last executing test programs: 31.044073288s ago: executing program 4 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000000000fa0f16f0aadf7ef467e551ff7a7a4f672c5aeeef7c5c0e"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x6, 0x9f3) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r7], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x7, [@ptr={0x9}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x11, 0x4}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x62, 0x6}, @enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0xc, [{0xc, 0x0, 0xffff}, {0x10, 0x9, 0x2}, {0xa, 0x7ffe, 0x81}, {0x1, 0x3642, 0x4}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x2}, @const={0x8, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x71, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/36, 0xa3, 0x24, 0x1, 0x9, 0x0, @void, @value}, 0x28) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="800000000000000000000000e6ffffff000700"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r8}, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r8, 0x0) 30.795549467s ago: executing program 4 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x0, 0x0, @void, @value}, 0x10) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) ioctl$int_out(r0, 0xfca6, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001200)={0xf8, 0x5, 0x1ff, 0xfffffffc, r7}, &(0x7f0000001240)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000180)={r7, 0xff, 0x10}, &(0x7f00000001c0)=0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xe0c, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x4}, 0xf, 0x5, 0x2, 0x3, 0x13, 'syz0\x00', "50602a9d9d7cca20384f3242b0616281544288f3c5f289a9c40c9d42732978cf", "f37cbd28c572da467f42cc1f28860f1d00dc97d4b9b77c1a3ae833797210040a", [{0x3, 0x800, {0x2, 0x2}}, {0x6, 0x5}, {0x2, 0x1, {0x0, 0x6}}, {0x5, 0xfff0, {0x3, 0xfffffff9}}, {0x401, 0xff, {0x3, 0x8}}, {0x0, 0x5, {0x1, 0xa172}}, {0x7fff, 0x0, {0x0, 0x9}}, {0x69d5, 0x10, {0x1, 0x4}}, {0xb, 0x200, {0x2}}, {0x0, 0x0, {0x1, 0x3}}, {0x6, 0x7f, {0x0, 0x1}}, {0x0, 0x0, {0x3, 0xe0d4}}, {0x46f2, 0x2, {0x2, 0x3}}, {0x10, 0x1, {0x2, 0x4}}, {0xe, 0x6, {0x3, 0x4}}, {0x6, 0x4, {0x2, 0x586df86b}}, {0x5de2, 0xf3a3, {0x0, 0x4}}, {0x5, 0x3, {0x0, 0x9}}, {0x2, 0x8, {0x3, 0x2}}, {0xb, 0x7fff, {0x2, 0x5}}, {0x7, 0x7, {0x2, 0x30b}}, {0x9, 0x1, {0x3}}, {0x0, 0xff, {0x1, 0x3}}, {0x0, 0x4, {0x3, 0x6}}, {0x247, 0x2, {0x2, 0xc}}, {0x3, 0x5, {0x0, 0x3}}, {0x1ff, 0x200, {0x3, 0x1ff}}, {0x3, 0xac0, {0x2, 0x4}}, {0x3, 0x6, {0x3, 0x5}}, {0x4, 0x0, {0x1, 0x5}}, {0x80, 0x9, {0x0, 0xa}}, {0x1, 0x4, {0x2, 0x9}}, {0x5, 0x64, {0x3, 0x400}}, {0xffff, 0x1, {0x0, 0x7}}, {0x0, 0x9, {0x0, 0xe}}, {0x55, 0x2, {0x3, 0x1ff}}, {0x1, 0x4be, {0x1, 0x7}}, {0x0, 0x8, {0x3, 0x1}}, {0x4, 0x7, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xe376}, 0x0, 0xb4, 0x7e5e, 0xfffc, 0x15, 'syz1\x00', "88e811845bf81452f347725919d38ae213d657645b422cf8fbc8f7b9de09e7ce", "15a099bfd8b7ba16754f7745d926d1ad7435db7c4ffed3c34f8c810bc98baab2", [{0xf634, 0x1, {0x4, 0x800}}, {0x7f, 0x81, {0x1, 0x9}}, {0x8, 0x7, {0x1, 0x10}}, {0xfffe, 0x9, {0x3, 0xf}}, {0x7ff, 0x4, {0x3, 0x2}}, {0x3, 0x0, {0x2, 0x8f4d}}, {0x1ff, 0xa, {0x2, 0x330}}, {0x0, 0x81, {0x1}}, {0xeb41, 0x3, {0x0, 0xcb5c}}, {0x2, 0x412c, {0x2, 0xd}}, {0xb, 0x288, {0x2, 0x3}}, {0xfe, 0x9f, {0x3, 0x40000000}}, {0x7, 0x85a, {0x3, 0x33}}, {0x7, 0x0, {0x0, 0x6}}, {0x689, 0x8, {0x0, 0xa}}, {0x5, 0x4, {0x3, 0x9}}, {0x6, 0x7, {0x1, 0x5}}, {0x1, 0x8b, {0x3, 0xbb}}, {0x80, 0x800, {0x1, 0x2}}, {0xf5d7, 0x6, {0x0, 0xe}}, {0x41, 0x91, {0x3, 0xd76}}, {0x7, 0x5, {0x2, 0x2}}, {0xdcca, 0x8, {0x1, 0x9}}, {0x2580, 0x0, {0x1, 0x8}}, {0x0, 0x3, {0x2, 0xffffffff}}, {0xdea5, 0x0, {0x0, 0x5}}, {0x1, 0xff39, {0x0, 0x2e0}}, {0x7, 0x7, {0x308d7e65b22533b2, 0x2}}, {0x8e8, 0x7, {0x1, 0x7}}, {0x3, 0x6044, {0x1, 0x3}}, {0x8, 0x4, {0x0, 0x2}}, {0x6, 0x4, {0x2, 0x200}}, {0x9, 0x2, {0x2, 0x83}}, {0x6, 0x3, {0xf7e31ec7c0ee60ec, 0x7000000}}, {0x3ff, 0x6, {0x2, 0xe}}, {0x1f29, 0x7, {0x3, 0xf8}}, {0x1, 0x7, {0x1, 0x6}}, {0x6, 0x88f, {0x2}}, {0x4, 0x7, {0x0, 0x9}}, {0x9, 0xdf3e, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x8, 0x9, 0x8, 0x1, 0x5, 'syz1\x00', "2031e4335c43cfe1862ea1c4158a20dc061b619bcb7ab8d39b9563b24f79dd2a", "52700b2e535119d8c46143c2ff8733782cb9c36765dd22decc3161b208605b5b", [{0x0, 0x5, {0x1, 0x4}}, {0x80, 0xfff, {0x3, 0x7a4}}, {0x3, 0x8, {0x3, 0x73a2}}, {0x1, 0x5, {0x2}}, {0x7, 0x100, {0x3, 0x4}}, {0x1000, 0x7ff, {0x0, 0xffff}}, {0x401, 0xbdf, {0x0, 0x5}}, {0x401, 0x6, {0x1, 0x10001}}, {0x4, 0x18, {0x2, 0x40}}, {0x5, 0x4, {0x0, 0x49}}, {0x9, 0x8, {0x1, 0x8000}}, {0x4, 0x7, {0x2, 0x6}}, {0xd9ba, 0x1, {0x0, 0x6}}, {0x4, 0x9, {0x3}}, {0xa0, 0x0, {0x3}}, {0x6, 0x60, {0x1, 0x2}}, {0x2, 0xcbd, {0x2, 0x100}}, {0x0, 0x4, {0x0, 0xfd}}, {0x87, 0x8}, {0x9, 0x4}, {0x5, 0x6, {0x2, 0x40}}, {0x24, 0x5, {0x0, 0x8}}, {0x0, 0x5, {0x0, 0xfbe}}, {0x8f6, 0x0, {0x0, 0x6}}, {0x6, 0x8, {0x3, 0xac}}, {0xd4be, 0x0, {0x0, 0x8}}, {0xfff9, 0x200, {0x2, 0x3ff}}, {0xc5, 0x4}, {0x1, 0x1294, {0x3, 0x3}}, {0x400, 0x96dd, {0x2, 0x80000000}}, {0x51, 0x6, {0x1, 0x1}}, {0x81, 0x9, {0x0, 0xc}}, {0x9, 0x768d, {0x3, 0x7fff}}, {0xfffd, 0x9, {0x3, 0x81}}, {0x5, 0x5, {0x3, 0x7fffffff}}, {0xf97c, 0x2c17, {0x3, 0xb}}, {0x0, 0xce4b, {0x2, 0x4}}, {0x4, 0x5, {0x0, 0x401}}, {0x6, 0x63, {0x1, 0x9}}, {0x52, 0x70, {0x0, 0xfffffffa}}]}}}, {{0x254, 0x1, {{0x2}, 0x9, 0x9, 0x8, 0x7, 0xd, 'syz1\x00', "21e355a91db9f31809b6b1795252fce92d67221df45a32d1cc1deb0394020e53", "5197cce2e65b61da984b52e8a72105c8277bc526c0558f2b3f7a3af3464a658c", [{0xfffe, 0x8, {0x1, 0xb}}, {0x5, 0xfeff, {0x2, 0x7}}, {0xa, 0x0, {0x3}}, {0xa70a, 0x0, {0x0, 0x7}}, {0x5, 0x4, {0x2, 0x10000}}, {0x8001, 0x7, {0x0, 0x9}}, {0x2, 0x8}, {0x8, 0xb, {0x0, 0x9c}}, {0x8, 0x1, {0x3, 0x6}}, {0x7d, 0x100, {0x3, 0x6}}, {0xa93, 0x0, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0xf60}}, {0x3, 0x4, {0x2, 0xe07}}, {0x4, 0x200, {0x0, 0x101}}, {0x0, 0x4a9, {0x3, 0x2}}, {0x1000, 0x40, {0x3, 0x2}}, {0x1, 0xfc, {0x2, 0xc06}}, {0x0, 0xa40, {0x3, 0x7fff}}, {0x1000, 0x5, {0x3, 0x600000}}, {0x7, 0x5, {0x1, 0x800}}, {0xfffb, 0x6, {0x2, 0x2}}, {0x8, 0xc2c5, {0x3, 0x2}}, {0x40, 0x4, {0x3, 0x3ff}}, {0x3, 0x99, {0x1, 0xffff}}, {0x3, 0xc, {0x1, 0x7}}, {0x697, 0x8911, {0x2, 0x7}}, {0xf3, 0x8, {0x0, 0x2}}, {0xffff, 0x80, {0x0, 0x10000}}, {0xfff9, 0x4, {0x2, 0x8}}, {0x7fff, 0xd, {0x1, 0x1}}, {0x5, 0x400, {0x1, 0xa700000}}, {0x8, 0x7, {0x0, 0xfff}}, {0xfff, 0x9, {0x2}}, {0xfff0, 0xfff8, {0x1, 0x5}}, {0x8, 0x9, {0x2, 0x4}}, {0x8, 0x101, {0x0, 0x200}}, {0x6, 0x0, {0x1, 0x1ac4cdf3}}, {0x50, 0x6, {0x0, 0x5}}, {0x601, 0x5, {0x0, 0xffff}}, {0x6, 0xffff, {0x0, 0xbb}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0xfb, 0x6, 0x0, 0x1, 0x20, 'syz0\x00', "e3051c09f3f83e7cf63d29def548b3b977f27cf88d2be038a4f364e55620d09f", "db7f5d8a45c4c07f41a55b5ac56af97132b02dc30d71812be4e1110633f31428", [{0x5, 0xfff7, {0x1, 0x4}}, {0x8, 0x40, {0x2}}, {0x44, 0x7}, {0x7ff, 0xb, {0x0, 0x1}}, {0x5, 0xfffb, {0x0, 0x7}}, {0x0, 0x2, {0x2}}, {0x3, 0x10, {0x0, 0x6}}, {0xe6d8, 0x2b, {0x3, 0x7ff}}, {0x0, 0x1, {0x1, 0x5af}}, {0x1, 0x4, {0x0, 0x1}}, {0x400, 0x5, {0x2, 0x6}}, {0x7, 0x8, {0x3, 0xf6}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x7, {0x1, 0x8}}, {0x89, 0xa, {0x0, 0x9}}, {0x6, 0x6, {0x2, 0x2}}, {0x5, 0x2766, {0x2, 0x7}}, {0x7fff}, {0x2, 0x3, {0x1}}, {0x4, 0x0, {0x1, 0x2}}, {0xda, 0x1, {0x0, 0x8}}, {0x6, 0x1, {0x2, 0x680a}}, {0xd}, {0x2, 0x85b, {0x3, 0xf479}}, {0x8000, 0x2, {0x3, 0xeffa}}, {0x401, 0x401, {0x1, 0x2}}, {0x6, 0xc, {0x2, 0x6}}, {0xfb54, 0x5, {0x1, 0x8bd}}, {0x41d, 0x971, {0x0, 0x1}}, {0x8, 0x82, {0x0, 0xdb1}}, {0x0, 0x4, {0x3, 0x9}}, {0x1, 0x800, {0x0, 0x1}}, {0x800, 0xfff, {0x0, 0xa}}, {0x85, 0x9, {0x0, 0x9}}, {0x1, 0x2, {0x3, 0x1d0}}, {0x0, 0x314, {0x3, 0x4}}, {0x7, 0x9, {0xd307aba6c2346e78, 0x101}}, {0x3, 0x3, {0x0, 0x3}}, {0x0, 0x2, {0x3, 0x1}}, {0x401, 0xfffe, {0xe0e83a519312a0e5, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x0, 0x2, 0x6, 0xc3c4, 0x20, 'syz1\x00', "2674f0db9dfde573c9a91adb3560249c9319e38bab39dfcc2edf36819bc8c7d9", "cfb602ba7e75a0b71d7d6c831ac4ef6de1ec8ca37aadd5b44dd6fa50511cc11e", [{0x2, 0x6, {0x2, 0x5}}, {0xe, 0x9, {0x3, 0x517a81dc}}, {0x9, 0x4969, {0x0, 0x8}}, {0x9, 0x3936, {0x3, 0x4}}, {0x5, 0x8, {0x1, 0x4d747871}}, {0x7, 0x1000, {0x1, 0xa97c}}, {0xf000, 0x7, {0x1, 0xd84}}, {0x6, 0x56, {0x0, 0x7ff}}, {0x78, 0x40, {0x0, 0x7}}, {0x7ff, 0x6, {0x3, 0x3}}, {0x7, 0xe055, {0x0, 0x80000001}}, {0x3, 0x7, {0x3, 0x1}}, {0x800, 0x200, {0x1, 0x40}}, {0x200, 0x1, {0x2, 0x800}}, {0x3, 0x401}, {0x6, 0x8, {0x1, 0x6}}, {0x8, 0x688, {0x2, 0xfffffff4}}, {0x3, 0x3, {0x0, 0x8001}}, {0xb, 0x2, {0x3, 0x8}}, {0x9, 0x3, {0x2, 0x10}}, {0x4, 0x6, {0x0, 0x3}}, {0x410, 0x5, {0x0, 0x8}}, {0xb, 0xb3f7, {0x2, 0xfffffffd}}, {0xe, 0x2, {0x2, 0xffff}}, {0x0, 0x8, {0x2, 0x3}}, {0xb, 0xac2f, {0x1, 0x1}}, {0xfff, 0x7, {0x0, 0x9}}, {0x200, 0x19ae, {0x3, 0x3}}, {0x9, 0x6, {0x0, 0x101}}, {0xab60, 0x7, {0x0, 0x6}}, {0x5, 0x4c, {0x1, 0x7ff}}, {0x8, 0x6, {0x0, 0xe}}, {0x440, 0x100, {0x0, 0x4da7}}, {0x0, 0xb20, {0x2, 0x3}}, {0x2, 0x5, {0x2, 0x2}}, {0xb63, 0x0, {0x3, 0x7ff}}, {0xb9, 0xd972, {0x3, 0x2}}, {0x3, 0x3, {0x2, 0xc52}}, {0x33, 0x8, {0x0, 0x7}}, {0x5, 0x8001}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r8, 0xf, 0x6}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x26e1, 0x0) close(r9) r10 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11}, 0x18) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000003c0)=0x1003) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000080)=0x2) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r14, 0xc004743e, 0x20001400) 30.340695759s ago: executing program 4 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x71}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xafee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="0300000000000000140012800b0001006d61637365630000040002800800", @ANYRES32=r5], 0x44}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@ipv6_getrule={0x0, 0x22, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x1c}, ["", ""]}, 0x60}, 0x1, 0xba01, 0x0, 0x2000}, 0x4044854) 29.851895792s ago: executing program 4 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r7, &(0x7f00000004c0)="bea05d17b8c350e896c7d91f572ae51e1ddd31e9cadb40af457e9a8eb8b1a4418cfaf794e9a74a2954701a2f7bcf0824a133f8b24a94e36b51d2064d37e80a402e364566b88726096bf90a650cd6830e554ec5a25b776bd58d5d4a20e234e9bf89218a3086fddc8f144d82273071f5998cf5f86dcade4ac74061a685041660024f03e14cc0ab45a299cc80210c7759131dfc0edb62efbcaf93d12ab1641ebc4bb899ffbbf39fc34d557ed7eadd86", &(0x7f0000000240)=""/122, 0x4}, 0x20) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000100001000000280001801400040020010000000000000000000000000001060001000a0000000800060003000000"], 0x3c}}, 0x48080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08000180fffffffe"], 0xf8}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 18.544440165s ago: executing program 4 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r7, &(0x7f00000004c0)="bea05d17b8c350e896c7d91f572ae51e1ddd31e9cadb40af457e9a8eb8b1a4418cfaf794e9a74a2954701a2f7bcf0824a133f8b24a94e36b51d2064d37e80a402e364566b88726096bf90a650cd6830e554ec5a25b776bd58d5d4a20e234e9bf89218a3086fddc8f144d82273071f5998cf5f86dcade4ac74061a685041660024f03e14cc0ab45a299cc80210c7759131dfc0edb62efbcaf93d12ab1641ebc4bb899ffbbf39fc34d557ed7eadd86", &(0x7f0000000240)=""/122, 0x4}, 0x20) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000100001000000280001801400040020010000000000000000000000000001060001000a0000000800060003000000"], 0x3c}}, 0x48080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08000180fffffffe"], 0xf8}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 7.228910246s ago: executing program 4 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r7, &(0x7f00000004c0)="bea05d17b8c350e896c7d91f572ae51e1ddd31e9cadb40af457e9a8eb8b1a4418cfaf794e9a74a2954701a2f7bcf0824a133f8b24a94e36b51d2064d37e80a402e364566b88726096bf90a650cd6830e554ec5a25b776bd58d5d4a20e234e9bf89218a3086fddc8f144d82273071f5998cf5f86dcade4ac74061a685041660024f03e14cc0ab45a299cc80210c7759131dfc0edb62efbcaf93d12ab1641ebc4bb899ffbbf39fc34d557ed7eadd86", &(0x7f0000000240)=""/122, 0x4}, 0x20) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000100001000000280001801400040020010000000000000000000000000001060001000a0000000800060003000000"], 0x3c}}, 0x48080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08000180fffffffe"], 0xf8}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 3.452152253s ago: executing program 0 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000906010200000000000000000200b7ff08000940000000390900020073797a31000000000500010007000000200008801c000780"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0xc0}, 0x10000}, 0x1c) 2.528943998s ago: executing program 0 (id=1679): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0xc8000) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b40)=""/154, 0x9a}, {0x0}], 0x2}, 0x23}], 0x1, 0x10000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e1ffffff00ff0300"/17], 0x48) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) 2.024348172s ago: executing program 3 (id=1684): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0xffffffffffffffd2, &(0x7f0000000080)=[{&(0x7f0000000040)="edfc2b964965c31ec874c6cea27ae273550998750b535f0964ded04791117e9a15273e"}, {&(0x7f0000000340)="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"}], 0x0, 0x0, 0x2c}, 0x20000885) 1.899379002s ago: executing program 3 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cdddabd", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a6970766c616e3000"], 0x34}}, 0x0) 1.719549277s ago: executing program 3 (id=1687): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x77, 0xa8, @random="9dd1aa309f8ccba5c0afd30917308850a9951dc2faeca3269cd28e2653a4377726edaa3287e6924472fc6ac0c1cc416307c776f7c275dc6a57751011f356c80822815f64f5cfbf45289d97746b6e22820be891b9c1d43b097fed903a366b3f5a6d331da27f3a6e067ac0ed79ac7c4d2ffcb21f"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4854) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40100}, 0x4) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000380)=""/201, &(0x7f0000000480)=0xc9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x278, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x3464}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xe4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffb}, {0x8, 0x15, 0x65000000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x15b}, {0x6, 0x11, 0x6aa}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xbd73}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x4}}]}, 0x278}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r1, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r1, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = accept4$inet(r6, 0x0, &(0x7f0000000a00), 0x80000) sendmsg$inet(r7, &(0x7f0000002000)={&(0x7f0000000a40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000a80)="d4e57d70ffc0b2cd80dc5188f13378c46a7d35762b2b89ba994dd21fecee94c599ea43bb414b85fb1d6129229ffe0dd6aed7b2c58be04f079956f869603098c2fda5b7594e16c85231ffb806efcaa535e30a73cc1607233101ff90608de4affe2c0ae17724346ca8f7302ea255ace51a3c94e0bc24246a4adf45d1e1d8ede5ba1518d7bedb60adc968398812a1bf8ba97d6f", 0x92}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)="a17422707c606c8f54a4a68438ca8a64f744ccc7dec3e4cf2ddfadb67e4013566d30bacace4ef258b28c44be2c3b455ca4959d11e159b1599e94c4464f784362235adf15eccde8b57557176216877dceb5f674fd72955d6373810b62242d33ce8e27312a518bfece474c4d026efa8b6c5027881be1f42a72658b257390fd7ecdc6960598e96356fcb9510032ee16236290b7b2448b35edd55498bb0b15d77607f5fc7520df0a8eb9622773c59beaf5e0a3390acd991b005d702b411e71d6409ea840ed6e8395a615acf17145f78e8e7bbd54c2a4f0abed1cd288782f", 0xdc}, {&(0x7f0000000c80)="c7883aff08e266e517bda2b4964718627476610f92df4960da4699463c80869ee12eebbc03a712c06e122dcd7ceda5540fab6a27f7621c59fe30a7fa8052fd021d5be9388a434dfa3e49c56eb2b23367", 0x50}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)="e4fbc0a708ec951a17526ba76695fe70c8589370405fe747fb6079cb9f461dfeac676c4a27d17336bed8587191808b52a1bf06497a5e0dfdf6e2ccc4fe9fd7a3eb49dff6a01aa7e298b911ec932c", 0x4e}, {&(0x7f0000000dc0)="aeb9f5772d47221de2cfc3451e554c70c6539a32d41d8f6f", 0x18}, {&(0x7f0000000e00)="4049789ab18d3933f048506c24292999eaf90ffcf62de3a7585c21dd3905337742a420a753add543ed9b41df24a3c17bf9c9dea1fb5a1193e2689d7180", 0x3d}, {&(0x7f0000000e40)="9074ae93857087061644b97ac0fa6d29b15d9e06f03d94ee6f6840769720fcca6eca70c3780c5e80fdf2945349d8d0e0e6f1abcd4d47a37885f9e48310d7550e3bcbb5db111a8509121e1eb5bea6f94e898b8d37296837d2298192d61d7d47bccbdea823349f10d87fc7c8f6c7e0bba4307937bdfb72d5028eafe0cfe6d701eeed0fc27e6b3cbc11f0ac093ec123cf9c3d595f4f3671ede5f631dc4d104d50fc7fc96d259544fb6b3a5e47e327f45ea789a50da143714d4db9bd7cbf6680062aa25a0a2235263bab", 0xc8}, {&(0x7f0000000f40)="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", 0x1000}], 0xa}, 0x4080) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x90, r1, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd5c9, 0x77}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d51dd446ba"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "c059cce0b888f36033c0"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "3410e99811cb20d86bea06"}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x4008841) (async) sendmmsg$inet6(r3, &(0x7f0000002640)=[{{&(0x7f00000021c0)={0xa, 0x4e23, 0x7, @private0, 0x5}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000002200)="9a0290e34163176fe45703cfad1fb92b3d76e8e4ac7ca89a70ecc7c42618f0a7c1df46721857cc20b9b700c936615f9934bf248b138fc675837371e067b9f84b5542a68e20de42a39439", 0x4a}], 0x1, &(0x7f00000022c0)=[@dstopts={{0x40, 0x29, 0x37, {0x2c, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6ad9}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x84, 0x11, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @generic={0xf9, 0x59, "dee543edb0cb94258d0ba1a2b751f4f96bd3df1a406753da18f6fa49be16ff97930eb3abaff372b830371fab54cc09171947bbb7084a271ab534fea659842f475f59ee6707feb7c7d3b06d622dd081bae92b7f787a7659adbc"}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x1, 0x8, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xefb7}}, @dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0x3, [0x9, 0x3]}}]}}}], 0x1a8}}, {{&(0x7f0000002480)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=[@hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}}}, @hoplimit_2292={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff9}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x11, 0x14, 0x0, 0x55, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x108}}], 0x2, 0x805) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000026c0)={r5, 0x8, 0x8, 0xff}) sendto$rose(r8, &(0x7f0000002700)="f15925d3325dd35216a43f6ebe8fc2db516db9d53cc810865800226b79d79b9e90cca1dc48bfc992af82894aa4932560eb54b4b73cf355df08e23090f803d7c72bf6600bce3a1baa0f992158605a561ca2e64a3b813478c0354cd8fc7983421faecab4e8a2da13f9bb4c010a0bebb3ea7ffb934e3d936289f03f55f70e9b4d09a38a26831c798fc07d8f7283187dfa7de7dfa131debe0eab6c66e45f8980464f8a1ec400fe3e299320ab79f0ae118c07daafa39277d2c355086faba423d19515b88712e7efc420d087336a6aef7f0c15ed05e433dc5f3222c5bc270a537db64c926034f7606a8ebf54a74708c0d951fc27a8cd9bc9a66836", 0xf8, 0x8000, &(0x7f0000002800)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x2c, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4090) (async) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1ed}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000002ac0)={r8}, 0x8) setsockopt$inet6_udp_int(r11, 0x11, 0x1, &(0x7f0000002b00)=0xbf7, 0x4) setsockopt$inet6_dccp_buf(r11, 0x21, 0xf, &(0x7f0000002b40)="b3a7e8543c579ac719973ad89236f4f9e22b518ecb34683c244ec4b0d33bf452b18d9a54505e5872b22f38818c60a4e2929a9fa8374e170f4d77cc538a2d9bbdb7174a0aa68cb4f4dd15b9b5c39f1e981d57a951b09704b20741da11d702deaa8c0d96b61032a61bc0075180ed41142c2b2ca77dac9e5f76cd1711df65969ca8bc9bfc9aec15c8ff5f6f1b4c0d92c9941458868dfef19b0340c5f8bd98d17b0e8062b2f5f8523c55a30ba7e48bdf2cf9782eed363b4f681f5b468c5a6841521d201e3d1b96", 0xc5) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8012}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000002d80)=0x2, 0x4) 1.683643779s ago: executing program 3 (id=1688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) sendto$inet6(r1, &(0x7f0000006580)="e2", 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x8, 0x11, 0x0, @private0, @local, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r6, r3, 0x0, 0x9, &(0x7f0000000100)='\\[]\x89\x99}-&\x00', 0x0}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5243}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', r4, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x101, 0x9}, 0x10, 0x14873, r5, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x1, 0x1, 0x1, 0xa}, {0x5, 0x2, 0xb, 0x3}, {0x1, 0x1, 0x7, 0xd803df801899ebba}, {0x2, 0x3, 0xd, 0x96dbcc11bc7a3e9c}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x4, 0x10, 0x4}, {0xc, 0x2, 0xf, 0xc}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x4, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fff, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f00000001c0)="ec8e7d5eff8f00", 0x7}], 0x1) r12 = accept4(r9, 0x0, 0x0, 0x0) sendfile(r12, r8, 0x0, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r7}, 0x4) 1.498974882s ago: executing program 0 (id=1691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x2, 0x4, 0x13e8, 0xffffffff, 0x1200, 0x1318, 0x0, 0xfeffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @private2, [], [], 'veth0\x00', 'virt_wifi0\x00'}, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0xff, 0x0, 0x0, './cgroup.net/syz1\x00'}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond0\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x2, 0x4, 0x13e8, 0xffffffff, 0x1200, 0x1318, 0x0, 0xfeffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @private2, [], [], 'veth0\x00', 'virt_wifi0\x00'}, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0xff, 0x0, 0x0, './cgroup.net/syz1\x00'}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond0\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async) 1.371822418s ago: executing program 0 (id=1692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000020000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e0001000000000000000000000000e60008"], 0x358}}, 0x0) 1.324298006s ago: executing program 1 (id=1693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000030800000000000000000000000a85000300210000002f26a62c2cf956cf1a63b75a123ae3795d91b9c3f51b65114303fb63177c4f4e0097d88d686e55997ec55d9b4d7bbdf749cda8e3a6ec859b308b8bbe4d2375cc7edcf7728442f1790a929d65b6eb85966b087cbdb170b0402a06e6a3be791faf0e192af117be045c7ba1b3df7677812c3a305bcd54f481"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20008044) 1.264117811s ago: executing program 3 (id=1694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000280)=0x3fa8, 0x4) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40010020, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_sco(r6, &(0x7f0000000040), 0x8) shutdown(r6, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f00000001c0)={0x1f, @none}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYRES16=r8], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x810) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000340)={@val, @void, @eth={@broadcast, @broadcast, @val={@void, {0x6558}}, {@can={0xc, {{0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "da73144180a2d10b"}}}}}, 0x26) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff0900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004", @ANYRES64=r0], 0x34}}, 0x0) 1.150741624s ago: executing program 0 (id=1695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 1.064379s ago: executing program 2 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b00010065787468647200001400028008000440000000f508000640000000010900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 941.258076ms ago: executing program 1 (id=1697): unshare(0x20000400) r0 = socket(0x2000000015, 0x80005, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000085ea507c50948ee5ce81e6dd47f8c8dbfdf00aaa8ed1c8d99534e9837237944f52062997ecbb87a002345eef8254c368169c7fa541dacc2d61cfc6bfc0e1fd1164a9090673d046c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0xf, 0x0, &(0x7f0000001280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d94c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000640)=""/4101, 0x1005, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001007470726f7879000014000280080001400000000108000240000073797a30000000000900020073797a32000000001400000011000100f6ffffffffffffff0000000aa2cbf452b46e278be56fc67cf7f7188bb092fcca87da05099f8a2369a655ddf2989c2ec97471bd68836e3dcc23989a9f4d7955573e5329b3b8fd6a9294f43e6dbcd2674f154331783438240beac95f455a54c5d8000000000000"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x6, @empty, 0x4e20, 0x4, 'lc\x00', 0x9, 0x1, 0x67}, 0x2c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000003a00000000000000004000a4df1a1bc73f7c973a2f3a61e497d8f4eb8e98de98376784a7d0200fb992b3bba368265c33650daa1d3c8d24a5a0d36f1bd4a209e75f240b80484b1015f42c0ca761e11ebcb8cae299a6e3194fd2562d7aed94e4cdc35eb8b5e4c95a749472183af983441ad958db8fc4e513be774e281665b121c9c778ba0bee6030c9654b45c6c5f3d30d1c8e4c7c70a64c7ba050d3551cee795a96908de3304fc8806c2cf3b888cf072a5a32935e23240d"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r5, 0x2, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6663d5f3c3cb908f029d5a952300"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) 940.722572ms ago: executing program 0 (id=1698): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/144, 0x90}], 0x3, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/144, 0x90}], 0x3, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0xfb, 0x5b, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x40, 0x10, 0x10000, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0xfb, 0x5b, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x40, 0x10, 0x10000, 0xff}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000040000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) 917.88068ms ago: executing program 2 (id=1699): r0 = socket(0x1e, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x29, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$packet_tx_ring(r0, 0x10f, 0x8a, &(0x7f0000000580)=@req3, 0x1c) syz_emit_ethernet(0x9c, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2488a8370008000000000000000086006800000b1190780a0101007f000001000000004e234e22006e90784207000100000000e473daab52e050ed9146a9259934d1b3c36ff524138dc66aa986a00971642a466216c8aa274b01b0d4221cc31f01a53ed7930b09f633e2a5f0bd5a90f2b8e8594d40727222c62d274dcf6f1bc727d490312f5e4050de0f85faf6b831465a"], 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x4, 0x8, 0xca4, 0x3f}, 0x14) 867.15181ms ago: executing program 1 (id=1700): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xfe, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x2e, 0x61, 0x20]}}, 0x0, 0x2a, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value}, 0x20) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) 792.16973ms ago: executing program 2 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000e00)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000140000012dbd70007f000000fe800000000000000000000000000035640101010000000000000000000000004e2000054e2000090a00808016000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="b96b6e00010000000c0015005a0735000b0000000a001000010000000000000024000900fcffffffffffffdfd70000000000000004000000000000000100000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000440)=@fragment={0x16, 0x0, 0x8, 0x0, 0x0, 0x6, 0x65}, 0x8) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x7}, "871ac1ed4bf0172b", "8f280cb93c9ba057036495d5f1b6b04ad31b85b07155252e88e4e6e32e649efa", "0600a81d", "904d3681af996c6a"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf25010000004800088044000080080003000200000024000100d1732899f611cd8994034d7f413dc957630e0093c285aca40065cb6311be696b1400040002004e2300000000000000000000000408000100", @ANYRES32=r7, @ANYRES32=r8], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 386.410821ms ago: executing program 2 (id=1702): r0 = socket$inet6(0xa, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @empty=0x12, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000240)=0x38a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x50}], {0x95, 0x0, 0x700}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 264.518599ms ago: executing program 2 (id=1703): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @bcast, 0x3, 0x1, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="220025bd7000fedb093403000000080002000800000014000100fc2200000000000000000000000000000800030008000000"], 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x40080) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x120, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x1000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private, @empty=0xe0}}}}) 203.291976ms ago: executing program 1 (id=1704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x0) 96.427485ms ago: executing program 1 (id=1705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe8800000000000000000000000000010000000000000000000000000000000100000000e2000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e0001000000000000000000000000e60008"], 0x358}}, 0x0) 95.549693ms ago: executing program 3 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000340), 0x2001004, r0}, 0x41) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000008c0)="b402fb", &(0x7f0000000940)=""/108}, 0x20) r1 = socket$inet(0x2, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5, @void, @value, @void, @value}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x32, 0x1, 0x85, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup=r5, r3, 0x17, 0x22, r3, @void, @void, @void, @value, r4}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0xfffffff9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r0, 0xffffffffffffffff, 0x26, 0x20, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) connect$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c2"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) connect$unix(r8, &(0x7f0000000040)=@abs={0x1}, 0x6e) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="08fb3e71789f2ed0003d180f4087f2fb54221aa5b1b2c268990100008062194ab4c8727e034615afc32cef30b6a3f99e352e0e7f2622f960b888af0908f8ffb3b7113056f8776f6a804f968b3aa919e6ccd88ff82e3b4a07624d92a312b67c9c8659b2dfefa9cd5091b7b19a6742c94152b0a3df56a5ebac84c8b6cff8a06e7bfae395c7fb8a998c6d59aeb5aefdbdaf960e3c", 0x93}], 0x1, 0x0, 0x0, 0xe0000000}, 0x30040834) 65.588962ms ago: executing program 2 (id=1707): r0 = socket(0x15, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) (async) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 0s ago: executing program 1 (id=1708): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) close(r4) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) (async) close(r4) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[], 0x0) (async) kernel console output (not intermixed with test programs): promiscuous mode [ 651.764696][ T7624] veth0_vlan: entered promiscuous mode [ 651.828430][ T7632] veth0_vlan: entered promiscuous mode [ 651.851717][ T7630] veth0_macvtap: entered promiscuous mode [ 651.863886][ T7624] veth1_vlan: entered promiscuous mode [ 651.899733][ T7632] veth1_vlan: entered promiscuous mode [ 651.919189][ T7628] veth0_macvtap: entered promiscuous mode [ 651.990188][ T7630] veth1_macvtap: entered promiscuous mode [ 652.000733][ T7628] veth1_macvtap: entered promiscuous mode [ 653.508996][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.520518][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.531538][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.561654][ T7624] veth0_macvtap: entered promiscuous mode [ 653.579718][ T7632] veth0_macvtap: entered promiscuous mode [ 653.592920][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.605581][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.623615][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.634738][ T7624] veth1_macvtap: entered promiscuous mode [ 653.652590][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.664332][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.674684][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.685269][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.696916][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.707014][ T7632] veth1_macvtap: entered promiscuous mode [ 653.736209][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.747688][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.759460][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.771075][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.782153][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.794904][ T7630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.803943][ T7630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.813543][ T7630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.822903][ T7630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.854859][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 653.868180][ T7628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.877128][ T7628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.888741][ T7628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.901985][ T7628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.932985][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.943832][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.954185][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.966900][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.977612][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.988209][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.999758][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.011112][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 654.050646][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.061635][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.071600][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.084890][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.094885][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.106198][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.117327][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.133014][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.152369][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.167645][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.178649][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.188536][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.199146][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.209826][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.221571][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.233573][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.244683][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.257550][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.267726][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.278456][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.288498][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.299406][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.309501][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.320008][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.321082][ T7718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.483'. [ 654.331703][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.361539][ T7632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.373121][ T7632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.382743][ T7632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.392053][ T7632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.414143][ T7624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.425756][ T7624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.434499][ T7624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.444489][ T7624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.605332][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.613220][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.674560][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.683441][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.723600][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.746242][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.776230][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.784100][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.797795][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.810932][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.922490][ T7725] veth0_macvtap: left promiscuous mode [ 654.950955][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 654.969655][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.984312][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.991760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.991783][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.115077][ T6938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.134722][ T6938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.275767][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.486'. [ 655.301861][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 655.332107][ T7746] netlink: 'syz.2.488': attribute type 6 has an invalid length. [ 655.432722][ T7751] macvlan2: entered allmulticast mode [ 655.538660][ T7758] bond0: entered promiscuous mode [ 655.557195][ T7758] bond_slave_0: entered promiscuous mode [ 655.574887][ T7758] bond_slave_1: entered promiscuous mode [ 655.606008][ T7766] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 655.658763][ T7767] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 656.267468][ T5286] IPVS: starting estimator thread 0... [ 656.387353][ T7810] IPVS: using max 16 ests per chain, 38400 per kthread [ 656.455943][ T7821] macvlan2: entered allmulticast mode [ 656.701436][ T7834] __nla_validate_parse: 1 callbacks suppressed [ 656.701459][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 656.722121][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 656.746708][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 656.807311][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 656.839489][ T7838] vlan2: entered promiscuous mode [ 656.862754][ T7838] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 656.948626][ T7838] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 657.456054][ T7865] macvlan2: entered allmulticast mode [ 657.572337][ T7879] bond0: entered promiscuous mode [ 657.577604][ T7879] bond_slave_0: entered promiscuous mode [ 657.583922][ T7879] bond_slave_1: entered promiscuous mode [ 657.619947][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 657.655959][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 657.876247][ T7898] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 657.896993][ T7897] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 658.271965][ T7915] syzkaller1: entered promiscuous mode [ 658.293878][ T7915] syzkaller1: entered allmulticast mode [ 658.317731][ T7924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.538'. [ 658.458179][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 658.483991][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 658.514224][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 658.529288][ T7936] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 659.909639][ T7989] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 659.927218][ T7989] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 659.948105][ T7989] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 659.995359][ T8000] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 660.028779][ T8000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.625778][ T8031] netlink: 'syz.2.570': attribute type 21 has an invalid length. [ 660.790148][ T8046] netlink: 'syz.0.575': attribute type 11 has an invalid length. [ 661.517623][ T8083] macvlan2: entered allmulticast mode [ 661.580337][ T8086] macvlan2: entered allmulticast mode [ 661.773799][ T8099] bond0: entered promiscuous mode [ 661.779338][ T8099] bond_slave_0: entered promiscuous mode [ 661.785726][ T8099] bond_slave_1: entered promiscuous mode [ 661.804975][ T8098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.868471][ T8098] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 661.974136][ T8112] __nla_validate_parse: 8 callbacks suppressed [ 661.974160][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'. [ 662.002537][ T8110] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 662.012890][ T8110] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 662.031233][ T8110] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.593'. [ 662.043553][ T8113] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 662.060162][ T8113] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 662.069584][ T8113] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.593'. [ 662.101018][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 662.737141][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 662.784149][ T8149] xt_l2tp: unknown flags: 10 [ 662.791560][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 662.805658][ T8145] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 665.743472][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 665.887452][ T8224] IPVS: length: 198 != 24 [ 665.935391][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 666.030146][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 666.844322][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 666.861396][ T8273] bridge0: entered promiscuous mode [ 666.875747][ T8273] macsec1: entered promiscuous mode [ 666.881354][ T8273] macsec1: entered allmulticast mode [ 666.886993][ T8273] bridge0: entered allmulticast mode [ 666.894840][ T8273] bridge0: left allmulticast mode [ 666.901051][ T8273] bridge0: left promiscuous mode [ 666.944905][ T8280] netlink: 'syz.0.637': attribute type 9 has an invalid length. [ 666.953592][ T8281] netlink: 'syz.1.639': attribute type 2 has an invalid length. [ 666.962361][ T8280] netlink: 'syz.0.637': attribute type 7 has an invalid length. [ 666.971143][ T8280] netlink: 'syz.0.637': attribute type 8 has an invalid length. [ 667.020570][ T8274] batadv0: entered promiscuous mode [ 667.032171][ T8274] vlan2: entered promiscuous mode [ 667.044695][ T8274] batadv0: left promiscuous mode [ 667.083477][ T8284] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 667.206624][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 667.227245][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.641'. [ 667.230212][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.642'. [ 667.238066][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 667.266447][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 667.521474][ T8303] trusted_key: syz.0.648 sent an empty control message without MSG_MORE. [ 667.604885][ T8301] syzkaller0: entered allmulticast mode [ 667.618319][ T8303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.648'. [ 667.628178][ T8303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.648'. [ 667.652363][ T8308] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 667.865535][ T8326] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 668.607042][ T8340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.656'. [ 669.676276][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 669.685518][ T8322] syz_tun: entered allmulticast mode [ 669.725625][ T8322] syz_tun: left allmulticast mode [ 669.819043][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 670.001808][ T8354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.018329][ T8354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.074632][ T8354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.092194][ T8354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.160779][ T8358] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 670.170432][ T8358] batman_adv: batadv0: Adding interface: vlan1 [ 670.177758][ T8358] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.207602][ T8358] batman_adv: batadv0: Interface activated: vlan1 [ 670.221147][ T8366] macvlan2: entered allmulticast mode [ 671.014089][ T8409] macvlan2: entered allmulticast mode [ 671.312445][ T8418] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 671.613961][ T8428] IPv6: sit1: Disabled Multicast RS [ 672.326230][ T8476] tap0: tun_chr_ioctl cmd 1074025673 [ 672.379119][ T8473] tun0: tun_chr_ioctl cmd 1074025677 [ 672.384980][ T8473] tun0: linktype set to 65534 [ 672.660502][ T8502] __nla_validate_parse: 8 callbacks suppressed [ 672.660525][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 672.883190][ T8517] x_tables: duplicate underflow at hook 1 [ 672.961957][ T8524] netlink: 'syz.2.717': attribute type 3 has an invalid length. [ 672.991206][ T8524] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.717'. [ 673.011557][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 673.312864][ T8551] Cannot find add_set index 0 as target [ 673.322137][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 673.331307][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 673.398267][ T8550] netlink: 'syz.1.723': attribute type 3 has an invalid length. [ 673.416196][ T8550] netlink: 666 bytes leftover after parsing attributes in process `syz.1.723'. [ 673.436856][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 673.441223][ T8555] bridge0: port 3(bond0) entered blocking state [ 673.453360][ T8555] bridge0: port 3(bond0) entered disabled state [ 673.465412][ T8555] bond0: entered allmulticast mode [ 673.470596][ T8555] bond_slave_0: entered allmulticast mode [ 673.487648][ T8555] bond_slave_1: entered allmulticast mode [ 673.800070][ T8574] netlink: 'syz.2.734': attribute type 12 has an invalid length. [ 673.835753][ T8574] netlink: 'syz.2.734': attribute type 29 has an invalid length. [ 673.856353][ T8574] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 673.871819][ T8574] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 673.880180][ T8574] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 673.888471][ T8574] netlink: 'syz.2.734': attribute type 37 has an invalid length. [ 673.897822][ T8574] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 673.905786][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.913175][ T8574] netlink: 59 bytes leftover after parsing attributes in process `syz.2.734'. [ 673.922877][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 673.934352][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 673.972235][ T8571] bond0: entered promiscuous mode [ 673.991118][ T8571] bond_slave_0: entered promiscuous mode [ 674.001389][ T8571] bond_slave_1: entered promiscuous mode [ 674.012856][ T8571] bridge0: entered promiscuous mode [ 674.035147][ T8583] veth1_to_bridge: entered allmulticast mode [ 674.055317][ T8583] veth1_to_bridge: left allmulticast mode [ 674.111777][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.737'. [ 686.058997][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.013105][ T8598] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 700.034049][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.041603][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.150125][ T8602] bridge_slave_0: left allmulticast mode [ 700.158447][ T8602] bridge_slave_0: left promiscuous mode [ 700.164227][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.247401][ T8602] bridge_slave_1: left allmulticast mode [ 700.263279][ T8602] bridge_slave_1: left promiscuous mode [ 700.270445][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.328559][ T8602] bond0: (slave bond_slave_0): Releasing backup interface [ 700.903599][ T8602] bond0: (slave bond_slave_1): Releasing backup interface [ 700.930316][ T8602] team0: Port device team_slave_0 removed [ 700.941134][ T8602] team0: Port device team_slave_1 removed [ 700.948580][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.956251][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.964343][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.972091][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.984721][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 701.011799][ T8616] netlink: 648 bytes leftover after parsing attributes in process `syz.1.746'. [ 701.032370][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 701.286767][ T8644] netlink: 'syz.3.751': attribute type 298 has an invalid length. [ 701.458642][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 701.616056][ T8666] netlink: 220 bytes leftover after parsing attributes in process `syz.3.757'. [ 701.670851][ T8671] xt_TPROXY: Can be used only with -p tcp or -p udp [ 701.710371][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.759'. [ 701.780069][ T8675] netlink: 260 bytes leftover after parsing attributes in process `syz.0.760'. [ 701.840076][ T8679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 701.946474][ T8690] syzkaller1: entered promiscuous mode [ 701.975976][ T8690] syzkaller1: entered allmulticast mode [ 702.321721][ T8701] syzkaller1: entered promiscuous mode [ 702.344397][ T8701] syzkaller1: entered allmulticast mode [ 702.586432][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 702.642730][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'. [ 702.677290][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'. [ 702.804458][ T8735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.020140][ T8735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.278088][ T8735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.415726][ T8735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.534528][ T8735] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.558575][ T8735] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.576345][ T8735] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.593092][ T8735] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.985286][ T8788] netlink: 'syz.1.789': attribute type 29 has an invalid length. [ 704.010605][ T8788] netlink: 'syz.1.789': attribute type 29 has an invalid length. [ 704.047057][ T8788] netlink: 'syz.1.789': attribute type 29 has an invalid length. [ 704.155178][ T8794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.168110][ T8794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.187398][ T8794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.196651][ T8794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.372190][ T8799] tipc: Failed to remove unknown binding: 66,1,1/0:2570594704/2570594706 [ 704.382648][ T8799] tipc: Failed to remove unknown binding: 66,1,1/0:2570594704/2570594706 [ 704.637427][ T8812] netlink: 'syz.2.798': attribute type 2 has an invalid length. [ 704.657616][ T8812] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 704.694825][ T8813] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 704.742632][ T8819] netlink: 'syz.2.798': attribute type 2 has an invalid length. [ 704.761402][ T8819] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 704.940932][ T8831] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 705.057645][ T8835] netlink: 'syz.2.803': attribute type 4 has an invalid length. [ 705.181534][ T8831] xt_CT: No such helper "pptp" [ 705.346185][ T8855] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 705.354279][ T8855] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 705.362438][ T8855] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 705.370712][ T8855] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 705.671115][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 705.684281][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 705.900142][ T8885] syzkaller1: entered allmulticast mode [ 706.532301][ T8942] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 706.807664][ T8956] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 706.841699][ T8960] __nla_validate_parse: 15 callbacks suppressed [ 706.841751][ T8960] netlink: 76 bytes leftover after parsing attributes in process `syz.3.834'. [ 706.972451][ T8961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.127225][ T8961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.142263][ T8972] netlink: 'syz.0.837': attribute type 2 has an invalid length. [ 707.150309][ T8972] netlink: 'syz.0.837': attribute type 9 has an invalid length. [ 707.158437][ T8972] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 707.167007][ T8972] netlink: 209800 bytes leftover after parsing attributes in process `syz.0.837'. [ 707.267453][ T8961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.360743][ T8961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.459258][ T8961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.497155][ T8961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.522986][ T8961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.552566][ T8961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.596652][ T8980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.839'. [ 707.614733][ T8980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.639412][ T8980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.739323][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'. [ 707.759372][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 707.984097][ T8997] netlink: 'syz.3.844': attribute type 8 has an invalid length. [ 708.140381][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 708.167909][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 708.182796][ T9008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.846'. [ 708.385421][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 708.419462][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 708.968615][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.995095][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.303051][ T9066] bridge1: entered promiscuous mode [ 710.182075][ T9108] --map-set only usable from mangle table [ 710.286938][ T9112] raw_sendmsg: syz.1.880 forgot to set AF_INET. Fix it! [ 710.532901][ T9124] sit0: entered promiscuous mode [ 710.547566][ T9124] validate_nla: 4 callbacks suppressed [ 710.547588][ T9124] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 710.724569][ T9143] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 710.948630][ T9157] xt_TCPMSS: Only works on TCP SYN packets [ 711.044808][ T9170] veth1_macvtap: left promiscuous mode [ 711.061155][ T9169] ipt_REJECT: TCP_RESET invalid for non-tcp [ 711.069020][ T9170] macsec0: entered allmulticast mode [ 711.094719][ T9173] netlink: 'syz.3.898': attribute type 2 has an invalid length. [ 711.509307][ T9202] netlink: 'syz.2.907': attribute type 30 has an invalid length. [ 711.721423][ T9210] netlink: 'syz.1.909': attribute type 29 has an invalid length. [ 711.873908][ T9216] netlink: 'syz.1.909': attribute type 29 has an invalid length. [ 711.885290][ T9210] netlink: 'syz.1.909': attribute type 29 has an invalid length. [ 711.910847][ T9232] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 711.949356][ T9210] __nla_validate_parse: 17 callbacks suppressed [ 711.949380][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 712.035789][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 712.052002][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'. [ 712.068434][ T9238] tc_dump_action: action bad kind [ 712.178841][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 712.228392][ T9247] Bluetooth: MGMT ver 1.23 [ 712.248721][ T9247] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 712.257182][ T9247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.920'. [ 713.198457][ T9255] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 713.252424][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 713.269041][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 713.553106][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 713.709361][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 714.133540][ T9344] syzkaller0: entered promiscuous mode [ 714.153901][ T9344] syzkaller0: entered allmulticast mode [ 714.211471][ T5237] Bluetooth: hci6: command tx timeout [ 714.385835][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.950'. [ 714.448534][ T5237] Bluetooth: hci3: command 0x0401 tx timeout [ 716.559612][ T9405] tipc: Started in network mode [ 716.576658][ T9405] tipc: Node identity f7, cluster identity 4711 [ 716.583103][ T9405] tipc: Node number set to 247 [ 716.620862][ T9407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.241950][ T9438] __nla_validate_parse: 1 callbacks suppressed [ 717.241973][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 717.764474][ T9465] netlink: 165 bytes leftover after parsing attributes in process `syz.3.975'. [ 718.630873][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 718.801564][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'. [ 718.883745][ T9523] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.902097][ T9523] netlink: 1 bytes leftover after parsing attributes in process `syz.1.993'. [ 718.925374][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 719.021049][ T9521] bond2: entered promiscuous mode [ 719.037990][ T9526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.991'. [ 719.092042][ T9539] netlink: 80 bytes leftover after parsing attributes in process `syz.4.994'. [ 719.139784][ T9540] tipc: Started in network mode [ 719.144736][ T9540] tipc: Node identity ac1414aa, cluster identity 4711 [ 719.167924][ T9540] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.187099][ T9540] tipc: Enabled bearer , priority 10 [ 719.219726][ T9540] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 719.305291][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.445098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.585157][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.725187][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.865162][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.942050][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1004'. [ 720.005174][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.120809][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 720.145189][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.286471][ T5284] tipc: Node number set to 2886997162 [ 720.425207][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.682332][ T9594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.689786][ T9594] IPv6: NLM_F_CREATE should be set when creating new route [ 720.697174][ T9594] IPv6: NLM_F_CREATE should be set when creating new route [ 720.704866][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 721.337289][ T9620] delete_channel: no stack [ 721.387952][ T9624] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 721.512753][ T9631] netlink: 'syz.0.1023': attribute type 3 has an invalid length. [ 721.703209][ T9639] can: request_module (can-proto-0) failed. [ 721.854720][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.945512][ T9653] pim6reg: entered allmulticast mode [ 721.974115][ T9653] pim6reg: left allmulticast mode [ 722.042938][ T9657] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20002 [ 722.151216][ T9666] sctp: [Deprecated]: syz.2.1033 (pid 9666) Use of int in max_burst socket option. [ 722.151216][ T9666] Use struct sctp_assoc_value instead [ 722.394229][ T9679] __nla_validate_parse: 5 callbacks suppressed [ 722.394255][ T9679] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1036'. [ 722.961083][ T9706] batadv_slave_1: entered promiscuous mode [ 723.074432][ T9709] batadv_slave_1: left promiscuous mode [ 723.096543][ T9714] hsr0: entered promiscuous mode [ 723.241314][ T9725] ebt_among: dst integrity fail: 101 [ 723.645319][ T9738] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1049'. [ 724.166819][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1057'. [ 724.230525][ T9761] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1058'. [ 724.275546][ T9765] netem: change failed [ 724.299539][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.320506][ T9765] batadv_slave_0: entered promiscuous mode [ 724.365263][ C1] net_ratelimit: 6 callbacks suppressed [ 724.365285][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 724.457755][ T9766] bridge0: port 1(ipvlan2) entered blocking state [ 724.485158][ T9766] bridge0: port 1(ipvlan2) entered disabled state [ 724.491814][ T9766] ipvlan2: entered allmulticast mode [ 724.517158][ T9766] bridge0: entered allmulticast mode [ 724.527299][ T9766] ipvlan2: left allmulticast mode [ 724.532389][ T9766] bridge0: left allmulticast mode [ 724.634655][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 724.653194][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 724.744514][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 724.773084][ T9789] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 724.834624][ T9794] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 724.967952][ T9803] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1072'. [ 725.128495][ T9810] vlan2: entered promiscuous mode [ 725.133583][ T9810] vlan2: entered allmulticast mode [ 725.351866][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.370791][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.387443][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.405276][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.406201][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.492527][ T9826] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 725.565383][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1081'. [ 725.877302][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'. [ 726.031251][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 726.440174][ T9876] vlan2: entered promiscuous mode [ 726.445337][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.455732][ T9876] gretap0: entered promiscuous mode [ 726.476194][ T9876] gretap0: left promiscuous mode [ 726.730978][ T9890] netlink: 'syz.2.1099': attribute type 15 has an invalid length. [ 726.874275][ T9895] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 726.994951][ T9895] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 727.315455][ T9925] geneve2: entered promiscuous mode [ 727.320740][ T9925] geneve2: entered allmulticast mode [ 727.365926][ T9927] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 727.380602][ T9928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 727.485389][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.520870][ T9940] __nla_validate_parse: 9 callbacks suppressed [ 727.520892][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 727.560604][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 727.637260][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 727.653793][ T9945] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1118'. [ 727.673080][ T9943] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1119'. [ 728.164103][ T9956] tipc: Enabling of bearer rejected, already enabled [ 728.474123][ T9973] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 728.525338][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.539205][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 728.796332][ T9982] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 728.988403][ T9999] bridge_slave_0: left allmulticast mode [ 729.025643][ T9999] bridge_slave_0: left promiscuous mode [ 729.036610][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.053213][ T9999] bridge_slave_1: left allmulticast mode [ 729.064153][ T9999] bridge_slave_1: left promiscuous mode [ 729.070154][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.081284][ T9999] bond0: (slave bond_slave_0): Releasing backup interface [ 729.089830][ T9999] bond_slave_0: left promiscuous mode [ 729.100687][ T9999] bond0: (slave bond_slave_1): Releasing backup interface [ 729.114439][ T9999] bond_slave_1: left promiscuous mode [ 729.144226][T10009] wg2: entered promiscuous mode [ 729.163564][T10013] netlink: 'syz.1.1136': attribute type 10 has an invalid length. [ 729.195704][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1136'. [ 729.235985][T10013] bridge0: port 3(batadv0) entered blocking state [ 729.242619][T10013] bridge0: port 3(batadv0) entered disabled state [ 729.265973][T10013] batadv0: entered allmulticast mode [ 729.272882][T10013] batadv0: entered promiscuous mode [ 729.421383][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 729.552506][T10047] veth0_vlan: entered allmulticast mode [ 729.565433][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.583128][T10048] delete_channel: no stack [ 729.604294][T10052] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 729.660912][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 729.669403][T10057] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1148'. [ 729.670888][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 729.750827][T10056] vlan0: entered allmulticast mode [ 729.786128][T10056] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 729.805586][T10056] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 729.852130][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 729.894256][T10062] ip6gretap0: entered promiscuous mode [ 729.913501][T10062] ip6gretap0: left promiscuous mode [ 730.130617][T10075] netlink: 'syz.4.1154': attribute type 19 has an invalid length. [ 730.316811][T10093] netlink: set zone limit has 4 unknown bytes [ 730.605345][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.898207][T10119] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 730.989154][T10119] team0: Port device geneve1 added [ 731.055463][T10122] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 731.297890][T10143] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 731.410196][T10150] x_tables: duplicate underflow at hook 2 [ 731.645403][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.685342][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 733.725293][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.765171][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.805170][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.845141][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.885261][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 738.925110][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 739.965086][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.005079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.045079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.085101][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.125089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 745.165075][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.205063][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.245067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.285072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 749.325068][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.365065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 751.405062][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.445072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 753.485082][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 754.525254][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.565057][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.605073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 757.645059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 758.685073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 759.725075][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 760.765058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 761.805056][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 762.846672][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 763.885059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.925061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 765.700475][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 765.745113][ T5237] Bluetooth: hci3: command 0x0401 tx timeout [ 765.751431][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 765.965074][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 767.005068][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 768.045057][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 769.085160][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.125059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 771.165059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 772.205058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 773.245055][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 774.285061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 775.325079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 776.365052][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 777.376530][T10184] __nla_validate_parse: 5 callbacks suppressed [ 777.376552][T10184] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1186'. [ 777.405204][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 777.703010][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.173904][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.183334][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 778.191683][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.215533][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.224610][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 778.232056][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 778.261630][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.270985][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 778.279007][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.287908][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 778.295736][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 778.303064][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 778.360453][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 778.361797][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 778.393274][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 778.407832][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.416894][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 778.430370][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 778.447279][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 778.448374][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 778.540493][ T5249] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 778.554706][ T5249] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 778.562526][ T5249] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 778.569971][ T5249] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 778.585571][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 778.593461][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 778.604784][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 778.627432][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 778.648504][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 778.656832][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.150192][ T2490] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.231121][ T2490] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.311530][T10188] chnl_net:caif_netlink_parms(): no params data found [ 779.322788][ T2490] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.362196][T10192] chnl_net:caif_netlink_parms(): no params data found [ 779.449711][ T2490] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.508969][T10198] chnl_net:caif_netlink_parms(): no params data found [ 779.571709][T10194] chnl_net:caif_netlink_parms(): no params data found [ 779.680284][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.688571][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.695973][T10188] bridge_slave_0: entered allmulticast mode [ 779.702558][T10188] bridge_slave_0: entered promiscuous mode [ 779.772323][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.781156][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.788598][T10188] bridge_slave_1: entered allmulticast mode [ 779.795465][T10188] bridge_slave_1: entered promiscuous mode [ 779.806411][T10193] chnl_net:caif_netlink_parms(): no params data found [ 779.919726][ T2490] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.936460][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.943659][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.951173][T10192] bridge_slave_0: entered allmulticast mode [ 779.958459][T10192] bridge_slave_0: entered promiscuous mode [ 779.973955][T10192] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.981181][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.988932][T10192] bridge_slave_1: entered allmulticast mode [ 779.997211][T10192] bridge_slave_1: entered promiscuous mode [ 780.057671][ T2490] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.079660][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.114506][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.122926][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.130886][T10194] bridge_slave_0: entered allmulticast mode [ 780.137947][T10194] bridge_slave_0: entered promiscuous mode [ 780.158062][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.170592][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.198278][ T2490] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.224932][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.232282][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.239698][T10198] bridge_slave_0: entered allmulticast mode [ 780.246859][T10198] bridge_slave_0: entered promiscuous mode [ 780.253737][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.262712][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.270291][T10194] bridge_slave_1: entered allmulticast mode [ 780.278219][T10194] bridge_slave_1: entered promiscuous mode [ 780.285131][ T5235] Bluetooth: hci1: command tx timeout [ 780.291880][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.347245][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.354348][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.361897][T10198] bridge_slave_1: entered allmulticast mode [ 780.374285][T10198] bridge_slave_1: entered promiscuous mode [ 780.375838][ T5235] Bluetooth: hci7: command tx timeout [ 780.406199][ T2490] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.446666][T10188] team0: Port device team_slave_0 added [ 780.453122][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.460796][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.468116][T10193] bridge_slave_0: entered allmulticast mode [ 780.474707][T10193] bridge_slave_0: entered promiscuous mode [ 780.512428][T10192] team0: Port device team_slave_0 added [ 780.520135][T10188] team0: Port device team_slave_1 added [ 780.534478][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.543874][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.553881][T10193] bridge_slave_1: entered allmulticast mode [ 780.562536][T10193] bridge_slave_1: entered promiscuous mode [ 780.574927][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.587401][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.599794][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.614630][T10192] team0: Port device team_slave_1 added [ 780.640362][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.647520][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.673857][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.685461][ T5235] Bluetooth: hci8: command tx timeout [ 780.702929][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.758982][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.766392][ T5235] Bluetooth: hci0: command tx timeout [ 780.775365][ T5235] Bluetooth: hci4: command tx timeout [ 780.776825][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.807110][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.842642][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.866468][T10194] team0: Port device team_slave_0 added [ 780.872913][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.880201][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.907161][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.920236][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.927481][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.953985][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.993867][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.009419][T10198] team0: Port device team_slave_0 added [ 781.017623][T10198] team0: Port device team_slave_1 added [ 781.024556][T10194] team0: Port device team_slave_1 added [ 781.067877][ T2490] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.096525][T10188] hsr_slave_0: entered promiscuous mode [ 781.102795][T10188] hsr_slave_1: entered promiscuous mode [ 781.187307][ T2490] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.206551][T10193] team0: Port device team_slave_0 added [ 781.217541][T10193] team0: Port device team_slave_1 added [ 781.233130][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.240247][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.266478][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.289435][T10192] hsr_slave_0: entered promiscuous mode [ 781.296792][T10192] hsr_slave_1: entered promiscuous mode [ 781.302871][T10192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.310808][T10192] Cannot create hsr debugfs directory [ 781.321770][ T2490] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.342326][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.349617][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.376329][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.394848][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.402214][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.428967][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.475131][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.482128][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.508594][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.528222][ T2490] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.573615][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.584412][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.610944][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.623407][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.630693][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.657557][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.739417][T10194] hsr_slave_0: entered promiscuous mode [ 781.746262][T10194] hsr_slave_1: entered promiscuous mode [ 781.752433][T10194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.760974][T10194] Cannot create hsr debugfs directory [ 781.810372][T10198] hsr_slave_0: entered promiscuous mode [ 781.817395][T10198] hsr_slave_1: entered promiscuous mode [ 781.823602][T10198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.831712][T10198] Cannot create hsr debugfs directory [ 782.032056][T10193] hsr_slave_0: entered promiscuous mode [ 782.040612][T10193] hsr_slave_1: entered promiscuous mode [ 782.047906][T10193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.055761][T10193] Cannot create hsr debugfs directory [ 782.075434][ T2490] batadv0: left allmulticast mode [ 782.080539][ T2490] batadv0: left promiscuous mode [ 782.086280][ T2490] bridge0: port 3(batadv0) entered disabled state [ 782.095837][ T2490] bridge_slave_1: left allmulticast mode [ 782.101528][ T2490] bridge_slave_1: left promiscuous mode [ 782.107385][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.119129][ T2490] bridge_slave_0: left allmulticast mode [ 782.124815][ T2490] bridge_slave_0: left promiscuous mode [ 782.130781][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.365158][ T5235] Bluetooth: hci1: command tx timeout [ 782.455299][ T5235] Bluetooth: hci7: command tx timeout [ 782.775746][ T5235] Bluetooth: hci8: command tx timeout [ 782.845330][ T5235] Bluetooth: hci4: command tx timeout [ 782.845389][ T5249] Bluetooth: hci0: command tx timeout [ 783.078984][ T2490] bridge0 (unregistering): left promiscuous mode [ 783.283859][ T2490] bond0 (unregistering): Released all slaves [ 783.417437][ T2490] bond0 (unregistering): Released all slaves [ 783.430333][ T2490] bond1 (unregistering): Released all slaves [ 783.441044][ T2490] bond2 (unregistering): Released all slaves [ 783.568698][ T2490] bond0 (unregistering): left promiscuous mode [ 783.574931][ T2490] bond_slave_0: left promiscuous mode [ 783.580608][ T2490] bond_slave_1: left promiscuous mode [ 783.601082][ T2490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.611538][ T2490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.622929][ T2490] bond0 (unregistering): Released all slaves [ 783.832287][T10192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.870169][ T2490] tipc: Left network mode [ 783.926443][T10192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.958641][ T2490] tipc: Left network mode [ 783.999035][ T2490] IPVS: stopping master sync thread 10052 ... [ 784.014457][ T2490] IPVS: stopping backup sync thread 8284 ... [ 784.041794][T10192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.144541][T10192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.448815][ T5249] Bluetooth: hci1: command tx timeout [ 784.527168][ T5249] Bluetooth: hci7: command tx timeout [ 784.632936][ T2490] hsr_slave_0: left promiscuous mode [ 784.640899][ T2490] hsr_slave_1: left promiscuous mode [ 784.650904][ T2490] hsr_slave_0: left promiscuous mode [ 784.656939][ T2490] hsr_slave_1: left promiscuous mode [ 784.666181][ T2490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.673635][ T2490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.681445][ T2490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.690672][ T2490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.705977][ T2490] batman_adv: batadv0: Interface deactivated: vlan1 [ 784.712649][ T2490] batman_adv: batadv0: Removing interface: vlan1 [ 784.744328][ T2490] veth1_macvtap: left promiscuous mode [ 784.750215][ T2490] veth0_macvtap: left promiscuous mode [ 784.755921][ T2490] veth1_vlan: left promiscuous mode [ 784.761216][ T2490] veth0_vlan: left promiscuous mode [ 784.768891][ T2490] veth1_macvtap: left promiscuous mode [ 784.774402][ T2490] veth0_macvtap: left promiscuous mode [ 784.780088][ T2490] veth1_vlan: left promiscuous mode [ 784.785638][ T2490] veth0_vlan: left promiscuous mode [ 784.791714][ T2490] veth1_macvtap: left promiscuous mode [ 784.797365][ T2490] veth0_macvtap: left promiscuous mode [ 784.803099][ T2490] veth1_vlan: left promiscuous mode [ 784.808580][ T2490] veth0_vlan: left promiscuous mode [ 784.845982][ T5249] Bluetooth: hci8: command tx timeout [ 784.925242][ T5249] Bluetooth: hci4: command tx timeout [ 784.925440][ T5235] Bluetooth: hci0: command tx timeout [ 786.525262][ T5249] Bluetooth: hci1: command tx timeout [ 786.605884][ T5249] Bluetooth: hci7: command tx timeout [ 786.833879][ T2490] team0 (unregistering): Port device team_slave_1 removed [ 786.881066][ T2490] team0 (unregistering): Port device team_slave_0 removed [ 786.925269][ T5249] Bluetooth: hci8: command tx timeout [ 787.005160][ T5249] Bluetooth: hci4: command tx timeout [ 787.010633][ T5249] Bluetooth: hci0: command tx timeout [ 787.596490][T10198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.662513][T10198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.744928][T10198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.829477][T10198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.925145][T10192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.940073][T10192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.965820][T10192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.990815][T10192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.099725][T10192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.152167][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.167859][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.175037][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.192515][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.199642][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.311010][T10193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 788.321703][T10193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 788.353785][T10193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 788.372756][T10193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 788.391155][T10188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.412449][T10188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.467593][T10188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.477417][T10188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.570439][T10194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 788.602103][T10194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 788.632266][T10194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.642705][T10194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.700831][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.732152][T10198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 788.748836][T10198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 788.761649][T10198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 788.780078][T10198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 788.794535][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.888846][T10193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.917861][T10193] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.933895][T10192] veth0_vlan: entered promiscuous mode [ 788.962595][T10192] veth1_vlan: entered promiscuous mode [ 788.970912][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.991852][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.999022][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.022900][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.030024][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.044242][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.051358][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.094635][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.101778][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.164839][T10192] veth0_macvtap: entered promiscuous mode [ 789.176360][T10192] veth1_macvtap: entered promiscuous mode [ 789.248959][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.290522][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.311767][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.331910][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.361729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.368887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.437786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.445036][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.499475][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.525181][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.559273][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.601687][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.623600][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.638618][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.645772][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.669790][T10192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.678951][T10192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.687745][T10192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.696808][T10192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.716467][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.723603][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.867577][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.897308][T10188] veth0_vlan: entered promiscuous mode [ 789.921085][T10198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.935828][T10198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.954913][T10188] veth1_vlan: entered promiscuous mode [ 790.012430][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.022460][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.106808][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.114723][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.120361][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.142949][T10188] veth0_macvtap: entered promiscuous mode [ 790.167951][T10193] veth0_vlan: entered promiscuous mode [ 790.188481][T10188] veth1_macvtap: entered promiscuous mode [ 790.254697][T10193] veth1_vlan: entered promiscuous mode [ 790.286626][T10193] veth0_macvtap: entered promiscuous mode [ 790.296297][T10193] veth1_macvtap: entered promiscuous mode [ 790.312116][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.323025][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.337968][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.348542][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.359193][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.369556][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.380438][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.392801][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.424278][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.460523][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.473112][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.492993][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.507383][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.518706][T10193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.527804][T10193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.538441][T10193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.548097][T10193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.589440][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.599285][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.613773][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.624098][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.635627][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.645912][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.657534][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.670842][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.707914][T10188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.717800][T10188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.726600][T10188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.735664][T10188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.820509][T10194] veth0_vlan: entered promiscuous mode [ 790.858971][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.867121][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.880229][T10194] veth1_vlan: entered promiscuous mode [ 790.920739][T10198] veth0_vlan: entered promiscuous mode [ 790.955704][T10198] veth1_vlan: entered promiscuous mode [ 790.974848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.984329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.994143][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.003501][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.033738][T10194] veth0_macvtap: entered promiscuous mode [ 791.063326][T10194] veth1_macvtap: entered promiscuous mode [ 791.099768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.119342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.122588][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.140910][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.164180][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.178506][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.188563][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.199718][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.213121][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.250207][T10265] TCP: TCP_TX_DELAY enabled [ 791.250990][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.272663][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.282582][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.295028][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.304869][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.328875][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.344636][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.364126][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.378181][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.395820][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1193'. [ 791.448643][T10198] veth0_macvtap: entered promiscuous mode [ 791.469956][T10194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.495166][T10194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.511882][T10194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.522366][T10194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.538996][T10198] veth1_macvtap: entered promiscuous mode [ 791.564390][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.575167][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.585228][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.595756][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.605660][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.616145][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.626800][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.637550][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.651222][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.690455][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.708195][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.725021][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.735957][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.745948][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.756516][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.766792][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.777929][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.787840][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.798751][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.810274][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.840272][T10198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.852243][T10198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.875590][T10198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.884370][T10198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.126207][T10281] dccp_close: ABORT with 32 bytes unread [ 792.182104][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.233746][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.292275][T10293] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 792.313731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.337510][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.394265][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.405148][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.405976][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.421105][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.160159][T10318] netlink: 'syz.0.1207': attribute type 3 has an invalid length. [ 793.182092][T10318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1207'. [ 793.245568][T10324] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1208'. [ 793.358985][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 793.387422][T10335] macvlan2: entered promiscuous mode [ 793.392785][T10335] vlan0: entered promiscuous mode [ 793.551656][T10345] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 793.583001][T10345] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1215'. [ 793.630253][T10347] netlink: 'syz.2.1216': attribute type 12 has an invalid length. [ 793.764593][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1214'. [ 794.097000][T10357] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1219'. [ 794.518772][T10365] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1222'. [ 794.652046][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 795.225797][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 795.785417][T10399] netdevsim netdevsim2: Direct firmware load for /tun failed with error -2 [ 795.832535][T10399] netdevsim netdevsim2: Falling back to sysfs fallback for: /tun [ 796.068651][T10417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.396109][T10426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 796.402530][T10424] gretap1: entered promiscuous mode [ 796.474383][T10424] __nla_validate_parse: 2 callbacks suppressed [ 796.474406][T10424] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1236'. [ 796.491974][T10428] netlink: 'syz.0.1238': attribute type 39 has an invalid length. [ 796.597751][T10432] @ÿ: renamed from veth0_vlan (while UP) [ 796.686252][T10444] ax25_connect(): syz.2.1241 uses autobind, please contact jreuter@yaina.de [ 796.876718][T10449] netlink: 'syz.1.1243': attribute type 6 has an invalid length. [ 796.885693][T10449] netlink: 'syz.1.1243': attribute type 7 has an invalid length. [ 796.893475][T10449] netlink: 'syz.1.1243': attribute type 8 has an invalid length. [ 797.052598][T10459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.303126][T10478] netlink: 'syz.4.1250': attribute type 6 has an invalid length. [ 797.322956][T10478] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1250'. [ 797.566115][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 797.594057][T10487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 797.606218][T10487] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1253'. [ 797.659748][T10487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 797.728448][T10498] team0: entered promiscuous mode [ 797.733555][T10498] team_slave_0: entered promiscuous mode [ 797.748769][T10498] team_slave_1: entered promiscuous mode [ 797.758385][T10498] team0: left promiscuous mode [ 797.763210][T10498] team_slave_0: left promiscuous mode [ 797.769829][T10498] team_slave_1: left promiscuous mode [ 798.372707][T10510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.419036][T10530] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 798.756430][T10553] netlink: 6084 bytes leftover after parsing attributes in process `syz.3.1270'. [ 798.774439][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 798.784377][T10553] netlink: 6084 bytes leftover after parsing attributes in process `syz.3.1270'. [ 798.810135][T10556] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 798.814884][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 799.023457][T10561] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 799.033669][T10561] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 799.044276][T10561] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 799.053352][T10561] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 799.063660][T10561] geneve2: entered promiscuous mode [ 799.073367][T10561] geneve2: entered allmulticast mode [ 799.080990][T10561] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 799.105103][T10561] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 799.114120][T10561] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 799.123659][T10561] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 799.283463][T10567] syzkaller0: entered allmulticast mode [ 799.624178][T10580] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 799.993756][T10597] Cannot find set identified by id 1 to match [ 800.004121][T10595] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1282'. [ 800.097925][T10605] netlink: 'syz.3.1284': attribute type 12 has an invalid length. [ 800.925416][ T5249] Bluetooth: hci8: command tx timeout [ 801.309098][T10660] xt_hashlimit: max too large, truncated to 1048576 [ 801.321815][T10660] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 801.664385][T10680] __nla_validate_parse: 4 callbacks suppressed [ 801.664409][T10680] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1309'. [ 802.022515][T10701] bridge0: port 3(syz_tun) entered blocking state [ 802.029417][T10701] bridge0: port 3(syz_tun) entered disabled state [ 802.036253][T10701] syz_tun: entered allmulticast mode [ 802.046368][T10701] syz_tun: entered promiscuous mode [ 802.053466][T10701] bridge0: port 3(syz_tun) entered blocking state [ 802.060483][T10701] bridge0: port 3(syz_tun) entered forwarding state [ 802.223523][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 802.345931][T10717] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1321'. [ 802.514902][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'. [ 802.547951][T10721] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1323'. [ 802.856520][T10733] syzkaller0: entered allmulticast mode [ 802.903796][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 802.918644][T10739] netlink: zone id is out of range [ 802.925702][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 802.963397][T10738] netlink: 'syz.0.1331': attribute type 15 has an invalid length. [ 802.989486][T10742] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1333'. [ 803.076167][T10746] netlink: 'syz.2.1334': attribute type 12 has an invalid length. [ 803.099961][T10746] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 803.135912][T10746] netlink: 'syz.2.1334': attribute type 2 has an invalid length. [ 803.148764][T10746] netlink: 'syz.2.1334': attribute type 2 has an invalid length. [ 803.164593][T10746] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 803.186523][T10746] netlink: 'syz.2.1334': attribute type 37 has an invalid length. [ 803.220067][T10746] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1334'. [ 803.538696][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 803.589745][T10784] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 803.802998][T10799] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 803.804311][T10802] x_tables: unsorted entry at hook 3 [ 804.143430][T10799] Bluetooth: MGMT ver 1.23 [ 804.199621][T10799] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 804.584613][T10834] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 804.645960][T10834] macsec1: entered promiscuous mode [ 804.651508][T10834] macsec1: entered allmulticast mode [ 804.678468][T10834] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 804.697888][T10834] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 804.709451][T10834] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 805.429562][T10900] validate_nla: 3 callbacks suppressed [ 805.429586][T10900] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 805.474274][T10900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.616043][T10909] bond1: (slave ip6gretap1): making interface the new active one [ 805.632337][T10909] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 805.662183][T10909] vlan2: entered promiscuous mode [ 805.686776][T10909] bond1: entered promiscuous mode [ 805.706014][T10909] ip6gretap1: entered promiscuous mode [ 805.734217][T10909] vlan2: entered allmulticast mode [ 805.740313][T10909] bond1: entered allmulticast mode [ 805.746030][T10909] ip6gretap1: entered allmulticast mode [ 806.205183][ T5249] Bluetooth: hci0: command tx timeout [ 806.707717][T10986] bridge_slave_0: left allmulticast mode [ 806.710256][T10981] __nla_validate_parse: 22 callbacks suppressed [ 806.710273][T10981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1405'. [ 806.725919][T10986] bridge_slave_0: left promiscuous mode [ 806.771288][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.804642][T10986] bridge_slave_1: left allmulticast mode [ 806.823126][T10986] bridge_slave_1: left promiscuous mode [ 806.837525][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.860529][T10986] bond0: (slave bond_slave_0): Releasing backup interface [ 806.877350][T10986] bond0: (slave bond_slave_1): Releasing backup interface [ 806.914409][T10986] team0: Port device team_slave_0 removed [ 806.929727][T10986] team0: Port device team_slave_1 removed [ 806.940608][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.956285][T10986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.968450][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.986912][T10986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.008145][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 807.029752][T10986] bond1: (slave ip6gretap1): Releasing active interface [ 807.046084][T10986] ip6gretap1: left promiscuous mode [ 807.051802][T10986] ip6gretap1: left allmulticast mode [ 807.091621][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1409'. [ 807.106632][T10993] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 807.130585][T10993] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 807.146298][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1408'. [ 807.389806][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 807.408728][T11014] hsr0: entered promiscuous mode [ 807.436187][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 807.487292][T11016] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1414'. [ 807.496227][T11019] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1417'. [ 807.558107][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 807.577451][T11022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1416'. [ 807.662413][T11027] tipc: Can't bind to reserved service type 0 [ 808.815287][T11090] netlink: 'syz.0.1438': attribute type 7 has an invalid length. [ 808.834490][T11090] netlink: 'syz.0.1438': attribute type 8 has an invalid length. [ 808.929050][ T2583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.227857][ T2583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.299342][T11113] dummy0: entered promiscuous mode [ 809.350886][T11113] dummy0: left promiscuous mode [ 809.493933][ T2583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.521925][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.532033][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.540932][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.550713][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.558593][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 809.567533][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.742727][ T2583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.948444][T11148] syz.0.1454[11148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.948551][T11148] syz.0.1454[11148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.988660][T11152] IPv6: Can't replace route, no match found [ 809.998653][T11148] syz.0.1454[11148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.157252][T11161] syz_tun: entered promiscuous mode [ 810.177046][T11161] batadv_slave_0: entered promiscuous mode [ 810.203125][T11161] syz_tun: left promiscuous mode [ 810.215468][T11161] batadv_slave_0: left promiscuous mode [ 810.332154][T11173] netlink: 'syz.0.1460': attribute type 33 has an invalid length. [ 810.387090][ T2583] bridge_slave_1: left allmulticast mode [ 810.395581][ T2583] bridge_slave_1: left promiscuous mode [ 810.408252][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.526785][ T2583] bridge_slave_0: left allmulticast mode [ 811.532511][ T2583] bridge_slave_0: left promiscuous mode [ 811.549008][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.662990][ T5249] Bluetooth: hci0: command tx timeout [ 812.013742][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.028658][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.041520][ T2583] bond0 (unregistering): Released all slaves [ 812.187168][ T2583] bond1 (unregistering): Released all slaves [ 812.204018][T11177] __nla_validate_parse: 14 callbacks suppressed [ 812.204033][T11177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'. [ 812.374639][T11127] chnl_net:caif_netlink_parms(): no params data found [ 812.455838][T11211] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1468'. [ 813.013739][ T2583] hsr_slave_0: left promiscuous mode [ 813.031585][ T2583] hsr_slave_1: left promiscuous mode [ 813.043510][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.051138][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.060006][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.067848][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.088945][ T2583] vlan0: left promiscuous mode [ 813.093952][ T2583] veth1_macvtap: left promiscuous mode [ 813.100054][ T2583] veth0_macvtap: left promiscuous mode [ 813.106157][ T2583] veth1_vlan: left promiscuous mode [ 813.111486][ T2583] veth0_vlan: left promiscuous mode [ 813.703266][ T2583] team0 (unregistering): Port device team_slave_1 removed [ 813.735369][ T5249] Bluetooth: hci0: command tx timeout [ 813.752888][ T2583] team0 (unregistering): Port device team_slave_0 removed [ 814.204780][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.212937][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.222104][T11127] bridge_slave_0: entered allmulticast mode [ 814.242702][T11127] bridge_slave_0: entered promiscuous mode [ 814.285554][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.308048][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.331016][T11127] bridge_slave_1: entered allmulticast mode [ 814.350745][T11127] bridge_slave_1: entered promiscuous mode [ 814.514496][T11127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.562983][T11260] wg2: entered promiscuous mode [ 814.584196][T11260] team0: Device wg2 is of different type [ 814.610447][T11127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.703416][T11127] team0: Port device team_slave_0 added [ 814.731676][T11127] team0: Port device team_slave_1 added [ 814.794812][T11127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.803173][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.848226][T11127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.866519][T11127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.877051][T11270] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1483'. [ 814.886318][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.949442][T11127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.088413][T11127] hsr_slave_0: entered promiscuous mode [ 815.101199][T11127] hsr_slave_1: entered promiscuous mode [ 815.110935][T11280] netlink: 'syz.3.1488': attribute type 30 has an invalid length. [ 815.119359][T11127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.127114][T11127] Cannot create hsr debugfs directory [ 815.132882][T11276] netlink: 'syz.0.1485': attribute type 8 has an invalid length. [ 815.143594][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 815.579368][T11308] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1496'. [ 815.806611][ T5249] Bluetooth: hci0: command tx timeout [ 816.115539][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1503'. [ 816.148536][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 816.169734][T11127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 816.221178][T11127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 816.240030][T11127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 816.298381][T11127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 816.481261][T11341] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1507'. [ 816.591491][T11127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.679048][T11127] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.722381][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.729618][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.749316][T11353] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1510'. [ 816.756614][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.765612][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.844921][T11127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 816.900170][T11127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.212137][T11371] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 817.261039][T11127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.554293][T11384] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 817.686298][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'. [ 817.724760][T11390] bond0: option ad_select: unable to set because the bond device is up [ 817.817748][T11396] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1523'. [ 817.888091][ T5249] Bluetooth: hci0: command tx timeout [ 817.976226][T11401] netlink: 'syz.2.1524': attribute type 28 has an invalid length. [ 817.977924][T11127] veth0_vlan: entered promiscuous mode [ 818.006860][T11401] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 818.014655][T11401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 818.061005][T11127] veth1_vlan: entered promiscuous mode [ 818.081741][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 818.116807][T11410] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 818.147910][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'. [ 818.176403][T11127] veth0_macvtap: entered promiscuous mode [ 818.188367][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 818.284818][T11127] veth1_macvtap: entered promiscuous mode [ 818.350384][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.393668][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.409135][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.423897][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.436451][T11426] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1534'. [ 818.442625][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.475135][T11426] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1534'. [ 818.480548][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.508306][T11433] xt_bpf: check failed: parse error [ 818.526608][T11127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.540209][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.551570][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.561822][T11432] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1536'. [ 818.576243][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.591209][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.611543][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.625361][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.647160][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.660744][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.672496][T11127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.685444][T11435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1534'. [ 818.713862][T11127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.743666][T11127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.761254][T11127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.772526][T11127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.128097][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.136096][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.178748][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.190684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.577857][T11468] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 819.839406][T11475] Cannot find add_set index 0 as target [ 819.860370][T11475] netlink: 'syz.0.1547': attribute type 3 has an invalid length. [ 820.229313][ T8944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.458621][ T8944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.623334][T11492] ip6gretap0: entered promiscuous mode [ 820.649626][T11492] ip6gretap0: left promiscuous mode [ 820.798844][ T8944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.829266][T11502] pim6reg: entered allmulticast mode [ 820.876247][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.886076][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 820.901419][T11502] pim6reg: left allmulticast mode [ 820.907114][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 820.919599][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 820.930013][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 820.950091][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 820.999634][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.062242][ T8944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.477980][ T8944] bridge_slave_1: left allmulticast mode [ 821.483797][ T8944] bridge_slave_1: left promiscuous mode [ 821.489805][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.516794][ T8944] bridge_slave_0: left allmulticast mode [ 821.525203][ T8944] bridge_slave_0: left promiscuous mode [ 821.531024][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.274881][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.289381][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.300604][ T8944] bond0 (unregistering): Released all slaves [ 822.317547][T11535] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 822.572318][T11504] chnl_net:caif_netlink_parms(): no params data found [ 822.752460][ T8944] hsr_slave_0: left promiscuous mode [ 822.763220][ T8944] hsr_slave_1: left promiscuous mode [ 822.771261][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.779405][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.791364][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.799224][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.819200][ T8944] veth1_macvtap: left promiscuous mode [ 822.824871][ T8944] veth0_macvtap: left promiscuous mode [ 822.830638][ T8944] veth1_vlan: left promiscuous mode [ 822.836168][ T8944] veth0_vlan: left promiscuous mode [ 823.006077][ T5249] Bluetooth: hci0: command tx timeout [ 823.414113][T11571] delete_channel: no stack [ 823.524398][T11573] __nla_validate_parse: 5 callbacks suppressed [ 823.524422][T11573] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1575'. [ 823.845223][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 823.895880][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 824.368529][T11559] team0: entered promiscuous mode [ 824.374582][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1571'. [ 824.396526][T11578] netlink: 'syz.0.1576': attribute type 15 has an invalid length. [ 824.469581][T11561] team0: left promiscuous mode [ 824.589534][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.597168][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.604527][T11504] bridge_slave_0: entered allmulticast mode [ 824.620938][T11504] bridge_slave_0: entered promiscuous mode [ 824.630026][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.655312][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.672830][T11504] bridge_slave_1: entered allmulticast mode [ 824.682023][T11504] bridge_slave_1: entered promiscuous mode [ 824.826017][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.857444][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.867202][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 824.934202][T11609] geneve2: entered promiscuous mode [ 824.955940][T11609] geneve2: entered allmulticast mode [ 824.989960][T11504] team0: Port device team_slave_0 added [ 825.002901][T11504] team0: Port device team_slave_1 added [ 825.085936][ T5249] Bluetooth: hci0: command 0x041b tx timeout [ 825.287570][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.295135][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.325430][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.534343][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.541569][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.569732][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.758904][T11630] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1587'. [ 825.938733][T11504] hsr_slave_0: entered promiscuous mode [ 825.994195][T11504] hsr_slave_1: entered promiscuous mode [ 826.013369][T11504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.021996][T11504] Cannot create hsr debugfs directory [ 826.046445][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 826.069163][T11639] netlink: 'syz.2.1589': attribute type 3 has an invalid length. [ 826.078536][T11639] netlink: 'syz.2.1589': attribute type 3 has an invalid length. [ 826.089311][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 826.118715][T11641] vxcan0: entered promiscuous mode [ 826.124394][T11641] vlan2: entered promiscuous mode [ 826.134583][T11641] vxcan0: left promiscuous mode [ 826.560407][T11665] netlink: 'syz.0.1598': attribute type 2 has an invalid length. [ 826.624351][T11661] sctp: [Deprecated]: syz.1.1594 (pid 11661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.624351][T11661] Use struct sctp_sack_info instead [ 826.822503][T11676] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1602'. [ 826.899478][T11504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 826.918897][T11504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 826.942773][T11504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 826.968789][T11504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 827.167368][ T5235] Bluetooth: hci0: command 0x041b tx timeout [ 827.245840][T11504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.269955][T11504] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.331098][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.338340][ T6938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.380491][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.387720][ T6938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.409297][T11686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 827.487212][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 827.831939][T11712] dvmrp1: entered allmulticast mode [ 827.927241][T11716] Bluetooth: MGMT ver 1.23 [ 827.984340][T11718] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1614'. [ 828.311815][T11504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.479420][T11733] xt_ipcomp: unknown flags B [ 828.552305][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'. [ 828.581293][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'. [ 828.704215][T11747] vcan0: entered allmulticast mode [ 828.881285][T11759] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1626'. [ 828.893274][T11504] veth0_vlan: entered promiscuous mode [ 828.909390][T11504] veth1_vlan: entered promiscuous mode [ 828.917584][T11760] netlink: 'syz.3.1624': attribute type 10 has an invalid length. [ 829.029149][T11760] team0: Port device wlan1 added [ 829.074350][T11762] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 829.116266][T11762] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 829.238236][T11780] ipt_rpfilter: unknown options [ 829.284753][ T5235] Bluetooth: hci0: command 0x041b tx timeout [ 829.392282][T11504] veth0_macvtap: entered promiscuous mode [ 829.541847][T11504] veth1_macvtap: entered promiscuous mode [ 829.593213][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.620035][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.662383][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.681794][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.717316][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.728007][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.739413][T11504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.749942][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.760650][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.770601][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.781141][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.791078][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.801600][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.811626][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.822168][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.834441][T11504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.906055][T11504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.914878][T11504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.923672][T11504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.932497][T11504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.288009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.351393][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.585912][T11812] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1638'. [ 830.614358][ T8944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.647043][ T8944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.786026][T11819] xt_TPROXY: Can be used only with -p tcp or -p udp [ 830.902533][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'. [ 830.986145][T11823] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 831.021788][T11824] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 831.363240][ T8944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.566192][ T8944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.758163][ T8944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.863068][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 831.888455][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 831.898198][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.015067][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.259361][ T8944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.434920][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 832.450757][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 832.480438][T11861] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1650'. [ 832.556342][T11861] bridge0: port 3(ip6gretap0) entered blocking state [ 832.574764][T11861] bridge0: port 3(ip6gretap0) entered disabled state [ 832.582095][T11861] ip6gretap0: entered allmulticast mode [ 832.592393][T11861] ip6gretap0: entered promiscuous mode [ 832.599800][T11861] bridge0: port 3(ip6gretap0) entered blocking state [ 832.606669][T11861] bridge0: port 3(ip6gretap0) entered forwarding state [ 832.703270][ T8944] bridge_slave_1: left allmulticast mode [ 832.711459][ T8944] bridge_slave_1: left promiscuous mode [ 832.735548][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.799867][ T8944] bridge_slave_0: left allmulticast mode [ 832.811259][ T8944] bridge_slave_0: left promiscuous mode [ 832.818153][T11871] openvswitch: netlink: Flow actions attr not present in new flow. [ 832.827234][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.309560][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.321570][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.338095][ T8944] bond0 (unregistering): Released all slaves [ 833.358025][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 833.388285][T11879] tipc: Started in network mode [ 833.393452][T11879] tipc: Node identity ac1414aa, cluster identity 4711 [ 833.409836][T11879] tipc: Enabled bearer , priority 10 [ 833.432990][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 833.505914][T11894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1658'. [ 833.522141][T11896] Cannot find del_set index 0 as target [ 834.020271][T11848] chnl_net:caif_netlink_parms(): no params data found [ 834.101337][ T8944] hsr_slave_0: left promiscuous mode [ 834.121280][ T8944] hsr_slave_1: left promiscuous mode [ 834.141384][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.161558][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.179396][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.197667][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.252521][ T8944] veth1_macvtap: left promiscuous mode [ 834.260355][ T8944] veth0_macvtap: left promiscuous mode [ 834.266506][ T8944] veth1_vlan: left promiscuous mode [ 834.272357][ T8944] veth0_vlan: left promiscuous mode [ 834.335601][T11931] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1666'. [ 834.447864][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 834.526239][ T5249] Bluetooth: hci0: command tx timeout [ 834.527201][ T46] tipc: Node number set to 2886997162 [ 834.792034][T11946] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 834.881685][T11948] syz.0.1671[11948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.881795][T11948] syz.0.1671[11948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.902178][T11948] syz.0.1671[11948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.924030][T11948] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 835.034584][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 835.087421][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 835.794693][T11848] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.834177][T11968] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1677'. [ 835.834754][T11848] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.887155][T11848] bridge_slave_0: entered allmulticast mode [ 835.898070][T11848] bridge_slave_0: entered promiscuous mode [ 835.906545][T11848] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.913743][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.922265][T11848] bridge_slave_1: entered allmulticast mode [ 835.973994][T11848] bridge_slave_1: entered promiscuous mode [ 836.048090][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 836.147647][T11848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.179434][T11848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.249917][T11983] pimreg: entered allmulticast mode [ 836.352737][T11848] team0: Port device team_slave_0 added [ 836.379775][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'. [ 836.383559][T11848] team0: Port device team_slave_1 added [ 836.405240][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 836.433122][T11989] netlink: 'syz.1.1683': attribute type 5 has an invalid length. [ 836.487166][T11848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.498439][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.526277][T11848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.559315][T11848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.574436][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.605326][ T5249] Bluetooth: hci0: command tx timeout [ 836.630946][T11848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.799760][T11848] hsr_slave_0: entered promiscuous mode [ 836.827359][T11848] hsr_slave_1: entered promiscuous mode [ 836.834195][T11848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.842095][T11848] Cannot create hsr debugfs directory [ 837.222024][T12026] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1692'. [ 837.404155][T12031] ip6gretap0: left allmulticast mode [ 837.449187][T12031] ip6gretap0: left promiscuous mode [ 837.454831][T12031] bridge0: port 3(ip6gretap0) entered disabled state [ 837.457922][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 837.487035][T12031] bridge_slave_0: left allmulticast mode [ 837.492757][T12031] bridge_slave_0: left promiscuous mode [ 837.516811][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.542143][T12031] bridge_slave_1: left allmulticast mode [ 837.560398][T12031] bridge_slave_1: left promiscuous mode [ 837.579484][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.621508][T12031] bond0: (slave bond_slave_0): Releasing backup interface [ 837.655875][T12031] bond0: (slave bond_slave_1): Releasing backup interface [ 837.749688][T12031] team0: Port device team_slave_0 removed [ 837.840515][T12031] team0: Port device team_slave_1 removed [ 837.864780][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.879323][T12031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.897409][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.915430][T12031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.969067][T12031] team0: Port device wlan1 removed [ 838.009205][T12038] team0: Port device wg2 added [ 838.051664][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1694'. [ 838.399749][T12071] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1705'. [ 838.426965][T11848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 838.469610][T11848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 838.498973][T11848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 838.517945][T12075] Bluetooth: MGMT ver 1.23 [ 838.526493][T12076] ax25_connect(): syz.3.1706 uses autobind, please contact jreuter@yaina.de [ 838.543700][T11848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 838.567249][T12079] x_tables: unsorted entry at hook 2 [ 838.604484][ T5249] ================================================================== [ 838.612619][ T5249] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 838.620294][ T5249] Read of size 8 at addr ffff88806a13b398 by task kworker/u9:8/5249 [ 838.628303][ T5249] [ 838.630658][ T5249] CPU: 0 UID: 0 PID: 5249 Comm: kworker/u9:8 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 838.641552][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 838.651643][ T5249] Workqueue: hci0 hci_cmd_sync_work [ 838.656894][ T5249] Call Trace: [ 838.660199][ T5249] [ 838.663154][ T5249] dump_stack_lvl+0x241/0x360 [ 838.667870][ T5249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.673108][ T5249] ? __pfx__printk+0x10/0x10 [ 838.677738][ T5249] ? _printk+0xd5/0x120 [ 838.681926][ T5249] ? __virt_addr_valid+0x183/0x530 [ 838.687075][ T5249] ? __virt_addr_valid+0x183/0x530 [ 838.692217][ T5249] print_report+0x169/0x550 [ 838.696757][ T5249] ? __virt_addr_valid+0x183/0x530 [ 838.701904][ T5249] ? __virt_addr_valid+0x183/0x530 [ 838.707045][ T5249] ? __virt_addr_valid+0x45f/0x530 [ 838.712167][ T5249] ? __phys_addr+0xba/0x170 [ 838.716694][ T5249] ? set_powered_sync+0x3a/0xc0 [ 838.721577][ T5249] kasan_report+0x143/0x180 [ 838.726107][ T5249] ? set_powered_sync+0x3a/0xc0 [ 838.730973][ T5249] set_powered_sync+0x3a/0xc0 [ 838.735660][ T5249] ? __pfx_set_powered_sync+0x10/0x10 [ 838.741036][ T5249] hci_cmd_sync_work+0x22b/0x400 [ 838.745981][ T5249] ? process_scheduled_works+0x976/0x1850 [ 838.751713][ T5249] process_scheduled_works+0xa63/0x1850 [ 838.757285][ T5249] ? __pfx_process_scheduled_works+0x10/0x10 [ 838.763278][ T5249] ? assign_work+0x364/0x3d0 [ 838.767880][ T5249] worker_thread+0x870/0xd30 [ 838.772490][ T5249] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 838.778390][ T5249] ? __kthread_parkme+0x169/0x1d0 [ 838.783424][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 838.788544][ T5249] kthread+0x2f0/0x390 [ 838.792618][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 838.797737][ T5249] ? __pfx_kthread+0x10/0x10 [ 838.802328][ T5249] ret_from_fork+0x4b/0x80 [ 838.806753][ T5249] ? __pfx_kthread+0x10/0x10 [ 838.811349][ T5249] ret_from_fork_asm+0x1a/0x30 [ 838.816129][ T5249] [ 838.819151][ T5249] [ 838.821478][ T5249] Allocated by task 12075: [ 838.825916][ T5249] kasan_save_track+0x3f/0x80 [ 838.830597][ T5249] __kasan_kmalloc+0x98/0xb0 [ 838.835191][ T5249] __kmalloc_cache_noprof+0x19c/0x2c0 [ 838.840570][ T5249] mgmt_pending_new+0x65/0x250 [ 838.845340][ T5249] mgmt_pending_add+0x36/0x120 [ 838.850111][ T5249] set_powered+0x3cd/0x5e0 [ 838.854531][ T5249] hci_mgmt_cmd+0xc47/0x11d0 [ 838.859123][ T5249] hci_sock_sendmsg+0x7b8/0x11c0 [ 838.864065][ T5249] __sock_sendmsg+0x221/0x270 [ 838.868755][ T5249] sock_write_iter+0x2d7/0x3f0 [ 838.873524][ T5249] vfs_write+0xa6d/0xc90 [ 838.877766][ T5249] ksys_write+0x183/0x2b0 [ 838.882096][ T5249] do_syscall_64+0xf3/0x230 [ 838.886600][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.892500][ T5249] [ 838.894821][ T5249] Freed by task 12041: [ 838.898887][ T5249] kasan_save_track+0x3f/0x80 [ 838.903565][ T5249] kasan_save_free_info+0x40/0x50 [ 838.908595][ T5249] __kasan_slab_free+0x59/0x70 [ 838.913358][ T5249] kfree+0x1a0/0x440 [ 838.917273][ T5249] settings_rsp+0x2bc/0x390 [ 838.921786][ T5249] mgmt_pending_foreach+0xd1/0x130 [ 838.926908][ T5249] __mgmt_power_off+0x106/0x430 [ 838.931758][ T5249] hci_dev_close_sync+0x665/0x11a0 [ 838.936877][ T5249] hci_dev_close+0x112/0x210 [ 838.941468][ T5249] sock_do_ioctl+0x158/0x460 [ 838.946071][ T5249] sock_ioctl+0x626/0x8e0 [ 838.950414][ T5249] __se_sys_ioctl+0xf9/0x170 [ 838.955016][ T5249] do_syscall_64+0xf3/0x230 [ 838.959531][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.965430][ T5249] [ 838.967755][ T5249] The buggy address belongs to the object at ffff88806a13b380 [ 838.967755][ T5249] which belongs to the cache kmalloc-96 of size 96 [ 838.981635][ T5249] The buggy address is located 24 bytes inside of [ 838.981635][ T5249] freed 96-byte region [ffff88806a13b380, ffff88806a13b3e0) [ 838.995281][ T5249] [ 838.997612][ T5249] The buggy address belongs to the physical page: [ 839.004023][ T5249] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a13b [ 839.012801][ T5249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 839.019919][ T5249] page_type: f5(slab) [ 839.023909][ T5249] raw: 00fff00000000000 ffff88801ac41280 dead000000000100 dead000000000122 [ 839.032505][ T5249] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 839.041177][ T5249] page dumped because: kasan: bad access detected [ 839.047586][ T5249] page_owner tracks the page as allocated [ 839.053296][ T5249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:1), ts 65327092121, free_ts 65319474345 [ 839.071968][ T5249] post_alloc_hook+0x1f3/0x230 [ 839.076751][ T5249] get_page_from_freelist+0x3045/0x3190 [ 839.082299][ T5249] __alloc_pages_noprof+0x292/0x710 [ 839.087503][ T5249] alloc_pages_mpol_noprof+0x3e8/0x680 [ 839.092965][ T5249] alloc_slab_page+0x6a/0x120 [ 839.097647][ T5249] allocate_slab+0x5a/0x2f0 [ 839.102153][ T5249] ___slab_alloc+0xcd1/0x14b0 [ 839.106840][ T5249] __slab_alloc+0x58/0xa0 [ 839.111174][ T5249] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 839.116548][ T5249] dst_cow_metrics_generic+0x56/0x1c0 [ 839.121926][ T5249] icmp6_dst_alloc+0x270/0x420 [ 839.126699][ T5249] mld_sendpack+0x6a3/0xdb0 [ 839.131201][ T5249] mld_ifc_work+0x7d9/0xd90 [ 839.135709][ T5249] process_scheduled_works+0xa63/0x1850 [ 839.141263][ T5249] worker_thread+0x870/0xd30 [ 839.145859][ T5249] kthread+0x2f0/0x390 [ 839.149928][ T5249] page last free pid 9 tgid 9 stack trace: [ 839.155728][ T5249] free_unref_page+0xcfb/0xf20 [ 839.160504][ T5249] __put_partials+0xeb/0x130 [ 839.165104][ T5249] put_cpu_partial+0x17c/0x250 [ 839.169870][ T5249] __slab_free+0x2ea/0x3d0 [ 839.174285][ T5249] qlist_free_all+0x9a/0x140 [ 839.178879][ T5249] kasan_quarantine_reduce+0x14f/0x170 [ 839.184341][ T5249] __kasan_slab_alloc+0x23/0x80 [ 839.189191][ T5249] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 839.195093][ T5249] __alloc_skb+0x1c3/0x440 [ 839.199516][ T5249] alloc_skb_with_frags+0xc3/0x820 [ 839.204629][ T5249] sock_alloc_send_pskb+0x91a/0xa60 [ 839.209830][ T5249] mld_newpack+0x1c3/0xa90 [ 839.214246][ T5249] add_grec+0x1492/0x19a0 [ 839.218574][ T5249] mld_send_initial_cr+0x228/0x4b0 [ 839.223690][ T5249] mld_dad_work+0x44/0x500 [ 839.228115][ T5249] process_scheduled_works+0xa63/0x1850 [ 839.233669][ T5249] [ 839.235991][ T5249] Memory state around the buggy address: [ 839.241616][ T5249] ffff88806a13b280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 839.249680][ T5249] ffff88806a13b300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 839.257740][ T5249] >ffff88806a13b380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 839.265797][ T5249] ^ [ 839.270643][ T5249] ffff88806a13b400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 839.278703][ T5249] ffff88806a13b480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 839.286761][ T5249] ================================================================== [ 839.307439][ T5249] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 839.314695][ T5249] CPU: 0 UID: 0 PID: 5249 Comm: kworker/u9:8 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 839.325578][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 839.335664][ T5249] Workqueue: hci0 hci_cmd_sync_work [ 839.340906][ T5249] Call Trace: [ 839.344213][ T5249] [ 839.347171][ T5249] dump_stack_lvl+0x241/0x360 [ 839.351889][ T5249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.357122][ T5249] ? __pfx__printk+0x10/0x10 [ 839.361748][ T5249] ? preempt_schedule+0xe1/0xf0 [ 839.366634][ T5249] ? vscnprintf+0x5d/0x90 [ 839.371000][ T5249] panic+0x349/0x880 [ 839.374928][ T5249] ? check_panic_on_warn+0x21/0xb0 [ 839.380071][ T5249] ? __pfx_panic+0x10/0x10 [ 839.384534][ T5249] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 839.390549][ T5249] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 839.396913][ T5249] ? print_report+0x502/0x550 [ 839.401627][ T5249] check_panic_on_warn+0x86/0xb0 [ 839.406598][ T5249] ? set_powered_sync+0x3a/0xc0 [ 839.411482][ T5249] end_report+0x77/0x160 [ 839.415763][ T5249] kasan_report+0x154/0x180 [ 839.420300][ T5249] ? set_powered_sync+0x3a/0xc0 [ 839.425185][ T5249] set_powered_sync+0x3a/0xc0 [ 839.429894][ T5249] ? __pfx_set_powered_sync+0x10/0x10 [ 839.435295][ T5249] hci_cmd_sync_work+0x22b/0x400 [ 839.440262][ T5249] ? process_scheduled_works+0x976/0x1850 [ 839.446017][ T5249] process_scheduled_works+0xa63/0x1850 [ 839.451607][ T5249] ? __pfx_process_scheduled_works+0x10/0x10 [ 839.457622][ T5249] ? assign_work+0x364/0x3d0 [ 839.462243][ T5249] worker_thread+0x870/0xd30 [ 839.466868][ T5249] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 839.472794][ T5249] ? __kthread_parkme+0x169/0x1d0 [ 839.477862][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 839.483011][ T5249] kthread+0x2f0/0x390 [ 839.487120][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 839.492270][ T5249] ? __pfx_kthread+0x10/0x10 [ 839.496902][ T5249] ret_from_fork+0x4b/0x80 [ 839.501363][ T5249] ? __pfx_kthread+0x10/0x10 [ 839.505987][ T5249] ret_from_fork_asm+0x1a/0x30 [ 839.510797][ T5249] [ 839.514097][ T5249] Kernel Offset: disabled [ 839.518453][ T5249] Rebooting in 86400 seconds..