered promiscuous mode [ 176.209467][ T9104] geneve2: entered allmulticast mode [ 176.464935][ T9118] __nla_validate_parse: 13 callbacks suppressed [ 176.464957][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 176.488742][ T9118] netlink: 'syz.1.888': attribute type 10 has an invalid length. [ 176.563570][ T9118] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.653085][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.890'. [ 176.705818][ T9127] bridge: RTM_NEWNEIGH with invalid ether address [ 176.853271][ T8970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.990980][ T9143] xt_nfacct: accounting object `syz1' does not exists [ 177.063046][ T8970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.360926][ T8970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.372938][ T9159] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 177.395250][ T5850] Bluetooth: hci2: command tx timeout [ 177.402390][ T9159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.900'. [ 177.533294][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 177.603276][ T8970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.624615][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.901'. [ 177.640366][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.906'. [ 177.649473][ T9172] netlink: 92 bytes leftover after parsing attributes in process `syz.4.901'. [ 178.118334][ T8970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.179574][ T8970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.207234][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 178.231172][ T8970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.265069][ T8970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.416350][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 178.480915][ T9218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.918'. [ 178.631455][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.693816][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.737144][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.744308][ T8392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.798852][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.806224][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.474639][ T5850] Bluetooth: hci2: command tx timeout [ 179.605806][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.907345][ T8970] veth0_vlan: entered promiscuous mode [ 179.958381][ T8970] veth1_vlan: entered promiscuous mode [ 180.090812][ T8970] veth0_macvtap: entered promiscuous mode [ 180.140171][ T8970] veth1_macvtap: entered promiscuous mode [ 180.281366][ T9304] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 180.304939][ T9304] netlink: 'syz.4.944': attribute type 2 has an invalid length. [ 180.324190][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.350620][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.384735][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.404473][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.429355][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.454390][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.465528][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.491626][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.521048][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.548328][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.574373][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.584482][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.604748][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.621860][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.640867][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.670630][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.685529][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.702621][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.713537][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.732567][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.745603][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.767233][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.787086][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.802474][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.813978][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.830421][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.843453][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.907866][ T8970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.931363][ T8970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.943588][ T8970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.953107][ T8970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.970259][ T9331] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.994924][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.003921][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.082472][ T9335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.330535][ T9348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.620492][ T9361] __nla_validate_parse: 9 callbacks suppressed [ 181.620514][ T9361] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.960'. [ 181.637912][ T9361] netlink: zone id is out of range [ 181.643210][ T9361] netlink: zone id is out of range [ 181.650303][ T9361] netlink: get zone limit has 8 unknown bytes [ 181.668968][ T9359] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 181.683427][ T9361] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.960'. [ 181.690756][ T9363] netlink: 'syz.1.962': attribute type 2 has an invalid length. [ 181.708925][ T9361] netlink: zone id is out of range [ 181.715684][ T9359] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 181.720844][ T9361] netlink: zone id is out of range [ 181.733081][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 181.749909][ T9361] netlink: get zone limit has 8 unknown bytes [ 181.955763][ T9381] netlink: 192 bytes leftover after parsing attributes in process `syz.0.968'. [ 181.977717][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 182.045171][ T9383] batadv_slave_1: entered promiscuous mode [ 182.051047][ T9383] batadv_slave_1: entered allmulticast mode [ 182.192404][ T9392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'. [ 182.212049][ T9392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'. [ 183.217271][ T9407] netlink: 'syz.1.975': attribute type 10 has an invalid length. [ 183.249807][ T9409] netlink: 92 bytes leftover after parsing attributes in process `syz.4.976'. [ 183.283569][ T9409] netlink: 6 bytes leftover after parsing attributes in process `syz.4.976'. [ 183.312758][ T9409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.614521][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.623693][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.633058][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.633136][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 183.657066][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.672186][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.269377][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 184.632387][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.651227][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.663893][ T9421] bridge_slave_0: entered allmulticast mode [ 184.676745][ T9421] bridge_slave_0: entered promiscuous mode [ 184.731641][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.758521][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.782163][ T9421] bridge_slave_1: entered allmulticast mode [ 184.807161][ T9421] bridge_slave_1: entered promiscuous mode [ 184.851020][ T9475] veth0: entered promiscuous mode [ 184.917425][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.960262][ T9486] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 184.993201][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.133930][ T9475] veth0: left promiscuous mode [ 185.240181][ T9421] team0: Port device team_slave_0 added [ 185.269350][ T9421] team0: Port device team_slave_1 added [ 185.404188][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.439181][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.510113][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.545876][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.582362][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.653623][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.709029][ T9517] bridge1: entered promiscuous mode [ 185.714816][ T9517] bridge1: entered allmulticast mode [ 185.715103][ T5850] Bluetooth: hci2: command tx timeout [ 185.833700][ T9421] hsr_slave_0: entered promiscuous mode [ 185.850614][ T9421] hsr_slave_1: entered promiscuous mode [ 185.860930][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.875262][ T9421] Cannot create hsr debugfs directory [ 185.889178][ T9534] bridge_slave_0: left allmulticast mode [ 185.896043][ T9534] bridge_slave_0: left promiscuous mode [ 185.902053][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.932058][ T9534] bridge_slave_1: left allmulticast mode [ 185.947252][ T9534] bridge_slave_1: left promiscuous mode [ 185.961150][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.988989][ T9534] bond0: (slave bond_slave_0): Releasing backup interface [ 186.034018][ T9534] bond0: (slave bond_slave_1): Releasing backup interface [ 186.083412][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.091179][ T9534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.108702][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.129894][ T9534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.843048][ T9421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.955621][ T9573] xt_HMARK: spi-set and port-set can't be combined [ 187.017203][ T9421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.038377][ T9575] __nla_validate_parse: 10 callbacks suppressed [ 187.038398][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 187.078156][ T9579] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 187.214122][ T9579] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.317251][ T9421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.353534][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 187.369509][ T9578] delete_channel: no stack [ 187.376154][ T9579] syz.0.1026 (9579) used greatest stack depth: 19384 bytes left [ 187.517175][ T9421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.554735][ T9596] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.564062][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.573286][ T9602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.593623][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.620832][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.681049][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 187.794828][ T5850] Bluetooth: hci2: command tx timeout [ 187.818377][ T9615] sctp: [Deprecated]: syz.4.1036 (pid 9615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.818377][ T9615] Use struct sctp_sack_info instead [ 187.887047][ T9421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.928445][ T9421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 187.938738][ T9617] Bluetooth: MGMT ver 1.23 [ 187.996030][ T9421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.032172][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 188.042654][ T9421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.100796][ T9625] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 188.169985][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 188.404669][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.518316][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.560701][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.567958][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.591258][ T9651] netlink: 'syz.4.1048': attribute type 21 has an invalid length. [ 188.612072][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.619327][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.004010][ T9670] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 189.217224][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.387121][ T9692] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 189.500317][ T5888] hid-generic 0005:0B57:0005.0001: item fetching failed at offset 0/1 [ 189.510977][ T5888] hid-generic 0005:0B57:0005.0001: probe with driver hid-generic failed with error -22 [ 189.592586][ T9421] veth0_vlan: entered promiscuous mode [ 189.637211][ T9421] veth1_vlan: entered promiscuous mode [ 189.772999][ T9421] veth0_macvtap: entered promiscuous mode [ 189.810860][ T9421] veth1_macvtap: entered promiscuous mode [ 189.867805][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.904613][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.934962][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.957153][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.976830][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.993952][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.015247][ T5850] Bluetooth: hci2: command tx timeout [ 190.021002][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.031655][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.041659][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.052220][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.063423][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.073963][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.087641][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.247001][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.258285][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.273316][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.287957][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.298826][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.321882][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.343247][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.357392][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.376650][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.393320][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.409296][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.457817][ T9421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.494980][ T9421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.531324][ T9421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.548339][ T9421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.893921][ T9754] bridge3: entered promiscuous mode [ 190.913825][ T9754] bridge3: entered allmulticast mode [ 190.998677][ T9757] bridge4: entered promiscuous mode [ 191.026991][ T9757] bridge4: entered allmulticast mode [ 191.519381][ T9797] x_tables: duplicate underflow at hook 1 [ 192.624173][ T9812] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 192.635378][ T9808] nftables ruleset with unbound chain [ 192.636919][ T9813] __nla_validate_parse: 14 callbacks suppressed [ 192.636941][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 192.726602][ T9812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.817026][ T9817] ip6erspan0: entered promiscuous mode [ 192.875711][ T9817] bond2: (slave ip6erspan0): making interface the new active one [ 192.898081][ T9817] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 192.964275][ T9823] xt_bpf: check failed: parse error [ 193.391373][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.401130][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.412374][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.441861][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.451158][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.744464][ T9868] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 194.112993][ T9885] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 194.182217][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 194.329538][ T9901] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 194.360494][ T9901] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1120'. [ 194.471592][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 194.492143][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 194.652461][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.680962][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.690929][ T9848] bridge_slave_0: entered allmulticast mode [ 194.716739][ T9848] bridge_slave_0: entered promiscuous mode [ 194.741684][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.769293][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.787645][ T9848] bridge_slave_1: entered allmulticast mode [ 194.806140][ T9848] bridge_slave_1: entered promiscuous mode [ 194.913251][ T9931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.937865][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.984033][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.994946][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 195.148001][ T9848] team0: Port device team_slave_0 added [ 195.175681][ T9848] team0: Port device team_slave_1 added [ 195.257347][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 195.312656][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 195.315477][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.342341][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.343619][ T9953] netlink: 'syz.1.1135': attribute type 7 has an invalid length. [ 195.378274][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.407363][ T9952] netlink: 'syz.1.1135': attribute type 7 has an invalid length. [ 195.423845][ T9952] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1135'. [ 195.441558][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.449720][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.477128][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.485721][ T5850] Bluetooth: hci2: command tx timeout [ 195.504582][ T9953] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1135'. [ 195.592935][ T9959] 8021q: VLANs not supported on nr0 [ 195.624648][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1136'. [ 195.699201][ T9848] hsr_slave_0: entered promiscuous mode [ 195.707036][ T9848] hsr_slave_1: entered promiscuous mode [ 195.713474][ T9848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.722031][ T9848] Cannot create hsr debugfs directory [ 195.728007][ T9970] 8021q: VLANs not supported on nr0 [ 195.862190][ T9976] xt_cgroup: xt_cgroup: no path or classid specified [ 195.899618][ T9975] gtp0: entered promiscuous mode [ 195.905823][ T9975] gtp0: entered allmulticast mode [ 195.930969][ T9983] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.204066][ T9997] netlink: 'syz.4.1148': attribute type 13 has an invalid length. [ 196.276205][ T9997] erspan1: entered promiscuous mode [ 196.281925][ T9997] erspan1: entered allmulticast mode [ 196.424827][T10005] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 196.500824][ T9848] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.579490][T10007] xt_CT: No such helper "pptp" [ 196.664116][ T9848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.737856][T10021] netlink: 'syz.2.1154': attribute type 6 has an invalid length. [ 196.754098][T10021] netlink: 'syz.2.1154': attribute type 5 has an invalid length. [ 196.789321][ T9848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.894065][ T9848] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.297584][ T9848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.361417][ T9848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.402185][ T9848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.452863][ T9848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.561703][ T5850] Bluetooth: hci2: command tx timeout [ 197.756519][T10066] netlink: 'syz.4.1167': attribute type 10 has an invalid length. [ 197.798092][T10066] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 197.826530][T10066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.839049][T10068] sctp: [Deprecated]: syz.4.1167 (pid 10068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.839049][T10068] Use struct sctp_sack_info instead [ 199.638509][ T5850] Bluetooth: hci2: command tx timeout [ 199.972472][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.032820][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.082224][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.089427][ T8392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.235888][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.243141][ T8392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.432504][T10116] tipc: Started in network mode [ 200.449133][T10116] tipc: Node identity 9239017bc481, cluster identity 4711 [ 200.476570][T10116] tipc: Enabled bearer , priority 0 [ 200.620260][T10118] tipc: Disabling bearer [ 200.645518][T10123] __nla_validate_parse: 7 callbacks suppressed [ 200.645538][T10123] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1183'. [ 200.701188][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 201.130474][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.311362][ T9848] veth0_vlan: entered promiscuous mode [ 201.354207][ T9848] veth1_vlan: entered promiscuous mode [ 201.415274][ T9848] veth0_macvtap: entered promiscuous mode [ 201.430175][ T9848] veth1_macvtap: entered promiscuous mode [ 201.462225][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.475064][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.487072][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.505145][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.524491][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.535711][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.556521][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.588869][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.624744][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.644550][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.667544][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.694515][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.714873][ T5850] Bluetooth: hci2: command tx timeout [ 201.715602][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.744621][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.760933][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.794213][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.818779][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.854481][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.892847][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.913070][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.925037][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.949226][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.983412][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.004694][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.015804][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.026154][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.037920][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.060395][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.145303][ T9848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.178168][ T9848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.211556][ T9848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.228142][ T9848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.155289][T10212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1211'. [ 203.531677][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1218'. [ 204.800330][T10250] tap0: tun_chr_ioctl cmd 2148553947 [ 204.812482][T10251] xt_CT: No such helper "snmp_trap" [ 204.935747][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 205.203659][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.226252][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.245120][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.253566][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.264002][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.404943][T10274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1229'. [ 205.804983][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'. [ 205.829639][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 205.921556][T10268] chnl_net:caif_netlink_parms(): no params data found [ 205.946606][T10306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1237'. [ 206.016991][T10317] nbd: couldn't find a device at index 8960 [ 206.278361][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.296310][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.331803][T10268] bridge_slave_0: entered allmulticast mode [ 206.343336][T10268] bridge_slave_0: entered promiscuous mode [ 206.366659][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.383088][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.403613][T10268] bridge_slave_1: entered allmulticast mode [ 206.409853][T10333] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 206.409878][T10333] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 206.409908][T10333] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1243'. [ 206.444612][T10268] bridge_slave_1: entered promiscuous mode [ 206.703822][T10336] xt_CT: No such helper "snmp_trap" [ 206.729834][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.758970][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.794548][T10344] netlink: 'syz.1.1247': attribute type 11 has an invalid length. [ 206.804191][T10344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1247'. [ 206.821165][T10346] dccp_invalid_packet: P.Data Offset(100) too large [ 207.007755][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 207.036865][T10268] team0: Port device team_slave_0 added [ 207.115196][T10268] team0: Port device team_slave_1 added [ 207.325048][ T5850] Bluetooth: hci2: command tx timeout [ 207.346611][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.353616][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.428832][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.481778][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.498933][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.526515][T10380] x_tables: duplicate underflow at hook 1 [ 207.562454][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.771072][T10387] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 207.906165][T10268] hsr_slave_0: entered promiscuous mode [ 207.916356][T10268] hsr_slave_1: entered promiscuous mode [ 207.931660][T10268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.942912][T10268] Cannot create hsr debugfs directory [ 208.059955][T10400] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 208.092712][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 208.358901][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 208.538754][T10268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.698052][T10268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.740237][T10432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 208.752876][T10432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.767669][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 208.804088][T10268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.929638][T10444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 208.952975][T10444] netlink: 'syz.0.1276': attribute type 7 has an invalid length. [ 208.958261][T10268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.982413][T10444] netlink: 'syz.0.1276': attribute type 8 has an invalid length. [ 209.210986][T10457] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.349991][T10460] netlink: 'syz.4.1279': attribute type 10 has an invalid length. [ 209.387260][T10460] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 209.394544][ T5850] Bluetooth: hci2: command tx timeout [ 209.406323][T10460] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 209.418974][T10268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.520391][T10268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.654711][T10268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.807265][T10268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.116877][T10487] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.255456][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.760771][T10268] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.805570][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.812802][ T8392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.846607][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.853814][ T8392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.921478][T10509] __nla_validate_parse: 6 callbacks suppressed [ 210.921500][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 210.982516][T10516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1294'. [ 211.233408][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 211.461120][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.475198][ T5850] Bluetooth: hci2: command tx timeout [ 211.568606][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 211.699492][T10268] veth0_vlan: entered promiscuous mode [ 211.718425][T10547] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1305'. [ 211.747004][T10268] veth1_vlan: entered promiscuous mode [ 211.822864][T10551] tipc: Started in network mode [ 211.828199][T10551] tipc: Node identity 080211000001, cluster identity 4711 [ 211.855623][T10551] tipc: Enabled bearer , priority 0 [ 211.876852][T10555] syzkaller0: entered allmulticast mode [ 211.940696][T10549] syzkaller0 (unregistering): left allmulticast mode [ 212.017914][T10563] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 212.031508][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 212.170005][T10268] veth0_macvtap: entered promiscuous mode [ 212.211116][T10268] veth1_macvtap: entered promiscuous mode [ 212.286231][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.309855][T10576] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 212.309871][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.309895][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.341030][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.351160][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.364216][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.374200][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.386519][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.397129][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.418359][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.435449][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.448020][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.458916][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.469973][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.480669][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.491965][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.523383][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.533146][T10576] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 212.581648][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.603115][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.629237][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.644845][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.655463][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.666542][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.686294][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.697268][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.707806][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.718833][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.728974][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.739959][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.759501][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.780157][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.799142][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.854550][ T7355] tipc: Node number set to 134418688 [ 212.925509][T10268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.949775][T10268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.971087][T10268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.985129][T10268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.028614][T10612] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 213.337233][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 213.350336][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 213.524498][T10632] xt_l2tp: missing protocol rule (udp|l2tpip) [ 213.555469][ T5850] Bluetooth: hci2: command tx timeout [ 213.782115][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 215.338819][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1335'. [ 215.370923][T10662] gre0: entered allmulticast mode [ 215.893679][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.914662][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.924563][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.935124][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.943120][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.017791][T10689] syzkaller0: entered promiscuous mode [ 216.020656][T10691] __nla_validate_parse: 1 callbacks suppressed [ 216.020677][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 216.031810][T10689] syzkaller0: entered allmulticast mode [ 216.059007][T10689] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 216.076850][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 216.739666][T10686] chnl_net:caif_netlink_parms(): no params data found [ 216.850256][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 216.856715][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 216.858450][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 217.041840][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'. [ 217.074244][T10747] xt_hashlimit: max too large, truncated to 1048576 [ 217.099222][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 217.242248][T10756] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.034535][ T5850] Bluetooth: hci2: command tx timeout [ 218.343845][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'. [ 219.393679][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.431665][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.454860][T10686] bridge_slave_0: entered allmulticast mode [ 219.463148][T10686] bridge_slave_0: entered promiscuous mode [ 219.495845][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.503210][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.519220][T10686] bridge_slave_1: entered allmulticast mode [ 219.533223][T10686] bridge_slave_1: entered promiscuous mode [ 219.669183][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.703773][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 219.708279][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.784071][T10806] bridge_slave_1: left allmulticast mode [ 219.816833][T10806] bridge_slave_1: left promiscuous mode [ 219.842072][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.899132][T10806] bridge_slave_0: left allmulticast mode [ 219.932220][T10806] bridge_slave_0: left promiscuous mode [ 219.949755][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.992198][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 220.025402][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 220.042244][T10820] netlink: 'syz.0.1370': attribute type 12 has an invalid length. [ 220.058688][T10820] netlink: 'syz.0.1370': attribute type 11 has an invalid length. [ 220.114207][T10686] team0: Port device team_slave_0 added [ 220.120120][ T5850] Bluetooth: hci2: command tx timeout [ 220.146092][T10686] team0: Port device team_slave_1 added [ 220.299542][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.319593][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.325883][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 220.361413][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.412785][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.427165][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.468342][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.579572][T10846] sctp: [Deprecated]: syz.1.1377 (pid 10846) Use of int in max_burst socket option. [ 220.579572][T10846] Use struct sctp_assoc_value instead [ 220.687918][T10686] hsr_slave_0: entered promiscuous mode [ 220.708037][T10686] hsr_slave_1: entered promiscuous mode [ 220.724251][T10686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.737939][T10686] Cannot create hsr debugfs directory [ 220.944560][T10858] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.103079][T10686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.108754][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 221.122767][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 221.147650][T10865] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 221.247897][T10686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.365112][T10878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1385'. [ 221.458759][T10686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.492685][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 221.518835][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 221.632964][T10686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.885485][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 222.034008][T10914] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 222.084945][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 222.101872][T10686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.198011][ T5850] Bluetooth: hci2: command tx timeout [ 222.226706][T10686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.252342][T10915] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.343979][T10686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.365051][T10686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.399813][T10927] ip6gre1: entered promiscuous mode [ 222.456413][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 222.628293][T10934] trusted_key: syz.1.1401 sent an empty control message without MSG_MORE. [ 222.811910][T10944] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1405'. [ 222.999314][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.086612][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.128920][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.136162][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.167545][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.174801][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.438860][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 223.749182][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.054921][T10686] veth0_vlan: entered promiscuous mode [ 224.118427][T10686] veth1_vlan: entered promiscuous mode [ 224.191299][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.205812][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.220320][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.229281][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.240157][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.272751][T10992] sctp: [Deprecated]: syz.4.1420 (pid 10992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.272751][T10992] Use struct sctp_sack_info instead [ 224.302926][ T5850] Bluetooth: hci2: command tx timeout [ 224.329690][T10686] veth0_macvtap: entered promiscuous mode [ 224.402651][T10686] veth1_macvtap: entered promiscuous mode [ 224.537815][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.575109][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.602122][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.626395][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.648248][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.669114][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.689974][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.711005][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.736641][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.774985][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.794465][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.808485][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.823203][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.834115][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.844621][ T8398] wlan0: Trigger new scan to find an IBSS to join [ 224.852390][ T8398] ------------[ cut here ]------------ [ 224.857968][ T8398] WARNING: CPU: 0 PID: 8398 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x735/0x7c0 [ 224.868478][ T8398] Modules linked in: [ 224.872748][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: kworker/u8:13 Not tainted 6.14.0-syzkaller-13335-g7f1ff1b38a7c #0 PREEMPT(full) [ 224.885315][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.895691][ T8398] Workqueue: events_unbound cfg80211_wiphy_work [ 224.902008][ T8398] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 224.908767][ T8398] Code: e8 e0 32 2b f6 eb 05 e8 d9 32 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ca 32 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 bc 32 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 05 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 224.928708][ T8398] RSP: 0018:ffffc90004617880 EFLAGS: 00010293 [ 224.934913][ T8398] RAX: ffffffff8b982484 RBX: 0000000000000000 RCX: ffff888056ca1e00 [ 224.943306][ T8398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.951673][ T8398] RBP: ffffc90004617ac0 R08: ffffffff8b98229e R09: fffffbfff1d7a978 [ 224.959749][ T8398] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: 0000000000000006 [ 224.967871][ T8398] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888027700e80 [ 224.975976][ T8398] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 224.987114][ T8398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.993754][ T8398] CR2: 000055558d0f7808 CR3: 000000007bdf8000 CR4: 00000000003526f0 [ 225.011160][ T8398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.020798][ T8398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.029043][ T8398] Call Trace: [ 225.032353][ T8398] [ 225.035158][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.035366][ T8398] ieee80211_ibss_work+0xe2b/0x14e0 [ 225.051007][ T8398] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 225.057129][ T8398] ? lockdep_hardirqs_on+0x9d/0x150 [ 225.062386][ T8398] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 225.068175][ T8398] ? ieee80211_iface_work+0x1050/0x1100 [ 225.073766][ T8398] ? rcu_is_watching+0x15/0xb0 [ 225.079121][ T8398] cfg80211_wiphy_work+0x2f0/0x490 [ 225.084478][ T8398] ? process_scheduled_works+0x9cb/0x18e0 [ 225.085443][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.090218][ T8398] process_scheduled_works+0xac3/0x18e0 [ 225.105854][ T8398] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.111894][ T8398] ? assign_work+0x367/0x3d0 [ 225.116744][ T8398] worker_thread+0x870/0xd50 [ 225.121392][ T8398] ? __kthread_parkme+0x1a8/0x200 [ 225.126538][ T8398] ? __pfx_worker_thread+0x10/0x10 [ 225.131693][ T8398] kthread+0x7b7/0x940 [ 225.135873][ T8398] ? __pfx_worker_thread+0x10/0x10 [ 225.141020][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.145754][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.149483][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.150366][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.165865][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.170496][ T8398] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.175779][ T8398] ? lockdep_hardirqs_on+0x9d/0x150 [ 225.181017][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.185680][ T8398] ret_from_fork+0x4b/0x80 [ 225.190289][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.192377][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.194949][ T8398] ret_from_fork_asm+0x1a/0x30 [ 225.194997][ T8398] [ 225.195022][ T8398] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.195044][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: kworker/u8:13 Not tainted 6.14.0-syzkaller-13335-g7f1ff1b38a7c #0 PREEMPT(full) [ 225.195071][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.195087][ T8398] Workqueue: events_unbound cfg80211_wiphy_work [ 225.195122][ T8398] Call Trace: [ 225.195132][ T8398] [ 225.195141][ T8398] dump_stack_lvl+0x241/0x360 [ 225.195177][ T8398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.195209][ T8398] ? __pfx__printk+0x10/0x10 [ 225.195246][ T8398] ? vscnprintf+0x5d/0x90 [ 225.195270][ T8398] panic+0x349/0x880 [ 225.195301][ T8398] ? __warn+0x174/0x4d0 [ 225.195331][ T8398] ? __pfx_panic+0x10/0x10 [ 225.195371][ T8398] ? ret_from_fork_asm+0x1a/0x30 [ 225.195399][ T8398] __warn+0x344/0x4d0 [ 225.195427][ T8398] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 225.195458][ T8398] report_bug+0x2b3/0x500 [ 225.195481][ T8398] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 225.195508][ T8398] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 225.195533][ T8398] ? ieee80211_request_ibss_scan+0x737/0x7c0 [ 225.195559][ T8398] handle_bug+0x89/0x170 [ 225.195596][ T8398] exc_invalid_op+0x1a/0x50 [ 225.195624][ T8398] asm_exc_invalid_op+0x1a/0x20 [ 225.195645][ T8398] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 225.195672][ T8398] Code: e8 e0 32 2b f6 eb 05 e8 d9 32 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ca 32 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 bc 32 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 05 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 225.195691][ T8398] RSP: 0018:ffffc90004617880 EFLAGS: 00010293 [ 225.195711][ T8398] RAX: ffffffff8b982484 RBX: 0000000000000000 RCX: ffff888056ca1e00 [ 225.195727][ T8398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.195740][ T8398] RBP: ffffc90004617ac0 R08: ffffffff8b98229e R09: fffffbfff1d7a978 [ 225.195757][ T8398] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: 0000000000000006 [ 225.195772][ T8398] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888027700e80 [ 225.195797][ T8398] ? ieee80211_request_ibss_scan+0x54e/0x7c0 [ 225.195821][ T8398] ? ieee80211_request_ibss_scan+0x734/0x7c0 [ 225.195872][ T8398] ieee80211_ibss_work+0xe2b/0x14e0 [ 225.195894][ T8398] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 225.195916][ T8398] ? lockdep_hardirqs_on+0x9d/0x150 [ 225.195954][ T8398] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 225.195993][ T8398] ? ieee80211_iface_work+0x1050/0x1100 [ 225.196022][ T8398] ? rcu_is_watching+0x15/0xb0 [ 225.196053][ T8398] cfg80211_wiphy_work+0x2f0/0x490 [ 225.196093][ T8398] ? process_scheduled_works+0x9cb/0x18e0 [ 225.196121][ T8398] process_scheduled_works+0xac3/0x18e0 [ 225.196184][ T8398] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.196224][ T8398] ? assign_work+0x367/0x3d0 [ 225.196257][ T8398] worker_thread+0x870/0xd50 [ 225.196303][ T8398] ? __kthread_parkme+0x1a8/0x200 [ 225.196337][ T8398] ? __pfx_worker_thread+0x10/0x10 [ 225.196366][ T8398] kthread+0x7b7/0x940 [ 225.196400][ T8398] ? __pfx_worker_thread+0x10/0x10 [ 225.196429][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196459][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196491][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196521][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196552][ T8398] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.196574][ T8398] ? lockdep_hardirqs_on+0x9d/0x150 [ 225.196609][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196642][ T8398] ret_from_fork+0x4b/0x80 [ 225.196667][ T8398] ? __pfx_kthread+0x10/0x10 [ 225.196699][ T8398] ret_from_fork_asm+0x1a/0x30 [ 225.196741][ T8398] [ 225.206108][ T8398] Kernel Offset: disabled