last executing test programs: 52.828769901s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 42.470907419s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 32.607934388s ago: executing program 2 (id=1447): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x24020400) bind$rds(r0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 32.48664939s ago: executing program 2 (id=1448): socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)={0x4a0, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x474, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 32.303171705s ago: executing program 2 (id=1451): socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0xffffff48}}, 0x0, 0x4, 0x0, 0x0, 0x8a}, 0x9c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) sendfile(r0, r3, 0x0, 0x40000000000004) socket$netlink(0x10, 0x3, 0x400000000000004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0xffffff48}}, 0x0, 0x4, 0x0, 0x0, 0x8a}, 0x9c) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) (async) sendfile(r0, r3, 0x0, 0x40000000000004) (async) 32.115780032s ago: executing program 2 (id=1453): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x44}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x24000880) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r0}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = epoll_create1(0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000008c0)={0x2001}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02b7108a02ae4263f90876c7b5ff000000040000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x28, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x736}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffec}, @ldst={0x1, 0x0, 0xb1ba25a415559b7a, 0x8, 0x2, 0x100, 0x4}, @generic={0x94, 0x0, 0x1, 0x40}, @ldst={0x1, 0x3, 0x0, 0x8, 0x8, 0x0, 0xfffffffffffffff0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x1, 0x2, 0x4, 0xc, 0x5, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x98, 0x4d, &(0x7f0000000400)=""/77, 0x41100, 0x33, '\x00', r4, @fallback=0x1d, r5, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x4, 0x0, 0xa}, 0x10, 0x0, r0, 0x0, &(0x7f0000000640)=[r6, r7, r8, 0xffffffffffffffff, r9, r12], 0x0, 0x10, 0x2, @void, @value}, 0x94) 31.739601288s ago: executing program 2 (id=1456): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x2d) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 31.540980806s ago: executing program 2 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@null, @null, @rose, @bcast, @remote, @bcast, @default, @default]}, &(0x7f0000000100)=0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000a40)={{r2}, r6, 0x4, @inherit={0x60, &(0x7f0000001a40)=ANY=[@ANYBLOB="01000000000000000300000000000000a01d002000000000020000000000000000000000000000000900000000000000004b251a7300000080000000000000000b000000000000000b00000000000900090000000000000001000000000000006c2b7906020435bc5b85939eab5f6e5772bea838523347e4c33115e622ba00d37c8290d08c17df1b52f1bb61f4e1466ff0371a"]}, @subvolid=0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@null, @null, @rose, @bcast, @remote, @bcast, @default, @default]}, &(0x7f0000000100)=0x48) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000a40)={{r2}, r6, 0x4, @inherit={0x60, &(0x7f0000001a40)=ANY=[@ANYBLOB="01000000000000000300000000000000a01d002000000000020000000000000000000000000000000900000000000000004b251a7300000080000000000000000b000000000000000b00000000000900090000000000000001000000000000006c2b7906020435bc5b85939eab5f6e5772bea838523347e4c33115e622ba00d37c8290d08c17df1b52f1bb61f4e1466ff0371a"]}, @subvolid=0x7fff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 27.60557863s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 20.63230185s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 16.502738501s ago: executing program 32 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@null, @null, @rose, @bcast, @remote, @bcast, @default, @default]}, &(0x7f0000000100)=0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000a40)={{r2}, r6, 0x4, @inherit={0x60, &(0x7f0000001a40)=ANY=[@ANYBLOB="01000000000000000300000000000000a01d002000000000020000000000000000000000000000000900000000000000004b251a7300000080000000000000000b000000000000000b00000000000900090000000000000001000000000000006c2b7906020435bc5b85939eab5f6e5772bea838523347e4c33115e622ba00d37c8290d08c17df1b52f1bb61f4e1466ff0371a"]}, @subvolid=0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@null, @null, @rose, @bcast, @remote, @bcast, @default, @default]}, &(0x7f0000000100)=0x48) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000a40)={{r2}, r6, 0x4, @inherit={0x60, &(0x7f0000001a40)=ANY=[@ANYBLOB="01000000000000000300000000000000a01d002000000000020000000000000000000000000000000900000000000000004b251a7300000080000000000000000b000000000000000b00000000000900090000000000000001000000000000006c2b7906020435bc5b85939eab5f6e5772bea838523347e4c33115e622ba00d37c8290d08c17df1b52f1bb61f4e1466ff0371a"]}, @subvolid=0x7fff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 11.758005585s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 4.332072701s ago: executing program 3 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x16, 0x0, &(0x7f0000000380)="0990ddc848000092733a80c6907c26f0e5ab52894ed7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x83, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x20043, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f00000001c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000200)='hybla\x00', 0x6) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) shutdown(r8, 0x2) 3.794408622s ago: executing program 3 (id=1616): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffffd, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.696741484s ago: executing program 1 (id=1617): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xfffffffe, 0xfffffffd, 0x1, 0x2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000100)="acfd4331", 0x4}, {&(0x7f0000000200)="e5974f3c00b2c515931fb6d33f46d4e47db5612a6282df6791c7c81d92", 0x1d}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xe}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xe3e}]}]}}}], 0x48}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x26}, 0x1, 0x0, 0x0, 0x44990}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x50, "cd31cdb46585b8312161f3d41f9b7b74de4ca76b761e2fdccee2fdea916367c7a2d7bcca4ee7f239c7c33c60cf701e0a4f0e3baf27ef812104b72cbe07fcba4c373802d20693f55fdb8ed25980f8737f"}, &(0x7f0000000140)=0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r6, 0xc5}, &(0x7f00000001c0)=0x8) 3.616494223s ago: executing program 3 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x486}], 0x1}}], 0x1, 0x0) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$sock(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x703, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18010}, 0x0) 3.366135058s ago: executing program 1 (id=1620): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffe0}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) socket$inet6(0xa, 0x800, 0x2000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x401, 0x4, 0xfff, 0x3, 0x8}}}}}, 0x0) 3.136827712s ago: executing program 1 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, &(0x7f0000001280)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @empty, 0x401}, 0x6f) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket(0x840000000002, 0x3, 0xff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="5f4845e454d045d203b51ec84adda9702a85314388328a9934ea95b377eaf6652c94a72c1fc38109250cf80f377e581bab151fd0a09650d110b5dc5c9aa4c90e4b5701e4", 0x44}], 0x1}}], 0x2, 0xc8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/95, 0x5f}, {0x0}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000004c0)=0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@delsa={0xdc, 0x11, 0x800, 0x70bd2b, 0x25dfdbfc, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2, 0x3c}, [@policy={0xac, 0x7, {{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x0, 0x4e22, 0x1ff8, 0xa, 0x80, 0x80, 0x0, r4, r7}, {0x401, 0x433, 0x9, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x6, 0x4, 0x6}, {0x7fff, 0x3ff, 0xe8a64d7, 0x7f}, 0x7, 0x6e6bb3, 0x2, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x44}}, 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 3.134797728s ago: executing program 5 (id=1622): socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x24004040) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001bc0)={@fallback, 0xffffffffffffffff, 0x2, 0x34, 0x0, @void, @void, @void, @value}, 0x20) socket$kcm(0xa, 0x5, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x38a4}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0xd}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7aca4f2ed86b65e043d18ac28837aac77b8761c2316b1bf4"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.843484644s ago: executing program 0 (id=1624): ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0xffffffffffffff98, &(0x7f0000000240)="e1b3c9d626601c02645c3357cc28ce27201fd76ebf5400750e47f69c1e350045ca119cf2e4f3f46c2a71", 0x10, 0x4, 0x3, 0x8, 0x1d, 0x2, 0x2, 'syz0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d9b4a47b12"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000838c54730b263279e0f8841fc297aba43eb63c74b85f1aba4f30386ea5d3696ecb24b3f0a3759f08cc9a020c998e82ba5cd0d7f4067f21ff6864", @ANYRES16=r3, @ANYBLOB="0100000000010000000003000000400001802c0004001400010002004e21e000000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000001", 0x1c) unshare(0x22020600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @loopback, 0xf}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2.558770923s ago: executing program 0 (id=1625): r0 = socket(0x10, 0x3, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0, 0x3b, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl(r3, 0x8916, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2b, 0x25dfdbfb, {0x7, r2}, ["", "", "", "", "", "", "", ""]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r4, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0) 2.421091963s ago: executing program 3 (id=1626): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d0000000004000000030000000000000000000006040000000400000000000008f4ff0000000000005f"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x1, 0x10012, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) setsockopt(r2, 0x10d, 0x11, &(0x7f0000000040)="001dd0d6", 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000004780)=""/198, 0xc6}], 0x2}, 0x1}], 0x1, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) 2.222970755s ago: executing program 1 (id=1627): r0 = socket(0x10, 0x803, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, 0x0, 0xffffffffffffffff, {}, 0xfe}, 0x18) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25110000000800060000000000080006000100000001000300000051b37a0f0144227aaeb74242d9120759681afacef2e5b12cf0c0a55dbcb3cdbaa71f7a5246e645dfe9b39d90bc337caa68af561819454f868721ba6bfca7022757b736a651cf82ec63620c5fcb040dd3a6de58e00b5aba381e9b87f87d3bdf3b04c4130df47204f87f5110ded3e4a85cd998da6427c183a8756c763b49abb14adca9d1ac2afec82b000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r6, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000600)) sendmsg$BATADV_CMD_SET_VLAN(r6, 0x0, 0x8004) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c00018014ef671f6ad928ce94000000000000000000000014000400ff02000000000000000000000000000108000540000000000c00048008000140000000000900010073797a3100000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x2400c010) 2.214935764s ago: executing program 0 (id=1628): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x7, 0x0, 0x20}, @mpls={[], @ipv4=@igmp={{0x8, 0x4, 0x0, 0x8, 0x28, 0x64, 0x0, 0xe, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x0, [{@multicast1, 0xfaf}]}]}}, {0x14, 0xc, 0x0, @local}}}}, 0x36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x863}]}}]}, 0x38}}, 0x44080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 2.029273534s ago: executing program 5 (id=1629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.933848393s ago: executing program 5 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) unshare(0x24020400) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062b2c25fe80000000000010dc8b850f238466f8ffffff000000ad6e911b51818a3262d41ff7b418e4604ba2f384", 0x32}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802ee5afbf24fbcccc554cd9761e81b8dad8a2018544a3f855"], 0x30}], 0x1}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x68}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x8, 0x5}, {0x2, 0x4, 0x4, 0xc}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1.847781546s ago: executing program 0 (id=1631): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000100)={'veth0_macvtap\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454da, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="2d6e65745f7072696f202b6370757365742005b73dc61ccf84ee1f91a11800c5e6dc0302f1c097a38f9a1ce563b69187b140092e9966c4c42ad4e265c7d5fa8eee"], 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000180), &(0x7f0000000380)='%pB \x00'}, 0x20) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="9ec6b88e5298d36ab54833d215d5e3f364f129abf17c47e20061671a9d2b4b24903ecae7a97f7f66e2c0926c1789bd8846704ab95e92b9171f67ffe364d47b747e2ef77a2e365e220321308cfae37b381f2672fd41ebc3869b9afeff8b6ce72f24222d345fb2c52deed318b7370bc400000000000000"], 0x28}, 0x1, 0x6c00}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c9d45785c3139289a3157c1fd3afa7ab2eaf3f3d6171bcfa5a954cdca7dc8812389b9688b576e71dd48b8930017bc4dd8307a75ac3d8d50f5b12da7e36a9b091c868604c3b1677d799814e8ac1bf62ae97e82f035d5b4c0db461294ad912fa3b4ea8a5c61364c7816a0cc6f43d0571cfb63c2c32ec96f4e6ddfce307594a1167b49a7abef304e7ae704bd2a876f518dc07f5163851541d226de6d311890bc10765490df7ebdbface409755529aacc8c9da3fb526530254bf75161b023", @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000500"], 0x38}}, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x4) (async) r10 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r10, &(0x7f0000000300)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058816cad666c9ca33934bece072495094824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe808005300fff5dd000000100001008aa6a9b471a8ebb1224e0000", 0x65}], 0x1) (async) writev(r10, &(0x7f0000000300)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058816cad666c9ca33934bece072495094824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe808005300fff5dd000000100001008aa6a9b471a8ebb1224e0000", 0x65}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r11}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r11}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1.83386423s ago: executing program 4 (id=912): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003240)={@in={{0x2, 0x4e23, @loopback}}, 0xaa, 0x0, 0x48, 0x0, "9e62d38162d1a425146c79037c8d4898d6a94f453da1788337c9c9b9ae7339d4fae6277a84865228acf356c070f9404400000000000002007c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) (async) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) (async) close(0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0xd, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="141100001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a01000008000000420000003940000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x6d) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 1.78997601s ago: executing program 1 (id=1632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) unshare(0x22020600) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 425.310524ms ago: executing program 0 (id=1633): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x1000) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 424.559153ms ago: executing program 1 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/212, 0x0, 0xd4, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x290c36703dfe8012) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002e00000018000180140002"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0xfffffffe, {{0x32}, {@val={0x8, 0x117, 0x37}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) 404.328837ms ago: executing program 5 (id=1635): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0xff, 0xff, 'tunl0\x00', 'batadv0\x00', {}, {}, 0x68, 0x0, 0xc0}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x100, 0x3}}}, {{@ip={@multicast1, @loopback, 0xffffff00, 0xff, 'hsr0\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x100, 0xb, [0x3a, 0xb, 0x6, 0xa, 0x1a, 0xd, 0x1a, 0x3b, 0x36, 0x3b, 0x38, 0x12, 0x1c, 0xf, 0x29, 0x3a], 0x2, 0x5214, 0x823f}}}, {{@ip={@private=0xa010102, @multicast1, 0xff000000, 0x0, 'geneve0\x00', '\x00', {}, {}, 0x5e, 0x1, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="03000000000000000a004e2100000002fc020000000000000000000000000001000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbaec53c0b7f33d25f3f000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2000000008fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000080012001000000000000000000000000000205000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000000cafc010000000000000000000000000001fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000007ff20010000000000000000000000000001f5160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000fe8000000000000000000000000000aa070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003bff873883e1eba7c6430000"], 0x310) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xb1cf, 0x8, 0xfb, 0x6}, {0x9, 0x81, 0x93}, {0x5, 0xfe, 0x1, 0x7f}, {0x2, 0x2, 0x2, 0x8}, {0x4, 0x3, 0xc, 0x2}]}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x2, 0xfffff004}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r4, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500000005000044cf95eb468e8130c400"/37], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) sendto$inet(r8, &(0x7f0000000280)='!', 0x1, 0x2400c005, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9, r10}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={r10, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x730, 0x100, 0x2, 0x20, 0x51f7, 0xb3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000740)=@sack_info={r10, 0x5, 0x1}, &(0x7f00000007c0)=0xc) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000009876000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000000083000000bf09000000000000550901000000000095000000000000001838000002000000000000000000000018570000040000000000000000000000186200000d00000000000000eb890000186a0000060000000000000005000000181200"/124, @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x45, &(0x7f0000000340)=""/69, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x80000001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, r12, r13], &(0x7f00000005c0)=[{0x2, 0x5, 0xd, 0x6}, {0x0, 0x1, 0x1, 0x1}, {0x1, 0x2, 0x6, 0x6}, {0x5, 0x5, 0x3, 0x9}, {0x2, 0x1, 0xb, 0x9}, {0x0, 0x4, 0x8, 0xb}, {0x2, 0x2, 0x10, 0xb}, {0x2, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x4, 0xa}, {0x1, 0x5, 0x0, 0xa}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0) 399.243459ms ago: executing program 3 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@o_path={&(0x7f0000001100)='./file0\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7, 0x20, 0x1, 0x3, {{0xc, 0x4, 0x1, 0x18, 0x30, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0x87, [@rand_addr=0x64010102, @local, @loopback, @multicast1, @loopback, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x100, 0x1c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x40, 0x5f}}) 238.25633ms ago: executing program 3 (id=1637): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56], 0xfc}}, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0xef7a, 0x800, {{0x2f, 0x4, 0x3, 0x2, 0xbc, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0x10, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0x52, 0x3, 0xf, [{@multicast1, 0x200}, {@private=0xa010101, 0xb1}, {@empty, 0x2}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x8}]}, @ssrr={0x89, 0x17, 0x2d, [@rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @multicast1]}, @timestamp_addr={0x44, 0x4, 0x5, 0x1, 0x8}, @generic={0x88, 0x2}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @broadcast]}, @cipso={0x86, 0x28, 0x3, [{0x0, 0x11, "229b4f6d34e346ab8194315dd2a606"}, {0x2, 0xf, "ddaa316aa6ebaff9875911697e"}, {0x6, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x1, [{@local}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6b3a}]}]}}}}}) socket$inet6(0xa, 0x1, 0x8000000003c) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 32.692849ms ago: executing program 5 (id=1638): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400018ffff100007800c00028008000140ac1414aa040008"], 0x78}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1, &(0x7f0000000480)=""/4096, 0x1000}, 0x3332}, {{&(0x7f0000001480)=@pppol2tpv3, 0x80, &(0x7f0000001800)=[{&(0x7f0000002b00)=""/230, 0xe6}, {&(0x7f0000001600)=""/102, 0x66}, {&(0x7f0000001680)=""/146, 0x92}, {&(0x7f0000001740)=""/133, 0x85}], 0x4, &(0x7f0000001840)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002840)=@caif=@rfm, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/111, 0x6f}], 0x1, &(0x7f0000001500)=""/175, 0xaf}, 0x1}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000047c2ae8405a8a2df6097a63566f3afdd3460c08bef140cf76bf824884793493ee6", @ANYRES16=r2, @ANYBLOB="08002cbd7000fddbdf254c0000000c00a600ff0f000000000000080001007063690011000200303030303a30303a31302e30000000000c00a70009000000000000000c00a700ff7f0000000000000f00a9007365636f6e646e616d6500000800030002000000080001007063690011000200303030303a30303a31302e30000000000f00a8007365636f6e646e616d650000"], 0x98}, 0x1, 0x0, 0x0, 0x2010}, 0x8090) 31.545106ms ago: executing program 0 (id=1639): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x8, 0x7f}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000088090000f8"], 0x1ef) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000340), &(0x7f0000000400)=r5}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) 0s ago: executing program 5 (id=1640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): _hwsim hwsim9 syzkaller0: entered promiscuous mode [ 151.120224][ T9579] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 151.129204][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 151.146482][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.166606][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.599420][ T9614] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 151.742591][ T9620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.905365][ T9629] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 151.985420][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.129596][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.355467][ T9644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.713212][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.720873][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.737316][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.753582][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.773293][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.784150][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.795734][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.887440][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.093745][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 153.150779][ T9675] vxlan0: entered allmulticast mode [ 153.407822][ T1149] bridge_slave_1: left allmulticast mode [ 153.413958][ T1149] bridge_slave_1: left promiscuous mode [ 153.420519][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.492313][ T1149] bridge_slave_0: left allmulticast mode [ 153.514161][ T1149] bridge_slave_0: left promiscuous mode [ 153.529661][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.093690][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.106222][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.116625][ T1149] bond0 (unregistering): Released all slaves [ 154.131857][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 154.153910][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 154.494577][ T9723] sctp: [Deprecated]: syz.2.1037 (pid 9723) Use of int in max_burst socket option. [ 154.494577][ T9723] Use struct sctp_assoc_value instead [ 154.781289][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.807926][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.821015][ T9659] bridge_slave_0: entered allmulticast mode [ 154.839030][ T5834] Bluetooth: hci3: command tx timeout [ 154.839364][ T9659] bridge_slave_0: entered promiscuous mode [ 154.944990][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.969715][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.976998][ T9659] bridge_slave_1: entered allmulticast mode [ 154.991875][ T9659] bridge_slave_1: entered promiscuous mode [ 155.023349][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 155.094711][ T1149] hsr_slave_0: left promiscuous mode [ 155.105164][ T1149] hsr_slave_1: left promiscuous mode [ 155.128273][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.135808][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.155430][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.179774][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.232443][ T1149] veth1_macvtap: left promiscuous mode [ 155.239483][ T1149] veth0_macvtap: left promiscuous mode [ 155.250263][ T1149] veth1_vlan: left promiscuous mode [ 155.257452][ T1149] veth0_vlan: left promiscuous mode [ 155.746633][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 155.793764][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 156.232818][ T9748] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.260591][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.359547][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.482548][ T9768] vlan4: entered allmulticast mode [ 156.580326][ T9659] team0: Port device team_slave_0 added [ 156.591193][ T9659] team0: Port device team_slave_1 added [ 156.662353][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.678745][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.726284][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.762475][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.778174][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.827607][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.856964][ T9791] veth1_virt_wifi: entered allmulticast mode [ 156.918800][ T5834] Bluetooth: hci3: command tx timeout [ 156.937395][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 156.949260][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 156.976628][ T9795] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 157.013852][ T9659] hsr_slave_0: entered promiscuous mode [ 157.085445][ T9659] hsr_slave_1: entered promiscuous mode [ 157.091945][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.119954][ T9659] Cannot create hsr debugfs directory [ 157.156776][ T9799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.166978][ T9799] team0: Port device bond5 added [ 157.242931][ T9808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1065'. [ 157.248606][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 157.290114][ T9808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1065'. [ 157.305261][ T9809] Bluetooth: MGMT ver 1.23 [ 157.349099][ T9808] x_tables: duplicate entry at hook 2 [ 157.611607][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 157.785290][ T9835] sctp: [Deprecated]: syz.0.1074 (pid 9835) Use of int in maxseg socket option. [ 157.785290][ T9835] Use struct sctp_assoc_value instead [ 157.834464][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 157.900388][ T9845] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.073486][ T9659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.105554][ T9659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.120464][ T9659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.136143][ T9659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.249847][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.287401][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.309455][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.316608][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.330689][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.337865][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.397375][ T9866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.401788][ T9659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.417931][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.426111][ T9867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.570521][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.718413][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1084'. [ 158.728643][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1084'. [ 158.959151][ T9887] netlink: 'syz.2.1086': attribute type 3 has an invalid length. [ 158.968913][ T9887] netlink: 'syz.2.1086': attribute type 3 has an invalid length. [ 158.976698][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1086'. [ 158.995933][ T9659] veth0_vlan: entered promiscuous mode [ 159.008795][ T5834] Bluetooth: hci3: command tx timeout [ 159.013929][ T9659] veth1_vlan: entered promiscuous mode [ 159.045522][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 159.063316][ T9659] veth0_macvtap: entered promiscuous mode [ 159.075075][ T9659] veth1_macvtap: entered promiscuous mode [ 159.115857][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.162294][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.194472][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.204117][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 159.221750][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.233986][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.254788][ T9904] syz.1.1091[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.254885][ T9904] syz.1.1091[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.271562][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.293416][ T9904] syz.1.1091[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.296219][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.327118][ T9904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1091'. [ 159.342059][ T9904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 159.369205][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.386826][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.397413][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.437838][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.468680][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.502452][ T9659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.524748][ T9659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.543526][ T9659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.558440][ T9659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.716380][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.728616][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.796123][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.813888][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.858923][ T9923] netlink: 'syz.1.1097': attribute type 3 has an invalid length. [ 160.126858][ T9929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1099'. [ 160.257617][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 160.269767][ T9932] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 160.284322][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 160.803615][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 161.386435][T10006] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 161.561208][ T7574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.853931][T10026] xt_TCPMSS: Only works on TCP SYN packets [ 162.098259][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.116743][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.144695][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.203790][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.227896][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.235378][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.531657][T10033] chnl_net:caif_netlink_parms(): no params data found [ 162.632171][ T7574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891799][T10082] netlink: 'syz.3.1144': attribute type 39 has an invalid length. [ 162.950380][ T7574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.984809][T10075] smc: net device bond0 applied user defined pnetid S [ 163.299892][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.313737][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.348555][T10033] bridge_slave_0: entered allmulticast mode [ 163.375989][T10033] bridge_slave_0: entered promiscuous mode [ 163.391640][T10098] xt_socket: unknown flags 0x8 [ 163.427007][ T7574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.461183][T10095] IPVS: Unknown mcast interface: wg0 [ 163.467242][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.494138][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.518014][T10033] bridge_slave_1: entered allmulticast mode [ 163.535398][T10033] bridge_slave_1: entered promiscuous mode [ 163.629015][T10105] netlink: 'syz.3.1152': attribute type 4 has an invalid length. [ 163.656038][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.680336][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.771339][T10117] netlink: 'syz.0.1154': attribute type 21 has an invalid length. [ 163.785023][T10117] __nla_validate_parse: 11 callbacks suppressed [ 163.785038][T10117] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1154'. [ 163.801003][T10118] netlink: 'syz.0.1154': attribute type 21 has an invalid length. [ 163.809049][T10118] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1154'. [ 163.823749][T10033] team0: Port device team_slave_0 added [ 163.863987][T10033] team0: Port device team_slave_1 added [ 163.906386][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 163.935040][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.942974][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.979310][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.012545][T10122] netlink: 'syz.0.1156': attribute type 5 has an invalid length. [ 164.023555][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.030881][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.053704][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 164.057930][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.079395][T10122] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1156'. [ 164.094080][ T7574] bridge_slave_1: left allmulticast mode [ 164.107960][ T7574] bridge_slave_1: left promiscuous mode [ 164.113797][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.124913][ T7574] bridge_slave_0: left allmulticast mode [ 164.131130][ T7574] bridge_slave_0: left promiscuous mode [ 164.138142][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.363762][ T5845] Bluetooth: hci3: command tx timeout [ 164.631168][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.645108][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.656095][ T7574] bond0 (unregistering): Released all slaves [ 164.765739][T10033] hsr_slave_0: entered promiscuous mode [ 164.772998][T10033] hsr_slave_1: entered promiscuous mode [ 164.783300][T10033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.799268][T10033] Cannot create hsr debugfs directory [ 165.155872][ T7574] hsr_slave_0: left promiscuous mode [ 165.168628][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 165.178615][ T7574] hsr_slave_1: left promiscuous mode [ 165.186785][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.198769][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.209251][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.216742][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.258195][ T7574] veth1_macvtap: left promiscuous mode [ 165.263787][ T7574] veth0_macvtap: left promiscuous mode [ 165.269917][ T7574] veth1_vlan: left promiscuous mode [ 165.275562][ T7574] veth0_vlan: left promiscuous mode [ 165.964113][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 166.021231][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 166.437959][ T5845] Bluetooth: hci3: command tx timeout [ 166.609466][T10153] netlink: 'syz.1.1165': attribute type 5 has an invalid length. [ 166.731532][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 166.755382][T10163] bridge0: entered allmulticast mode [ 166.781644][T10163] pim6reg: entered allmulticast mode [ 166.840066][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 166.879893][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 167.306709][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 167.397336][T10183] vlan2: entered promiscuous mode [ 167.405022][T10183] vlan2: entered allmulticast mode [ 167.414444][T10183] macvtap0: entered allmulticast mode [ 167.428155][T10183] veth0_macvtap: entered allmulticast mode [ 167.434431][T10183] macvtap0: entered promiscuous mode [ 167.442834][T10183] team0: Port device vlan2 added [ 167.461115][T10181] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 167.471141][T10181] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 167.478147][T10189] Cannot find add_set index 32768 as target [ 167.513493][T10181] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 167.557117][T10189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.557976][T10033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.581629][T10033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.600954][T10033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.622848][T10033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.797717][ T136] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 167.902026][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.957368][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.974910][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.982127][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.011309][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.018502][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.073716][T10205] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 168.101267][T10181] syz.3.1176 (10181) used greatest stack depth: 18584 bytes left [ 168.376393][T10221] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 168.393060][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.536265][ T5845] Bluetooth: hci3: command tx timeout [ 168.744953][T10033] veth0_vlan: entered promiscuous mode [ 168.755475][T10033] veth1_vlan: entered promiscuous mode [ 168.782790][T10033] veth0_macvtap: entered promiscuous mode [ 168.792356][T10033] veth1_macvtap: entered promiscuous mode [ 168.807963][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.819259][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.829140][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.840879][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.850810][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.861481][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.872408][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.887380][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.898763][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.917739][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.944408][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.974557][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.007913][T10033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.026944][T10033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.056189][T10033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.067015][T10250] sctp: [Deprecated]: syz.2.1197 (pid 10250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.067015][T10250] Use struct sctp_sack_info instead [ 169.084479][T10033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.297824][T10257] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16) [ 169.317161][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.327228][T10262] __nla_validate_parse: 8 callbacks suppressed [ 169.327246][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1201'. [ 169.343827][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.400114][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.408643][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.711354][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1206'. [ 169.723903][T10290] IPVS: length: 60 != 8 [ 169.873446][T10302] syz.1.1210: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.901929][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.1.1210 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 169.912759][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.922857][T10302] Call Trace: [ 169.926251][T10302] [ 169.929208][T10302] dump_stack_lvl+0x241/0x360 [ 169.933921][T10302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.939153][T10302] ? __pfx__printk+0x10/0x10 [ 169.943788][T10302] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 169.950245][T10302] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 169.956793][T10302] warn_alloc+0x278/0x410 [ 169.961160][T10302] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 169.967277][T10302] ? __pfx_warn_alloc+0x10/0x10 [ 169.972164][T10302] ? kasan_save_track+0x3f/0x80 [ 169.977045][T10302] ? __kasan_kmalloc+0x98/0xb0 [ 169.981845][T10302] ? xsk_setsockopt+0x4ea/0x950 [ 169.986728][T10302] ? do_sock_setsockopt+0x3af/0x720 [ 169.991962][T10302] ? __x64_sys_setsockopt+0x1ee/0x280 [ 169.997373][T10302] ? do_syscall_64+0xf3/0x230 [ 170.002084][T10302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.008171][T10302] __vmalloc_node_range_noprof+0x126/0x1380 [ 170.014090][T10302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.020609][T10302] ? __kasan_kmalloc+0x98/0xb0 [ 170.025377][T10302] vmalloc_user_noprof+0x74/0x80 [ 170.030344][T10302] ? xskq_create+0xb6/0x170 [ 170.034960][T10302] xskq_create+0xb6/0x170 [ 170.039313][T10302] xsk_init_queue+0xa1/0x100 [ 170.043933][T10302] xsk_setsockopt+0x4ea/0x950 [ 170.048636][T10302] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.053844][T10302] ? __pfx_aa_sk_perm+0x10/0x10 [ 170.058701][T10302] ? aa_sock_opt_perm+0x79/0x120 [ 170.063684][T10302] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.068894][T10302] do_sock_setsockopt+0x3af/0x720 [ 170.073931][T10302] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 170.079482][T10302] ? __fget_files+0x395/0x410 [ 170.084159][T10302] ? __fget_files+0x2a/0x410 [ 170.088757][T10302] __x64_sys_setsockopt+0x1ee/0x280 [ 170.093959][T10302] do_syscall_64+0xf3/0x230 [ 170.098592][T10302] ? clear_bhb_loop+0x35/0x90 [ 170.103274][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.109169][T10302] RIP: 0033:0x7f99e6d85d29 [ 170.113602][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.133213][T10302] RSP: 002b:00007f99e7b43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.141629][T10302] RAX: ffffffffffffffda RBX: 00007f99e6f76160 RCX: 00007f99e6d85d29 [ 170.149601][T10302] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 170.157572][T10302] RBP: 00007f99e6e01b08 R08: 0000000000000004 R09: 0000000000000000 [ 170.165553][T10302] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.173528][T10302] R13: 0000000000000000 R14: 00007f99e6f76160 R15: 00007ffd7cde5aa8 [ 170.181517][T10302] [ 170.192395][T10302] Mem-Info: [ 170.195736][T10302] active_anon:8222 inactive_anon:0 isolated_anon:0 [ 170.195736][T10302] active_file:1474 inactive_file:38299 isolated_file:0 [ 170.195736][T10302] unevictable:768 dirty:56 writeback:0 [ 170.195736][T10302] slab_reclaimable:11158 slab_unreclaimable:105726 [ 170.195736][T10302] mapped:28462 shmem:1427 pagetables:623 [ 170.195736][T10302] sec_pagetables:0 bounce:0 [ 170.195736][T10302] kernel_misc_reclaimable:0 [ 170.195736][T10302] free:1333322 free_pcp:516 free_cma:0 [ 170.264209][T10302] Node 0 active_anon:33888kB inactive_anon:0kB active_file:5896kB inactive_file:153120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113848kB dirty:224kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12124kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 170.280949][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1211'. [ 170.314715][T10302] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 170.322808][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1211'. [ 170.354656][T10302] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.384477][T10302] lowmem_reserve[]: 0 2465 2466 0 0 [ 170.390298][T10302] Node 0 DMA32 free:1407616kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:35040kB inactive_anon:0kB active_file:5896kB inactive_file:152284kB unevictable:1536kB writepending:224kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1764kB local_pcp:644kB free_cma:0kB [ 170.473083][T10302] lowmem_reserve[]: 0 0 0 0 0 [ 170.497920][T10302] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.547275][T10302] lowmem_reserve[]: 0 0 0 0 0 [ 170.557450][T10302] Node 1 Normal free:3908592kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:532kB local_pcp:0kB free_cma:0kB [ 170.576518][T10308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 170.618712][T10302] lowmem_reserve[]: 0 0 0 0 0 [ 170.623500][T10302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.650780][T10302] Node 0 DMA32: 516*4kB (UE) 210*8kB (UE) 82*16kB (UME) 49*32kB (UME) 73*64kB (UME) 45*128kB (UME) 34*256kB (UM) 19*512kB (UME) 12*1024kB (UM) 11*2048kB (UME) 326*4096kB (UM) = 1405600kB [ 170.673176][T10302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 170.686655][T10302] Node 1 Normal: 84*4kB (UE) 60*8kB (UME) 46*16kB (UME) 203*32kB (UME) 96*64kB (UME) 33*128kB (UME) 12*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3908592kB [ 170.710269][T10302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.720922][T10302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.732102][T10302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.742524][T10302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.752167][T10302] 41201 total pagecache pages [ 170.758220][T10302] 0 pages in swap cache [ 170.762545][T10302] Free swap = 124996kB [ 170.766734][T10302] Total swap = 124996kB [ 170.771427][T10302] 2097051 pages RAM [ 170.775303][T10302] 0 pages HighMem/MovableOnly [ 170.781651][T10302] 427011 pages reserved [ 170.785980][T10302] 0 pages cma reserved [ 171.358870][T10350] delete_channel: no stack [ 171.517031][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.133017][T10368] Unsupported ieee802154 address type: 0 [ 172.486275][T10383] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 172.504764][T10383] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1233'. [ 172.522354][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.533103][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.543334][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.603827][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.613327][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.623745][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.032974][T10384] chnl_net:caif_netlink_parms(): no params data found [ 173.377277][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.467382][T10383] ipt_rpfilter: unknown options [ 173.621631][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.671607][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 173.714484][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.777719][T10384] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.785085][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.817843][T10384] bridge_slave_0: entered allmulticast mode [ 173.824916][T10384] bridge_slave_0: entered promiscuous mode [ 173.880665][T10384] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.908040][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.926019][T10384] bridge_slave_1: entered allmulticast mode [ 173.937012][T10384] bridge_slave_1: entered promiscuous mode [ 174.004189][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 174.044722][T10384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.088579][T10384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.105431][T10443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1246'. [ 174.136281][ T1149] bridge_slave_1: left allmulticast mode [ 174.143990][ T1149] bridge_slave_1: left promiscuous mode [ 174.158343][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.181122][ T1149] bridge_slave_0: left allmulticast mode [ 174.194876][ T1149] bridge_slave_0: left promiscuous mode [ 174.205203][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.401038][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 174.410654][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'. [ 174.596529][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.609959][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.621682][ T1149] bond0 (unregistering): Released all slaves [ 174.631293][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1246'. [ 174.684398][ T5834] Bluetooth: hci3: command tx timeout [ 174.700602][T10384] team0: Port device team_slave_0 added [ 174.752508][T10384] team0: Port device team_slave_1 added [ 175.019985][T10384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.049963][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.105935][T10384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.121278][T10384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.144247][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.148636][T10479] sctp: [Deprecated]: syz.2.1258 (pid 10479) Use of int in max_burst socket option. [ 175.148636][T10479] Use struct sctp_assoc_value instead [ 175.177610][T10384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.343348][T10478] x_tables: eb_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 31 [ 175.379295][T10491] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.465009][ T1149] hsr_slave_0: left promiscuous mode [ 175.484719][T10496] netlink: 'syz.2.1260': attribute type 2 has an invalid length. [ 175.522426][ T1149] hsr_slave_1: left promiscuous mode [ 175.548469][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.555961][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.577279][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.591574][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.644712][ T1149] veth1_macvtap: left promiscuous mode [ 175.656025][ T1149] veth0_macvtap: left promiscuous mode [ 175.666261][ T1149] veth1_vlan: left promiscuous mode [ 175.675526][ T1149] veth0_vlan: left promiscuous mode [ 175.842666][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 176.346976][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 176.390966][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 176.764351][ T5834] Bluetooth: hci3: command tx timeout [ 176.868123][T10384] hsr_slave_0: entered promiscuous mode [ 176.874422][T10384] hsr_slave_1: entered promiscuous mode [ 176.885302][T10384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.893283][T10384] Cannot create hsr debugfs directory [ 176.911700][T10496] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 177.036367][T10499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.047228][T10499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.057457][T10499] bond0 (unregistering): Released all slaves [ 177.074125][T10506] gretap0: entered allmulticast mode [ 177.083187][T10506] bridge0: port 3(gretap0) entered blocking state [ 177.090173][T10506] bridge0: port 3(gretap0) entered disabled state [ 177.097782][T10506] gretap0: entered promiscuous mode [ 177.103329][T10506] bridge0: port 3(gretap0) entered blocking state [ 177.109892][T10506] bridge0: port 3(gretap0) entered forwarding state [ 177.259899][T10528] SET target dimension over the limit! [ 177.340513][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 177.414440][T10528] veth5: entered promiscuous mode [ 177.678294][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 177.693716][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 178.598005][T10384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.610912][T10384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.629035][T10384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.644405][T10384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.767888][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 178.780842][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 178.818792][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 178.837914][ T5834] Bluetooth: hci3: command tx timeout [ 178.902653][T10384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.961694][T10384] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.966232][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 178.987158][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.994377][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.019152][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.026294][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.433341][T10384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.450007][T10644] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1288'. [ 179.492437][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 179.520450][T10646] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 179.640383][T10646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.764639][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 179.929319][T10384] veth0_vlan: entered promiscuous mode [ 179.945924][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 179.980225][T10384] veth1_vlan: entered promiscuous mode [ 180.012946][T10384] veth0_macvtap: entered promiscuous mode [ 180.025697][T10384] veth1_macvtap: entered promiscuous mode [ 180.043824][T10384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.054434][T10384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.064428][T10384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.075018][T10384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.085005][T10384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.095550][T10384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.108299][T10384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.129139][T10384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.147906][T10384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.159374][T10384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.193564][T10384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.220179][T10384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.273903][T10686] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.296035][T10384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.306165][T10384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.326931][T10384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.335919][T10384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.385833][T10686] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.499287][T10686] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.549564][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.569891][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.609938][T10686] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.654474][T10704] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1304'. [ 180.665177][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.713608][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.841248][T10686] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.856164][T10715] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1307'. [ 180.857033][T10686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.879873][T10686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.917992][ T5834] Bluetooth: hci3: command tx timeout [ 180.928627][T10686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.993219][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 181.052357][T10729] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1311'. [ 181.063908][T10729] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 181.071367][T10730] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 181.085996][T10729] bond0: (slave netdevsim0): Releasing backup interface [ 181.095793][T10729] team0: Port device netdevsim0 added [ 181.121978][T10730] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1310'. [ 181.201661][T10733] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1311'. [ 181.224563][T10733] netlink: 'syz.3.1311': attribute type 2 has an invalid length. [ 181.283833][T10737] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.291797][T10731] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 181.319697][T10737] team0: Port device netdevsim0 removed [ 181.342875][T10737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 181.594879][T10748] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 181.609062][T10749] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 182.181226][T10778] team0: No ports can be present during mode change [ 182.302884][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.329194][T10780] vxcan2: entered allmulticast mode [ 182.517870][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 182.678516][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 182.894792][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.094846][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.147023][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.147246][T10789] Cannot find add_set index 2 as target [ 183.167799][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.179544][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.187378][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.199504][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.200542][T10788] netlink: zone id is out of range [ 183.212424][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.229439][T10788] netlink: zone id is out of range [ 183.235764][T10788] netlink: zone id is out of range [ 183.241841][T10788] netlink: zone id is out of range [ 183.247183][T10788] netlink: zone id is out of range [ 183.252606][T10788] netlink: zone id is out of range [ 183.275349][T10788] netlink: zone id is out of range [ 183.284318][T10788] netlink: zone id is out of range [ 183.317345][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.551329][T10791] chnl_net:caif_netlink_parms(): no params data found [ 183.592735][ T1149] bridge_slave_1: left allmulticast mode [ 183.618459][ T1149] bridge_slave_1: left promiscuous mode [ 183.624326][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.639983][ T1149] bridge_slave_0: left allmulticast mode [ 183.645681][ T1149] bridge_slave_0: left promiscuous mode [ 183.661340][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.686627][T10817] x_tables: duplicate underflow at hook 1 [ 183.690401][T10816] sctp: [Deprecated]: syz.2.1331 (pid 10816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.690401][T10816] Use struct sctp_sack_info instead [ 183.738280][T10816] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 183.767285][ T29] audit: type=1107 audit(1735686807.214:3): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Bß¹Àø¢óÚ[’Sìd¿ÝÅåÉf> cΛe #]4Œé­n¶kyXÍ…#' [ 184.152201][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.164702][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.174926][ T1149] bond0 (unregistering): Released all slaves [ 184.545211][T10839] __nla_validate_parse: 13 callbacks suppressed [ 184.545234][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1337'. [ 184.561542][T10839] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1337'. [ 184.571202][T10839] netlink: 'syz.1.1337': attribute type 6 has an invalid length. [ 184.579612][T10839] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 184.587459][T10839] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1337'. [ 184.599819][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.617711][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.625468][T10791] bridge_slave_0: entered allmulticast mode [ 184.633023][T10791] bridge_slave_0: entered promiscuous mode [ 184.672457][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.676301][T10842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 184.681472][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.689889][T10842] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1338'. [ 184.703935][T10791] bridge_slave_1: entered allmulticast mode [ 184.713095][T10791] bridge_slave_1: entered promiscuous mode [ 184.729595][T10842] netlink: 'syz.0.1338': attribute type 5 has an invalid length. [ 184.737458][T10842] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1338'. [ 184.779164][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.802471][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.825111][ T1149] hsr_slave_0: left promiscuous mode [ 184.831398][ T1149] hsr_slave_1: left promiscuous mode [ 184.848930][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.860290][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.870257][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.877980][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.901095][ T1149] veth1_macvtap: left promiscuous mode [ 184.906637][ T1149] veth0_macvtap: left promiscuous mode [ 184.913211][ T1149] veth1_vlan: left promiscuous mode [ 184.918982][ T1149] veth0_vlan: left promiscuous mode [ 185.320193][ T5845] Bluetooth: hci3: command tx timeout [ 185.496449][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 185.523431][T10855] netlink: 'syz.1.1341': attribute type 2 has an invalid length. [ 185.534945][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 185.585873][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 186.185067][T10791] team0: Port device team_slave_0 added [ 186.194974][T10791] team0: Port device team_slave_1 added [ 186.234685][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.242845][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.320014][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.383697][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.400827][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.452014][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.477946][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 186.525754][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 186.525763][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 186.632367][T10791] hsr_slave_0: entered promiscuous mode [ 186.665055][T10894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.674400][T10791] hsr_slave_1: entered promiscuous mode [ 186.682808][T10894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.697925][T10791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.725810][T10791] Cannot create hsr debugfs directory [ 187.326761][T10923] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 187.411936][ T5834] Bluetooth: hci3: command 0x041b tx timeout [ 187.550345][T10791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.579238][T10791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.625699][T10791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.673410][T10791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.808995][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.823822][T10947] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 187.848952][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.874664][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.881883][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.917393][T10952] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.1364'. [ 187.919794][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.933733][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.198873][T10969] xt_hashlimit: size too large, truncated to 1048576 [ 188.254427][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.263343][T10971] xt_hashlimit: max too large, truncated to 1048576 [ 188.294908][T10971] No such timeout policy "syz1" [ 188.803420][T10981] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 188.829970][T10981] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 189.130927][T10791] veth0_vlan: entered promiscuous mode [ 189.186525][T10791] veth1_vlan: entered promiscuous mode [ 189.273157][T10791] veth0_macvtap: entered promiscuous mode [ 189.307136][T10791] veth1_macvtap: entered promiscuous mode [ 189.389606][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.442083][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.479645][ T5838] Bluetooth: hci3: command 0x041b tx timeout [ 189.485874][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.536154][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.546259][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.557076][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.572009][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.591820][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.645917][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.686152][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.739123][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.789479][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.846939][T10791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.875096][T10791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.891171][T10791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.906712][T10791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.150634][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.167679][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.198505][ C1] net_ratelimit: 14 callbacks suppressed [ 190.198524][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 190.236232][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.278179][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.623911][T11041] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 191.994604][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 192.180619][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.195197][T11062] pim6reg: entered allmulticast mode [ 192.201175][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.211561][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.222237][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.233269][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.249845][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.271038][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.294263][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.320268][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.341716][T11064] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 192.811275][ T136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.894299][T11072] pim6reg: left allmulticast mode [ 193.747223][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.768545][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.783202][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.813984][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.836855][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.858907][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.696674][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.979415][ T5838] Bluetooth: hci3: command tx timeout [ 196.048305][ T136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.196447][ T136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.246279][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 196.285610][ T136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.297350][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 196.319640][T11092] bridge_slave_1: left allmulticast mode [ 196.325423][T11092] bridge_slave_1: left promiscuous mode [ 196.333011][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.353535][T11092] bridge_slave_0: left allmulticast mode [ 196.366180][T11092] bridge_slave_0: left promiscuous mode [ 196.377611][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.413193][T11092] bridge0 (unregistering): left allmulticast mode [ 196.509946][T11095] x_tables: duplicate underflow at hook 2 [ 196.694289][ T136] bridge_slave_1: left allmulticast mode [ 196.716815][ T136] bridge_slave_1: left promiscuous mode [ 196.733425][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.771101][ T136] bridge_slave_0: left allmulticast mode [ 196.776937][ T136] bridge_slave_0: left promiscuous mode [ 196.791847][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.216998][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1406'. [ 197.342601][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.356685][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.371265][ T136] bond0 (unregistering): Released all slaves [ 197.388867][T11083] chnl_net:caif_netlink_parms(): no params data found [ 197.404105][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 197.691097][T11116] ebtables: ebtables: counters copy to user failed while replacing table [ 197.941798][T11083] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.958572][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.966042][T11083] bridge_slave_0: entered allmulticast mode [ 197.984329][T11083] bridge_slave_0: entered promiscuous mode [ 198.003464][T11083] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.024772][T11083] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.036891][T11083] bridge_slave_1: entered allmulticast mode [ 198.048958][ T5834] Bluetooth: hci3: command tx timeout [ 198.179531][T11083] bridge_slave_1: entered promiscuous mode [ 198.443568][ T136] hsr_slave_0: left promiscuous mode [ 198.458397][ T136] hsr_slave_1: left promiscuous mode [ 198.466388][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.475067][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.484555][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.492591][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.580165][ T136] veth1_macvtap: left promiscuous mode [ 198.608235][ T136] veth0_macvtap: left promiscuous mode [ 198.627324][ T136] veth1_vlan: left promiscuous mode [ 198.649015][ T136] veth0_vlan: left promiscuous mode [ 199.381450][ T136] team0 (unregistering): Port device team_slave_1 removed [ 199.436132][ T136] team0 (unregistering): Port device team_slave_0 removed [ 199.803044][ T1149] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.068604][T11142] netlink: 'syz.2.1414': attribute type 29 has an invalid length. [ 200.108594][T11083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.118248][ T5834] Bluetooth: hci3: command 0x040f tx timeout [ 200.146148][T11160] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 200.168915][T11083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.259145][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 200.385416][T11083] team0: Port device team_slave_0 added [ 200.421842][T11083] team0: Port device team_slave_1 added [ 200.579329][T11083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.584590][T11184] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 200.587436][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.611571][T11185] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 200.625122][T11083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.644638][T11083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.652227][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.653105][T11185] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1425'. [ 200.688275][T11083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.734237][T11185] team0: entered promiscuous mode [ 200.744881][T11185] team_slave_0: entered promiscuous mode [ 200.753453][T11185] team_slave_1: entered promiscuous mode [ 200.766975][T11185] bond5: entered promiscuous mode [ 200.782990][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.928049][T11083] hsr_slave_0: entered promiscuous mode [ 200.942567][T11083] hsr_slave_1: entered promiscuous mode [ 200.953830][T11083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.968259][T11083] Cannot create hsr debugfs directory [ 201.362763][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 201.471677][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 201.478888][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 201.492263][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 201.499478][T11218] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 201.683000][T11230] pimreg3: entered allmulticast mode [ 201.838600][T11083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.861242][T11083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.883322][T11083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.990704][T11083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.198303][ T5838] Bluetooth: hci3: command 0x040f tx timeout [ 202.231340][T11083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.304028][T11083] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.320245][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.327422][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.482325][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.489545][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.874713][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 202.913665][T11083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.059736][T11287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.154205][T11283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.177816][T11283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.255201][T11295] netlink: 'syz.0.1455': attribute type 11 has an invalid length. [ 203.351953][T11283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.363848][T11283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.521054][T11283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.532570][T11283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.649744][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 203.699229][T11309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1457'. [ 203.911486][T11283] team0: Port device netdevsim0 removed [ 203.928395][T11283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.971112][T11283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.032084][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 204.038641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.046488][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.054431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.062306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.070259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.078138][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.086048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.093939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.101904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.109768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.117693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.125705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.133635][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.141506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.149449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.157296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.165226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.173099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.181064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.188936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.196833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.204704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.212622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.220558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.228496][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.236322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.244245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.252106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.260030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.267890][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.275805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.283675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.291588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.299460][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.307326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.315152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.323012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.330855][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.338766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.346600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.354534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.362419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.370348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.378225][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.386130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.393991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.401918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.409786][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.417701][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.425541][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.433482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.441353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.449278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.457119][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.465043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.472910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.480793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.488645][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.496502][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.504329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.512231][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.520079][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.528984][ T5838] Bluetooth: hci3: command 0x040f tx timeout [ 204.530174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.542850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.550727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.558705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.566600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.574436][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.582408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.590276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.598209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.606047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.613936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.621801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.629718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.637571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.645449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.653276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.661182][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.669039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.676901][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.684754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.692640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.700490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.708459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.716286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.724235][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.732068][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.739980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.747847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.755717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.763565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.771452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.779301][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.787204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.795029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.802936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.810774][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.818668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.826572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.834510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.842405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.850330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.858194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.866052][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.873875][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.881779][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.889619][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.897466][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.905312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.913195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.921083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.929002][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.936839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.944770][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.952634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.960556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.968419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.976317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.984191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.992139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.999996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.007910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.015744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.023671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.031530][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.039454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.047287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.055212][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.063084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.071007][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.078873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.086767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.094629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.102563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.110420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.118396][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.126253][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.134210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.142074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.149993][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.157911][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.165804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.173663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.181573][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.189440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.197330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.205195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.213116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.221003][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.228929][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.236770][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.244708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.252581][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.260536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.268394][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.276282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.284151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.292256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.300115][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.308023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.315848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.323766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.331621][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.339531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.347359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.355289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.363151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.371062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.378920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.386801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.394654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.402588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.410439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.418349][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.426171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.434085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.441965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.449867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.457714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.465593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.473450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.481379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.490221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.498142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.505967][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.513874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.521821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.529992][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.537841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.559268][ C1] bridge0: received packet on gretap0 with own address as source address (addr:1a:92:9a:23:85:1d, vlan:0) [ 205.615054][T11309] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.624164][T11309] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.633305][T11309] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.642856][T11309] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.738116][T11083] veth0_vlan: entered promiscuous mode [ 205.762541][T11083] veth1_vlan: entered promiscuous mode [ 205.785160][T11083] veth0_macvtap: entered promiscuous mode [ 205.794834][T11083] veth1_macvtap: entered promiscuous mode [ 205.827110][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.838142][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.848540][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.859211][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.869124][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.879832][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.890973][T11083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.901044][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.912262][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.922406][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.933069][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.944418][T11083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.974882][T11283] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.983777][T11283] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.996022][T11083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.006787][T11083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.015797][T11083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.024817][T11083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.255489][T11283] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.292202][T11283] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.306286][T11283] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.315629][T11283] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.343595][T11283] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.352531][T11283] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.451177][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.459473][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.471915][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.479898][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.681765][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 206.821696][T11360] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.836532][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 206.877437][T11360] bond0: (slave team0): Releasing backup interface [ 206.911045][T11360] team0 (unregistering): Port device team_slave_0 removed [ 206.933654][T11360] team0 (unregistering): Port device team_slave_1 removed [ 206.954373][T11360] team0 (unregistering): Port device bridge2 removed [ 207.296520][T11380] netlink: 'syz.1.1479': attribute type 5 has an invalid length. [ 207.504551][ T6022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.877321][ T6022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.104187][ T6022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.156128][ T6022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.249310][ T6022] bridge_slave_1: left allmulticast mode [ 208.254981][ T6022] bridge_slave_1: left promiscuous mode [ 208.261580][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.273251][ T6022] bridge_slave_0: left allmulticast mode [ 208.279347][ T6022] bridge_slave_0: left promiscuous mode [ 208.286765][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.448636][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 208.645033][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.655410][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.664722][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.681127][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.703411][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.727748][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.815226][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.825967][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.836675][ T6022] bond0 (unregistering): Released all slaves [ 208.955578][T11399] netlink: 'syz.0.1484': attribute type 22 has an invalid length. [ 208.985325][T11399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1484'. [ 209.201311][ T6022] hsr_slave_0: left promiscuous mode [ 209.210014][ T6022] hsr_slave_1: left promiscuous mode [ 209.216181][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.224991][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.233114][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.241599][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.265647][ T6022] veth1_macvtap: left promiscuous mode [ 209.271932][ T6022] veth0_macvtap: left promiscuous mode [ 209.282658][ T6022] veth1_vlan: left promiscuous mode [ 209.288831][ T6022] veth0_vlan: left promiscuous mode [ 209.718018][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 209.759598][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 210.132320][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 210.200604][T11396] chnl_net:caif_netlink_parms(): no params data found [ 210.435199][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 210.444856][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 210.456269][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.463871][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.471313][T11396] bridge_slave_0: entered allmulticast mode [ 210.478719][T11396] bridge_slave_0: entered promiscuous mode [ 210.487099][T11428] wg0: Master is either lo or non-ether device [ 210.496667][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.504621][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.512445][T11396] bridge_slave_1: entered allmulticast mode [ 210.527099][T11396] bridge_slave_1: entered promiscuous mode [ 210.546890][T11427] wg0: Master is either lo or non-ether device [ 210.567356][T11396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.592209][T11396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.659941][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1492'. [ 210.705173][T11396] team0: Port device team_slave_0 added [ 210.723080][T11396] team0: Port device team_slave_1 added [ 210.784856][T11396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.793849][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.822015][T11396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.837879][ T5838] Bluetooth: hci3: command tx timeout [ 210.844866][T11396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.851967][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.880333][T11396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.938692][T11396] hsr_slave_0: entered promiscuous mode [ 210.951082][T11396] hsr_slave_1: entered promiscuous mode [ 210.958696][T11396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.966345][T11396] Cannot create hsr debugfs directory [ 211.490042][T11396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.500773][T11396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.519840][T11396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.530341][T11396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.620574][T11396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.655663][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.685542][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.692745][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.714131][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.721356][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.804393][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 212.023404][T11396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.309171][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'. [ 212.376727][T11396] veth0_vlan: entered promiscuous mode [ 212.392639][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'. [ 212.423529][T11396] veth1_vlan: entered promiscuous mode [ 212.441781][T11499] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1506'. [ 212.464325][T11396] veth0_macvtap: entered promiscuous mode [ 212.492396][T11396] veth1_macvtap: entered promiscuous mode [ 212.531465][T11396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.542158][T11396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.552698][T11396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.573956][T11396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.594739][T11396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.615650][T11396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.637384][T11396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.670739][T11396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.691770][T11396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.718002][T11396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.736390][T11396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.758166][T11396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.779928][T11396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.801347][T11396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.810233][T11396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.819207][T11396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.831723][T11508] tipc: Can't bind to reserved service type 0 [ 212.854175][T11509] netlink: 'syz.0.1506': attribute type 4 has an invalid length. [ 212.917822][ T5838] Bluetooth: hci3: command tx timeout [ 212.944911][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.955240][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.984538][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.993697][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.034093][T11525] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 214.078148][T11530] __nla_validate_parse: 3 callbacks suppressed [ 214.078167][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1513'. [ 214.282834][T11537] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20003 [ 214.500647][ T6019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.517843][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.494893][T11546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.576827][T11551] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.707112][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 215.729645][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.741248][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.760723][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.771388][ T6019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.783214][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.798184][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.806268][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.860117][ T6019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.939158][ T6019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.122519][T11555] chnl_net:caif_netlink_parms(): no params data found [ 216.183617][ T6019] bridge_slave_1: left allmulticast mode [ 216.197940][ T6019] bridge_slave_1: left promiscuous mode [ 216.205062][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.225828][ T6019] bridge_slave_0: left allmulticast mode [ 216.235086][ T6019] bridge_slave_0: left promiscuous mode [ 216.249544][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.746897][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.760678][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.770857][ T6019] bond0 (unregistering): Released all slaves [ 216.813526][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.823308][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.840932][T11555] bridge_slave_0: entered allmulticast mode [ 216.859128][T11555] bridge_slave_0: entered promiscuous mode [ 216.876314][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.899046][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.906542][T11555] bridge_slave_1: entered allmulticast mode [ 216.913935][T11555] bridge_slave_1: entered promiscuous mode [ 216.974626][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1523'. [ 216.991452][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.004695][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.072224][T11555] team0: Port device team_slave_0 added [ 217.082530][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'. [ 217.101277][T11555] team0: Port device team_slave_1 added [ 217.121811][ T6019] hsr_slave_0: left promiscuous mode [ 217.130948][ T6019] hsr_slave_1: left promiscuous mode [ 217.139673][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.147131][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.161332][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.170057][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.195678][ T6019] veth1_macvtap: left promiscuous mode [ 217.201524][ T6019] veth0_macvtap: left promiscuous mode [ 217.207124][ T6019] veth1_vlan: left promiscuous mode [ 217.213574][ T6019] veth0_vlan: left promiscuous mode [ 217.704659][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 217.750575][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 217.879917][ T5838] Bluetooth: hci3: command tx timeout [ 218.223764][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.234043][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.267741][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.284646][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.292795][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.342700][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.470715][T11555] hsr_slave_0: entered promiscuous mode [ 218.486692][T11555] hsr_slave_1: entered promiscuous mode [ 218.502033][T11555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.510059][T11555] Cannot create hsr debugfs directory [ 218.648318][T11602] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 218.750223][T11604] netlink: 'syz.3.1531': attribute type 2 has an invalid length. [ 218.768618][T11604] netlink: 'syz.3.1531': attribute type 8 has an invalid length. [ 218.776393][T11604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1531'. [ 218.936649][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.957929][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.966310][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.978010][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.985590][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.997794][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.321666][T11608] chnl_net:caif_netlink_parms(): no params data found [ 219.365315][T11555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.390037][T11555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.407111][T11555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.427215][T11555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.440398][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.452095][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.459972][T11608] bridge_slave_0: entered allmulticast mode [ 219.467120][T11608] bridge_slave_0: entered promiscuous mode [ 219.475625][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.483019][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.490477][T11608] bridge_slave_1: entered allmulticast mode [ 219.497178][T11608] bridge_slave_1: entered promiscuous mode [ 219.534206][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.546590][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.581691][T11608] team0: Port device team_slave_0 added [ 219.590466][T11608] team0: Port device team_slave_1 added [ 219.616960][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.624687][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.651359][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.664151][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.671354][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.697631][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.745326][T11608] hsr_slave_0: entered promiscuous mode [ 219.751785][T11608] hsr_slave_1: entered promiscuous mode [ 219.758928][T11608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.766525][T11608] Cannot create hsr debugfs directory [ 219.877332][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.944890][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.953344][T11608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.960334][ T5838] Bluetooth: hci3: command tx timeout [ 219.980913][T11608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.999673][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.006818][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.019609][T11608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.031727][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.038938][ T7574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.070452][T11608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.202946][T11628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 220.391410][T11608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.462672][T11608] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.490315][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.497530][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.534960][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.542176][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.639577][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.081495][ T5838] Bluetooth: hci5: command tx timeout [ 221.121229][T11672] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 221.212566][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.220847][T11672] Bluetooth: MGMT ver 1.23 [ 221.245281][T11672] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1544'. [ 221.361001][T11555] veth0_vlan: entered promiscuous mode [ 221.393718][T11555] veth1_vlan: entered promiscuous mode [ 221.437989][T11555] veth0_macvtap: entered promiscuous mode [ 221.446856][T11555] veth1_macvtap: entered promiscuous mode [ 221.463649][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.474703][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.485589][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.496167][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.506084][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.516816][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.528004][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.537436][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.548233][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.558397][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.569100][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.580555][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.590518][T11555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.599322][T11555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.610013][T11555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.618825][T11555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.705132][T11648] delete_channel: no stack [ 221.958188][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.990211][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.043677][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.044182][ T5838] Bluetooth: hci3: command tx timeout [ 222.073873][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.294294][T11608] veth0_vlan: entered promiscuous mode [ 222.305805][T11608] veth1_vlan: entered promiscuous mode [ 222.357166][T11608] veth0_macvtap: entered promiscuous mode [ 222.457355][T11608] veth1_macvtap: entered promiscuous mode [ 222.484830][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.497432][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.509234][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.522373][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.532595][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.543113][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.553140][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.563702][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.575295][T11719] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 222.584254][T11608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.593442][T11719] bridge0: port 3(macvlan1) entered disabled state [ 222.600543][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.618321][T11719] bridge0: port 3(macvlan1) entered blocking state [ 222.624956][T11719] bridge0: port 3(macvlan1) entered listening state [ 222.631697][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.638822][T11719] bridge0: port 1(bridge_slave_0) entered listening state [ 222.661487][T11719] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.673019][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.687539][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.707366][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.737552][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.747423][T11608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.762659][T11608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.773971][T11608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.834469][T11608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.842757][T11745] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 222.866981][T11608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.885124][T11608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.907744][T11608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.001041][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.017248][T11750] netlink: 'syz.3.1557': attribute type 9 has an invalid length. [ 223.050448][T11750] netlink: 'syz.3.1557': attribute type 7 has an invalid length. [ 223.058793][T11750] netlink: 'syz.3.1557': attribute type 8 has an invalid length. [ 223.088937][T11751] netlink: 'syz.3.1557': attribute type 9 has an invalid length. [ 223.096874][T11751] netlink: 'syz.3.1557': attribute type 7 has an invalid length. [ 223.160724][ T5838] Bluetooth: hci5: command tx timeout [ 223.167400][T11751] netlink: 'syz.3.1557': attribute type 8 has an invalid length. [ 223.218129][T11737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.225994][T11737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.296771][T11728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.310867][T11728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.496109][T11734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.725487][T11734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.793689][T11734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.863176][T11734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.008862][T11734] bridge_slave_1: left allmulticast mode [ 224.014547][T11734] bridge_slave_1: left promiscuous mode [ 224.020632][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.030164][T11734] bridge_slave_0: left allmulticast mode [ 224.035814][T11734] bridge_slave_0: left promiscuous mode [ 224.043919][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.400377][T11734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.411056][T11734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.422783][T11734] bond0 (unregistering): Released all slaves [ 224.896048][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.916724][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.932114][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.959288][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.966948][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.974428][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.031151][T11793] bond0: (slave bridge0): Releasing backup interface [ 225.071152][T11793] bridge0: port 3(macvlan1) entered disabled state [ 225.077969][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.140014][T11793] bridge_slave_0: left allmulticast mode [ 225.154345][T11793] bridge_slave_0: left promiscuous mode [ 225.165781][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.184123][T11793] bridge_slave_1: left promiscuous mode [ 225.191131][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.204102][T11793] bond0: (slave bond_slave_0): Releasing backup interface [ 225.232721][T11793] bond0: (slave bond_slave_1): Releasing backup interface [ 225.248646][ T5838] Bluetooth: hci5: command tx timeout [ 225.273910][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.281897][T11793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.291083][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.302620][T11793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.324210][T11793] macvlan1: left allmulticast mode [ 225.331763][T11793] veth1_vlan: left allmulticast mode [ 225.337253][T11793] macvlan1: left promiscuous mode [ 225.343250][T11793] bridge0: port 3(macvlan1) entered disabled state [ 225.625752][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 225.662018][T11734] hsr_slave_0: left promiscuous mode [ 225.684716][T11734] hsr_slave_1: left promiscuous mode [ 225.700758][T11734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.708949][T11734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.735597][T11734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.754269][T11734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.788220][T11734] veth1_macvtap: left promiscuous mode [ 225.794066][T11734] veth0_macvtap: left promiscuous mode [ 225.800641][T11734] veth1_vlan: left promiscuous mode [ 225.806328][T11734] veth0_vlan: left promiscuous mode [ 226.289369][T11734] team0 (unregistering): Port device team_slave_1 removed [ 226.331527][T11734] team0 (unregistering): Port device team_slave_0 removed [ 226.998651][ T5838] Bluetooth: hci3: command tx timeout [ 227.151624][T11836] syzkaller1: entered promiscuous mode [ 227.157262][T11836] syzkaller1: entered allmulticast mode [ 227.181110][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1579'. [ 227.294689][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.302032][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.317881][ T5838] Bluetooth: hci5: command tx timeout [ 227.385800][T11847] Cannot find add_set index 0 as target [ 227.480790][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1582'. [ 227.569054][T11836] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.579751][T11836] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.588328][T11836] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.596808][T11836] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.650941][T11849] tipc: Enabled bearer , priority 0 [ 227.679926][T11786] chnl_net:caif_netlink_parms(): no params data found [ 227.715120][T11849] tipc: Disabling bearer [ 227.741471][T11855] syzkaller1: entered allmulticast mode [ 227.891193][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.937117][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.955781][T11786] bridge_slave_0: entered allmulticast mode [ 227.988505][T11786] bridge_slave_0: entered promiscuous mode [ 228.015610][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.036490][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.047252][T11786] bridge_slave_1: entered allmulticast mode [ 228.055719][T11786] bridge_slave_1: entered promiscuous mode [ 228.135375][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.154526][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.326041][T11786] team0: Port device team_slave_0 added [ 228.342304][T11786] team0: Port device team_slave_1 added [ 228.404741][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.433602][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.468664][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.496161][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.512889][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.550983][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.664624][T11786] hsr_slave_0: entered promiscuous mode [ 228.674235][T11786] hsr_slave_1: entered promiscuous mode [ 228.683219][T11786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.691105][T11786] Cannot create hsr debugfs directory [ 229.087884][ T5838] Bluetooth: hci3: command tx timeout [ 229.122536][T11892] validate_nla: 1 callbacks suppressed [ 229.122556][T11892] netlink: 'syz.5.1592': attribute type 29 has an invalid length. [ 229.173856][T11892] netlink: 508 bytes leftover after parsing attributes in process `syz.5.1592'. [ 229.238196][T11900] netlink: 'syz.5.1592': attribute type 29 has an invalid length. [ 229.419277][T11915] Can't find ip_set type hash:ip,port, [ 229.625990][T11786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.657140][T11786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.671737][T11786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.682320][T11786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.808668][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.840558][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.870141][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.877264][T11736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.919023][T11736] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.926183][T11736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.341606][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 230.429642][T11955] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 230.495039][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.619114][T11963] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.709812][T11962] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 230.752017][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 230.787977][T11967] bridge_slave_1: left allmulticast mode [ 230.794634][T11967] bridge_slave_1: left promiscuous mode [ 230.801077][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.863674][T11967] bridge_slave_0: left allmulticast mode [ 230.878408][T11967] bridge_slave_0: left promiscuous mode [ 230.896462][T11972] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 230.907873][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.028607][T11977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.158018][ T5838] Bluetooth: hci3: command tx timeout [ 231.164065][T11786] veth0_vlan: entered promiscuous mode [ 231.189719][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 231.235933][T11786] veth1_vlan: entered promiscuous mode [ 231.370867][T11786] veth0_macvtap: entered promiscuous mode [ 231.412142][T11786] veth1_macvtap: entered promiscuous mode [ 231.466905][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.511415][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.536969][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.550071][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.569313][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.590352][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.609599][T12021] netlink: 'syz.1.1617': attribute type 10 has an invalid length. [ 231.626543][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.650829][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.686612][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.707404][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.729840][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.750409][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.763424][T11786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.772416][T11786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.781359][T11786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.791295][T11786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.809990][T11736] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.054745][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 232.064633][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1623'. [ 232.084782][T11733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.120867][T11733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.194253][T11728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.228032][T11728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.646347][T12054] netlink: 'syz.0.1625': attribute type 9 has an invalid length. [ 232.680955][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 232.958448][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 233.054808][T12072] netlink: 'syz.1.1627': attribute type 2 has an invalid length. [ 233.114050][T12072] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 233.666321][T11737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.798908][T11737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.895486][T11737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.976712][T11737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.090605][T11737] bridge_slave_1: left allmulticast mode [ 234.096297][T11737] bridge_slave_1: left promiscuous mode [ 234.102357][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.110972][T11737] bridge_slave_0: left allmulticast mode [ 234.116620][T11737] bridge_slave_0: left promiscuous mode [ 234.123529][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.490478][T11737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.501804][T11737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.513916][T11737] bond0 (unregistering): Released all slaves [ 234.811672][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1635'. [ 235.009364][T12117] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.1638'. [ 235.026909][T12113] ================================================================== [ 235.035025][T12113] BUG: KASAN: null-ptr-deref in generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.043301][T12113] Read of size 24 at addr 0000000000000010 by task syz.1.1634/12113 [ 235.051298][T12113] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.053655][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.1.1634 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 235.064446][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.074533][T12113] Call Trace: [ 235.077828][T12113] [ 235.080774][T12113] dump_stack_lvl+0x241/0x360 [ 235.085478][T12113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.090709][T12113] ? __pfx__printk+0x10/0x10 [ 235.095327][T12113] ? _printk+0xd5/0x120 [ 235.099514][T12113] print_report+0xe8/0x550 [ 235.103951][T12113] ? __virt_addr_valid+0x58/0x530 [ 235.108996][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.114918][T12113] kasan_report+0x143/0x180 [ 235.119447][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.125370][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.131286][T12113] kasan_check_range+0x282/0x290 [ 235.136244][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.142165][T12113] __asan_memcpy+0x29/0x70 [ 235.146604][T12113] generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.152360][T12113] ? __pfx_generic_hwtstamp_get_lower+0x10/0x10 [ 235.158639][T12113] ? lockdep_rtnl_is_held+0x26/0x40 [ 235.163859][T12113] ? dev_get_hwtstamp_phylib+0x284/0x4c0 [ 235.169518][T12113] tsconfig_prepare_data+0x133/0x780 [ 235.174806][T12113] ? ethnl_default_doit+0x567/0xd80 [ 235.180002][T12113] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 235.185810][T12113] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 235.192053][T12113] ? rcu_is_watching+0x15/0xb0 [ 235.196815][T12113] ? trace_kmalloc+0x1f/0xd0 [ 235.201403][T12113] ethnl_default_doit+0x599/0xd80 [ 235.206429][T12113] ? __pfx_ethnl_default_doit+0x10/0x10 [ 235.211971][T12113] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 235.218300][T12113] genl_rcv_msg+0xb14/0xec0 [ 235.222802][T12113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.227832][T12113] ? __pfx_lock_acquire+0x10/0x10 [ 235.232848][T12113] ? __pfx_ethnl_default_doit+0x10/0x10 [ 235.238391][T12113] ? __pfx___might_resched+0x10/0x10 [ 235.243669][T12113] netlink_rcv_skb+0x1e3/0x430 [ 235.248425][T12113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.253448][T12113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.258741][T12113] genl_rcv+0x28/0x40 [ 235.262717][T12113] netlink_unicast+0x7f6/0x990 [ 235.267479][T12113] ? __pfx_netlink_unicast+0x10/0x10 [ 235.272760][T12113] ? __virt_addr_valid+0x45f/0x530 [ 235.277866][T12113] ? __phys_addr_symbol+0x2f/0x70 [ 235.282887][T12113] ? __check_object_size+0x47a/0x730 [ 235.288168][T12113] netlink_sendmsg+0x8e4/0xcb0 [ 235.292930][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.298216][T12113] ? aa_sock_msg_perm+0x91/0x160 [ 235.303149][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.308430][T12113] __sock_sendmsg+0x221/0x270 [ 235.313108][T12113] ____sys_sendmsg+0x52a/0x7e0 [ 235.317875][T12113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.323164][T12113] ? __fget_files+0x2a/0x410 [ 235.327755][T12113] ? __fget_files+0x2a/0x410 [ 235.332346][T12113] __sys_sendmsg+0x269/0x350 [ 235.336929][T12113] ? __pfx_futex_wake+0x10/0x10 [ 235.341777][T12113] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.346895][T12113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.353217][T12113] ? do_syscall_64+0x100/0x230 [ 235.357977][T12113] ? do_syscall_64+0xb6/0x230 [ 235.362647][T12113] do_syscall_64+0xf3/0x230 [ 235.367142][T12113] ? clear_bhb_loop+0x35/0x90 [ 235.371816][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.377703][T12113] RIP: 0033:0x7f99e6d85d29 [ 235.382111][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.401714][T12113] RSP: 002b:00007f99e7b43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.410137][T12113] RAX: ffffffffffffffda RBX: 00007f99e6f76160 RCX: 00007f99e6d85d29 [ 235.418106][T12113] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000008 [ 235.426071][T12113] RBP: 00007f99e6e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 235.434038][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.442005][T12113] R13: 0000000000000000 R14: 00007f99e6f76160 R15: 00007ffd7cde5aa8 [ 235.449976][T12113] [ 235.452985][T12113] ================================================================== [ 235.467934][T12113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.475170][T12113] CPU: 1 UID: 0 PID: 12113 Comm: syz.1.1634 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 235.485956][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.496032][T12113] Call Trace: [ 235.499329][T12113] [ 235.502274][T12113] dump_stack_lvl+0x241/0x360 [ 235.506975][T12113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.512192][T12113] ? __pfx__printk+0x10/0x10 [ 235.516805][T12113] ? preempt_schedule+0xe1/0xf0 [ 235.521667][T12113] ? vscnprintf+0x5d/0x90 [ 235.526022][T12113] panic+0x349/0x880 [ 235.529940][T12113] ? check_panic_on_warn+0x21/0xb0 [ 235.535063][T12113] ? __pfx_panic+0x10/0x10 [ 235.539483][T12113] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 235.545458][T12113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.551782][T12113] ? print_report+0xe8/0x550 [ 235.556370][T12113] check_panic_on_warn+0x86/0xb0 [ 235.561303][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.567197][T12113] end_report+0x77/0x160 [ 235.571436][T12113] kasan_report+0x154/0x180 [ 235.575936][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.581828][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.587717][T12113] kasan_check_range+0x282/0x290 [ 235.592649][T12113] ? generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.598543][T12113] __asan_memcpy+0x29/0x70 [ 235.602959][T12113] generic_hwtstamp_get_lower+0x251/0x3a0 [ 235.608675][T12113] ? __pfx_generic_hwtstamp_get_lower+0x10/0x10 [ 235.614919][T12113] ? lockdep_rtnl_is_held+0x26/0x40 [ 235.620108][T12113] ? dev_get_hwtstamp_phylib+0x284/0x4c0 [ 235.625736][T12113] tsconfig_prepare_data+0x133/0x780 [ 235.631020][T12113] ? ethnl_default_doit+0x567/0xd80 [ 235.636211][T12113] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 235.642022][T12113] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 235.648265][T12113] ? rcu_is_watching+0x15/0xb0 [ 235.653027][T12113] ? trace_kmalloc+0x1f/0xd0 [ 235.657614][T12113] ethnl_default_doit+0x599/0xd80 [ 235.662637][T12113] ? __pfx_ethnl_default_doit+0x10/0x10 [ 235.668176][T12113] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 235.674509][T12113] genl_rcv_msg+0xb14/0xec0 [ 235.679011][T12113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.684040][T12113] ? __pfx_lock_acquire+0x10/0x10 [ 235.689055][T12113] ? __pfx_ethnl_default_doit+0x10/0x10 [ 235.694596][T12113] ? __pfx___might_resched+0x10/0x10 [ 235.699966][T12113] netlink_rcv_skb+0x1e3/0x430 [ 235.704740][T12113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.709760][T12113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.715050][T12113] genl_rcv+0x28/0x40 [ 235.719026][T12113] netlink_unicast+0x7f6/0x990 [ 235.723785][T12113] ? __pfx_netlink_unicast+0x10/0x10 [ 235.729061][T12113] ? __virt_addr_valid+0x45f/0x530 [ 235.734168][T12113] ? __phys_addr_symbol+0x2f/0x70 [ 235.739195][T12113] ? __check_object_size+0x47a/0x730 [ 235.744476][T12113] netlink_sendmsg+0x8e4/0xcb0 [ 235.749236][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.754514][T12113] ? aa_sock_msg_perm+0x91/0x160 [ 235.759467][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.764755][T12113] __sock_sendmsg+0x221/0x270 [ 235.769436][T12113] ____sys_sendmsg+0x52a/0x7e0 [ 235.774209][T12113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.779491][T12113] ? __fget_files+0x2a/0x410 [ 235.784077][T12113] ? __fget_files+0x2a/0x410 [ 235.788669][T12113] __sys_sendmsg+0x269/0x350 [ 235.793253][T12113] ? __pfx_futex_wake+0x10/0x10 [ 235.798101][T12113] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.803222][T12113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.809548][T12113] ? do_syscall_64+0x100/0x230 [ 235.814309][T12113] ? do_syscall_64+0xb6/0x230 [ 235.818978][T12113] do_syscall_64+0xf3/0x230 [ 235.823475][T12113] ? clear_bhb_loop+0x35/0x90 [ 235.828146][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.834031][T12113] RIP: 0033:0x7f99e6d85d29 [ 235.838438][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.858039][T12113] RSP: 002b:00007f99e7b43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.866452][T12113] RAX: ffffffffffffffda RBX: 00007f99e6f76160 RCX: 00007f99e6d85d29 [ 235.874417][T12113] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000008 [ 235.882381][T12113] RBP: 00007f99e6e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 235.890362][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.898343][T12113] R13: 0000000000000000 R14: 00007f99e6f76160 R15: 00007ffd7cde5aa8 [ 235.906324][T12113] [ 235.909591][T12113] Kernel Offset: disabled [ 235.913931][T12113] Rebooting in 86400 seconds..