last executing test programs: 12.62962057s ago: executing program 1 (id=1064): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@private=0xa010101, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) socket(0x25, 0x6, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0xbf82) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x20400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) connect$inet(r1, 0x0, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x3, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) 12.285417076s ago: executing program 1 (id=1068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001740)={r4, 0x91, "dfcb4873bc86b44f2c7f88a616b79ca038b768fa908bd5eb1453c636b8c42d229f10374bb7fa3b4ca46db1b8e05f9af7a14785008d14389addfe862bafaa841c9236bcc950fe9ffa84ae13da7598ebeaa4f77632136c58187940819b2b03e5b66b5a6a1f54c9d3c37140a7c0cfb319e01e3f4a0049b0898b7e8d550e98bbd0b47ef8237bc81fc3a52bd9fa586b604b3424"}, &(0x7f0000001800)=0x99) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x7ff05000) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getpeername$netlink(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x40, 0x1, 0x0, 0x0, {[@generic={0x8, 0x12, "1d5fe91fc1807eb01175a53c54f7f997"}, @exp_fastopen={0xfe, 0xa, 0xf989, "737e75a41f31"}]}}, {"bda1b2d2a413a28a0f7e239b48d9409c37e83a47537ff8b1e37f04af7f4201afa08518ffaf3575b82f858200ac001be9668acd4000000000000000ce0540f0cedac46a8b51d80db434fa240e3fe905871ed83fb479b9492b99b060cd29f9d13675acfe6ef0cc5ea316dbbb98"}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10}}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90224fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 11.974211299s ago: executing program 1 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0xc}, @val={0x2, 0x4, 0x6, 0x3, 0xf, 0x406}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x3c, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e23, 0x28, 0x0, @opaque="46e3a0ee14bf49a3ab6afa2df7461c915f0a4948a7f36228e590e08b1c61d84a"}}}}, 0x4a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r3, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) 9.879022715s ago: executing program 1 (id=1087): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000000"], 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x7d67c000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 9.53363677s ago: executing program 1 (id=1089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604dd30800143c00fc010000000000000000000000000000fe8000000000000000000000000000aa", @ANYBLOB="d49a27c796446d008410b2c60b04ae1f39240f3417ebbec787f9aacc21b7be2565bc2b0fc1fee7e3e16a8ec7c90016c72d0df15b5b6c3cb075ff6f1d75a3373d05762d6fab0af681f1d979dc361a0315846f710abbbc913a6502e2f836938b49055e48f5d39b43bd302dd36f04e955b03149857aa44f09c8934e635d2b2a2f67"], 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r1], 0xfdef) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="7221c575da24e50d16e42a8c942b829bff1ec237665e8f9a617273c5d640219aeed9bb77ed4a20fe5bb73c571d4f64a626f603528385562eb26b043838", 0x3d}, {&(0x7f00000000c0)="bbed1d79e64c4e2e1a928126b5e6334722d1563f97b4336d65522ab4e9ef832efa4662167711d13d496795e38d2dad6b454b27ec1dd62f852b9e95a4aaecef18fe3f93a7c2c1eb12d103b8eadaf63bcbaf1ac87610cfe439743cfaa888c684b3a95d334a24accd3e837bd2d1d2d59c9108080b0a4962df0d175bc7cc5580eeb0f4a6182b5aab2cfe2c69a838f75a45c6ebd3cfc1006c", 0x96}, {&(0x7f0000000300)="2dd8632bcd4d3672c4d9a9d4a0af0314a277aa77c465e768637fe19c202887f5173b58b969e999af1d941c39b7061ae920ee4a178ec7f159b77969427cdb6b953a9f2c00c7a898deb96e49af92ce92f40b5cb5edeb30c78af6158ef45cbdb09ac87aaf944be303ffa2bd53df01d6d78c94da632c9896137d950528f06b8a89d96de619b2d68f3fc23d17024c020958d3c80e3c1164c2acbd7e763af067b9aff6b0efbf54d22458a7007f8f036e45a4cd3f726c12707bb19d3cd3", 0xba}, {&(0x7f00000003c0)="4d14e78218095624bff68cf85d5da5ff050789395ba58f630510075a6be33d8a62e55540ece3bc826161e9553d3a4dfa8ac83c60eb9fdef653456ac09d6b540074d19294701e50d9abefe028ceb2ee551767c3a853bebc9606c077b6b1e27c2137313b3d63d9c8e2ada76ae7364b7416b8139f50480512acc3fd2149720e09fee5cad385c99e468d1a83618b5c8bd4672d98a7eb4579733c85acb1ad4fe598900c53f7513c20941ac66ea70c7bff3de779d27d560b29f4131d1e62bbc65de2c7269b12ad6f9af4e4d60835420bdf4dd679a16e04fa7b4534718f5d85747d60db9d6bcb478ee5", 0xe6}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000240)="633c5b58961b26d9097611c6be3d92f9aee754c914e69012b0b1b62e112339f4490a348f3c6e948492e477dce2e5638aa10114ca800eecfe2baa0d283e747f75f5079fc691b2507a61221e114a94df77ab151eace0548b7159af8f0d5229fd793bfc8829f1", 0x65}], 0x7) 8.901634228s ago: executing program 1 (id=1092): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@can={0xc, {{}, 0x7, 0x1, 0x0, 0x0, "798f634c9f4511b7"}}}}, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005500e50100000000000000e5230576330007a5c600d1d50783c1c80000cb0d03ea30dbeb657fe69fe11a3ea22133356bcde40739bb2878a099c84763997c2eceb475", @ANYRES32=r3], 0x18}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000180)={0x2, 0x4, {0xfffffffffffffffe, @usage=0x9, 0x0, 0x3, 0x9, 0x7, 0x3, 0x1000000000000001, 0x410, @struct={0x6, 0xc}, 0x425, 0x3, [0x5, 0x7fffffff, 0x8001, 0x8, 0x2f]}, {0x3, @usage=0x70, 0x0, 0x5, 0x2, 0x8001, 0x9, 0x5, 0x451, @struct={0xd, 0x1}, 0x2, 0x6, [0x1, 0x4, 0x4, 0xff, 0x9, 0x8]}, {0x8, @usage=0x100000001, 0x0, 0x10, 0x59a, 0x1, 0x4, 0x101, 0x1, @struct={0x1a4, 0x8}, 0x5, 0x9, [0x7, 0x9, 0x1, 0xd82, 0x2, 0x1]}, {0x1, 0x6, 0x2ef}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000580)={0x0, 0x18f, 0x1, [0x401, 0x101, 0x10001, 0x10001, 0x4cc], [0x6, 0x5, 0x9, 0x377, 0x1000, 0x659e, 0x889, 0x1, 0x1f, 0x962, 0x9, 0x0, 0x82b, 0x60000, 0x7, 0x401, 0xc, 0x0, 0x0, 0xdbdb, 0x8, 0x3ff, 0x0, 0x1, 0x3, 0x1, 0x4, 0x6, 0x1, 0x10001, 0x7fc0, 0xa, 0x0, 0x2, 0x1, 0x0, 0x9, 0x7fffffff, 0x3, 0x4, 0x5, 0x10, 0x7, 0x1, 0x6, 0x1, 0x8, 0x0, 0x8, 0x2a, 0x5, 0x7, 0x6, 0xff, 0x7, 0xe65, 0xfffffffffffffffe, 0x200, 0xe43, 0x9, 0x7, 0x9, 0x5, 0x5, 0x4, 0xa, 0x0, 0x100000001, 0xad3, 0x10001, 0x5, 0x2, 0x2, 0x100, 0x8000, 0x6, 0x4, 0x9, 0x6, 0x6, 0x8, 0x9, 0x100, 0x4, 0x1640d587, 0x7, 0x6, 0x3, 0x100000000, 0x480000000000000, 0x2, 0x8, 0x0, 0xfdb, 0x5, 0xbff7, 0xc8, 0xc, 0xff, 0x6, 0x6, 0x5, 0x5, 0x81, 0x40, 0x5, 0x9eeb, 0x6, 0x3, 0x3ff, 0xb, 0x1e, 0x4, 0xa32, 0x0, 0x6, 0xf, 0x8, 0x4, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000009c0)={0x0, 0x1, 0x0, [0xfffffffffffffffd, 0x2d, 0x9, 0x3, 0x800], [0x7, 0x10001, 0x8001, 0x2, 0x4, 0xfffffffffffffff8, 0x0, 0x2, 0x9, 0x8000, 0x0, 0x9, 0xd1, 0x675, 0xf07, 0x2, 0x6, 0xdb, 0x9, 0x6, 0xffffffff, 0x401, 0x2, 0xffff, 0xffffffffffff8f8b, 0x9, 0x5, 0x7, 0x6, 0x5, 0xc, 0x5, 0x100000000, 0x13c5, 0xfffffffffffffff9, 0x853, 0x15fe8000, 0x10001, 0x1, 0x42ad, 0xff, 0x2, 0x80000001, 0x434d4734, 0xe, 0x100000001, 0x5, 0x9, 0x3, 0x1, 0x5, 0x4b, 0x8001, 0xfffffffffffffffb, 0x74d, 0x4, 0x0, 0x7, 0x60, 0x7, 0xa0, 0x9, 0x80000001, 0x7fffffff, 0x2, 0x14c, 0x7, 0x9, 0x0, 0x1, 0x9, 0x18, 0x1ff80000000000, 0x963e, 0x8, 0xe, 0xf038, 0xbf, 0x5, 0x6, 0x800, 0x3, 0x1, 0x6, 0x9, 0x7, 0xfffffffffffffffb, 0x2, 0x1, 0x8, 0x7ff, 0x2, 0x5, 0x4, 0x3, 0x8, 0xee9, 0x98, 0x6, 0x3, 0x1af17f2b, 0xfffffffffffffe00, 0x4, 0x200, 0x0, 0x8, 0x1, 0x0, 0x72b4329f, 0x9, 0x8, 0xfffffffffffffff7, 0x7, 0x80000001, 0x4d9, 0xfbfe, 0x2, 0x0, 0xf3fd, 0x3, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000e00)={0x13, 0x6, {0xb, @struct={0x5, 0xc}, r4, 0x8, 0xffffffffffffffff, 0xe7b, 0x7, 0x3, 0x20, @usage=0x30, 0x1, 0x0, [0x7, 0xa, 0xb0, 0x401, 0x0, 0x200]}, {0x0, @usage=0xff, r5, 0x6, 0x0, 0x8, 0x4, 0x4, 0x10, @struct={0x5, 0x3}, 0xd, 0x10001, [0x6, 0x7fffffffffffffff, 0x44cb0820, 0x10001, 0x80000000, 0x2]}, {0x4, @usage=0x7, r6, 0x4, 0x40, 0x9, 0x3, 0xa9, 0x1d, @struct={0xfffffff5, 0xd23}, 0x7, 0x65, [0xffffffffffffffff, 0x3, 0x2, 0x1000, 0x2, 0xada]}, {0x7ff, 0x4, 0x3a6}}) 7.565707665s ago: executing program 2 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2=0x7f000001}}]}]}, 0x34}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa88a8090081001500001100012338f3c50600e777e019ed50dcc15b3f7e32e694c34178bf8259f5c0c5e9add74a1333d19f127ab4b27c0b24be30d99dec9ffbd071c9228e9a6727158ce024ecc359dd89488a5992b85f1bab5b4bee2b0dcaab6469827cdcbba463d2316a802b72d0aa795ce91e08a704981035e1c75d10631e8a268b692ed24a48db5f909af3c9e269c445f689d851b2bc00000000000000150000000000"], &(0x7f00000000c0)={0x1, 0x3, [0x1e6, 0x1cd, 0xab9, 0xf69]}) 7.521307056s ago: executing program 2 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x9, [@struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x40, [{0xb, 0x3, 0x78}, {0x10, 0x1, 0x5}, {0x1, 0x3, 0x8}, {0xe, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x7}}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @union={0x2, 0x4, 0x0, 0x5, 0x1, 0x4330, [{0xe, 0x0, 0xfffffffd}, {0x8, 0x0, 0x886}, {0x4, 0x5, 0x3}, {0x7, 0x3, 0x9}]}]}, {0x0, [0x2e, 0xa478b4299fd2dd9f, 0x2e, 0x61, 0x0, 0x0, 0x0]}}, &(0x7f0000000400)=""/20, 0xbd, 0x14, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5fc, '\x00', r1, r2, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 7.286148907s ago: executing program 2 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC], 0x150}, 0x1, 0x0, 0x0, 0x4800}, 0x20000805) bpf$LINK_GET_NEXT_ID(0x7, &(0x7f0000000040)={0x20fffffe}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000085100000010000009500007b0000000085000000080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="03fd00b38eb8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r7) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r10 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f0000000140)=0x400000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4046}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 6.213873948s ago: executing program 0 (id=1115): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090000000000000000000ca4a444143000fe00ff0000"], 0x1c}}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000500)={0x6, 0x7ff, 0xf1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, r7, 0x603, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x12}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x59b37209}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r11, 0x400448e3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4008, 0x40, 0x4, 0x7ffe, {{0x1c, 0x4, 0x1, 0x31, 0x70, 0x7f, 0x0, 0xa, 0x4, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xe7, 0x3, 0x5, [{@local, 0xffff}, {@multicast1, 0x4}]}, @lsrr={0x83, 0x17, 0x7f, [@rand_addr=0x64010102, @private=0xa010102, @remote, @remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x8, [{@private=0xa010102, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@loopback, 0x6}]}, @lsrr={0x83, 0x7, 0xc4, [@local]}, @noop, @generic={0x606cd5f124f7308d, 0xc, "3a0aebe70a4525869327"}]}}}}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) socket(0x2c, 0x4, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000380)="00080d7cc7cfc496c1f52088b77d571bb091ee042ca1c1f26d9acb36c259093468e31700cff57cb6c7cf77455b768cb5f3ebc4a0be622d701f3b51b861a435130c586041428c071fbc769c68b07690f6a7bb43731306dca3c75899a4b1181c6c5271b0d30fef5fa141bfa19726357851cc1d2c3782d9ab1837d24650d11be38358252e40eb8f093ab904de742e36001c4a41a803dd699cf473161c2672b77a38a4da71b8d79de27fb71d0edbace85ac034e0c905aa5ddebf30e83293ab29328a39b42fa0", &(0x7f0000000480)=@tcp=r4, 0x4}, 0x20) 6.189234448s ago: executing program 2 (id=1116): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="10b19859e95110d987622a34cab88896a8382b4729", @ANYRES64=0x0], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='$'], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000020000000000000021c8499dcc71a9e7e990cfbd32fed8b4c02443404d9077ae4ae0542a89b65becef5c042ef77eec7de327635b9e4fa894347e98e01b7b6e15e0dce1e27d14dfe9dd9dc957dea3e08045b0dea587ac7eb7ddb0c1dc0104ce078520ad84fc8f8b25183d97a16e66da9c676a32e6e452e6f42033399b43fb5685ece925d93c4c12daa37135730140df71d2099fde20f50814c56811d7ce3ad087f4d95aa20a228d43cd1fb727c0fcc715ed9a45d7f7563d8e86c4a45a478e92206680e8fcc7a7c833650c7bb0fbbfed1a805ca989ae4a2f32f5d4cd78d37cee0b96fd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200df253000000008000300", @ANYRES32=r10, @ANYBLOB="0c009900000000003b0000000600360005000000060036000f00000006003600210000000600360023000000060036002600000006003600000000000600360008000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) 5.89541635s ago: executing program 2 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="147f", @ANYRES16=0x0, @ANYBLOB="02000000000000008000250000000600060002"], 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xbc, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x8, 0xfffe, 0x40]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x127}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x30f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x47}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x488e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x82, &(0x7f0000000080)={r4}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="fc9ffe3094ffa040411fd44b62b3c6610d8d3cb77423739255f89151af612530c64cdfddc98a92af9e52969679aa97febe0b5e4247a3f023efe0b903b0513eaab1b59268cb3d227bbb199885b271bf3a1c7645af4a2295f82583076bb722348d67d7c198c5a6726b41305e222d", @ANYBLOB='\x00'/12], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.61971855s ago: executing program 0 (id=1121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x3}, @var={0xd, 0x0, 0x0, 0xe, 0x5}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x2, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x10, 0x1}, {0xc, 0x3}]}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x30, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000680)=""/62, 0xa8, 0x3e, 0x0, 0x8, 0x10000, @value}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r9}, 0x38) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f00000001c0), &(0x7f0000000200)=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @generic={0x0, 0x1, 0x0, 0x6, 0x120000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000700)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r7, r8, r9, r10], &(0x7f0000000840)=[{0x5, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x6, 0xb}], 0x10, 0x2, @void, @value}, 0x94) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x91, 0x0}, 0x8) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x10, 0x2, 0x8, 0x5, 0x202, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x200000, 0x1, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r16, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r15}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x0, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x87}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x7, 0x6, 0x30, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x1400000, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, @netfilter=0x2d, r12, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xa, 0xfffffffc, 0x3}, 0x10, r13, r0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xf, 0x2}, {0x0, 0x3, 0x5, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r17 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_IOC_READY(r17, 0x9360, 0x80ec) 5.3256503s ago: executing program 0 (id=1123): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001180)='ext4_ext_handle_unwritten_extents\x00', r0, 0x0, 0x2167be07}, 0x18) 5.324455643s ago: executing program 2 (id=1124): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x4, 0x0, 0x0, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010008000000000000003400e8ff3300000006000000040000000000000e02000000000000000000000000000009040000000000000000000004000000000b0000000000000800000000000000006100"], 0x0, 0x52, 0x0, 0x200000, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00c944", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=r8, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464655c73696d0000000f0002006e657464657673696d300000b0e429cd0d88c4ca52a5ff4d789d39997e194bcd93be296d4b9b2b6b4e5d"], 0x3c}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket(0x22, 0x2, 0x4) bind$bt_hci(r10, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r9, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000100)={0x6, {0x0, 0xfffffffffffffff7, 0x1, 0x0, 0x1}}) ioctl(r1, 0x7, &(0x7f0000000580)="ba3890658e0c7ee80780fd3939abc88943a25587b63bd4509aaa95bcbed0556a3e3cf990a738883ee7021c11e228cc1afa6d80ce711addfab66e5906c097baaa35ece09c657cd49338057b75595f25bbc0837123f433b342c17264c41badfc4a11d417ea96eb4ec262decd68da6688515e814171cb2a773f6d9027a2c6e4600bac8a3e9150c72a22cc66c01ae3c76d876ba006464216ea0ee5e20471429cb14d4dc6467020c120159f500da8df6079f7deb099c62211ea5d4403e2ec727515913ae1e9b9274379235d635cbd5175fcf10348918b6e9db605319e90b4f74f8390012c355ec9f526f84b3586058e03941782c5a1518191") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@gettaction={0xd4, 0x32, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xff}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 5.007525572s ago: executing program 0 (id=1126): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x301443, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x301443, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth0_macvtap\x00', 0xff}) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth0_macvtap\x00', 0xff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) read(r2, 0x0, 0x0) (async) read(r2, 0x0, 0x0) close(r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x7, 0x18, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) (async) socket$l2tp6(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/89, 0x128000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000001c0)=0x8, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x20, 0x4) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x2}, 0x10) (async) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000150000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000150000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.689853693s ago: executing program 0 (id=1128): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000079111800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x218, 0x0, 0x218, 0x0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vcan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 3.909741015s ago: executing program 0 (id=1134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006311a400000000000400000000000000ff0000000000000041c4bd47d577775359aa17b4cd4b975554b467af"], &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)=0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="54030000100000012abd7000ffdbdf250a010101000000000000000000000000ac1414aa000000000000000000000000000600064e220000020000802b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x2040}, 0x20000001) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 2.276793154s ago: executing program 4 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000480)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5a1}], 0x1, 0x40000000, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)={0x1010, 0x453, 0x300, 0x70bd29, 0x25dfdbfc, "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", ["", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) 1.677533392s ago: executing program 3 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a011b0000000000000000020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) socket$kcm(0x29, 0x6, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "2093653ccd13ccf966456d89f634edb6892bcbe5844cdc46dff618bf48186bde69"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000054}, 0x4000045) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) shutdown(r4, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000002000000", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.474723332s ago: executing program 3 (id=1142): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socket$inet6(0xa, 0x6, 0x405e0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000f2000a000200aaaa"], 0x28}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) accept4(r9, 0x0, 0x0, 0x0) 1.35964507s ago: executing program 4 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 1.169643226s ago: executing program 3 (id=1144): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x10, 0x10}, 0xc) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000479700850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x6}) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="03000000"], 0x28, 0x7ffffff7}}], 0x1, 0x0) 880.541051ms ago: executing program 4 (id=1145): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) 663.51345ms ago: executing program 4 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000b00)={0x0, 0x4}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x111, 0xe, 0x0, 0x20001f00) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/190, 0xbe}], 0x1}}], 0x1, 0x41, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) (async) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0xb8, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7fffffffffffffff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x408001}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400e8c2}, 0x81) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)=ANY=[], 0x11f8}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0x4ba, [0x0, 0x200008c0, 0x20000c34, 0x20000c64], 0x0, &(0x7f00000001c0), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x1, 0x22f0, 'veth1_to_bond\x00', 'veth0_macvtap\x00', 'batadv_slave_1\x00', 'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xce, 0xce, 0x1fe, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x1, 0x1}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x5}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:restorecond_var_run_t:s0\x00'}}}}, {0x5, 0xc, 0x200, 'vlan1\x00', 'syzkaller0\x00', 'veth1_to_team\x00', 'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x116, 0x146, [@state={{'state\x00', 0x0, 0x8}, {{0xb4}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}, @common=@ERROR={'ERROR\x00', 0x20, {"0ffaf703330e3d9a7307fbb3315bb7480393252da5c7e91d01d19de85671"}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x53639dc95d5f802e, 0x800, 'dvmrp0\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', '\x00', @random="0bcc6a554b60", [0x1fe, 0x0, 0xff, 0x0, 0x0, 0xff], @random="8fa4d649d90c", [0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0xd25, 0x4, 0x1, 0x0, "7d5e5c867a7fe081672f068ce1aca5789ef8d31993239212ab966cc58268e9c6f6d37d45b1ab807ec618ae5928cdac9c340283b29e8a11ae84eea495520b1f99"}}}}]}]}, 0x532) 429.579573ms ago: executing program 3 (id=1147): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r1, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) pread64(r3, &(0x7f0000000240)=""/64, 0x40, 0x3) (async, rerun: 64) sendfile(r2, r2, 0x0, 0x405) (async, rerun: 64) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) (async) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) (async) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) 273.288756ms ago: executing program 4 (id=1148): socket(0x5, 0x800, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) 170.639465ms ago: executing program 3 (id=1149): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) epoll_create(0x9660) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) (async) close(r2) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) (async) 109.576482ms ago: executing program 4 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x24}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_IE={0xa4, 0x2a, [@chsw_timing={0x68, 0x4, {0xa823}}, @mesh_chsw={0x76, 0x6, {0x4, 0xef, 0x3a, 0x4}}, @random_vendor={0xdd, 0x55, "ce956e7fc4b200f9eacab3f36261bebd29e3148049d2b1b2414aad280dc07740e083065147da529f974c3456ac5b094aa1cd522f48b1e6783549e64f828d3c976e5b9785594ed1c6f9ad7baa53e7fac318694fe591"}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x9, 0x9, @device_b, 0x34f03c9e, 0x7, 0x1}}, @prep={0x83, 0x1f, {{}, 0x8, 0x2, @device_b, 0x6, @void, 0x4, 0x8, @device_a, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x10c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_TXQLEN={0x8, 0xd, 0xa85230b}]}, 0x28}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x2e, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000240)=""/46, 0x2c, 0x2e, 0x0, 0x2, 0x10000, @value}, 0x28) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) close(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00LY\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async) socket$inet6(0xa, 0x1, 0x100) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x5, 0x0, 0x4) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000000), &(0x7f0000000740)=r4}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x8000000000000000, 0xfffffffffffff801, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x6, 0x3, 0xd, 0x0, 0x1}, @generic={0x1, 0xf, 0x2, 0xca3, 0x9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x2f, &(0x7f00000001c0)=""/47, 0x40f00, 0x13, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0xfffffff8, 0x60}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[r2, r3, r7, 0x1, r10, 0x1, r12, 0x1, r13, r14], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0x9}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x1, 0x6}, {0x4, 0x3, 0xf, 0xa}, {0x5, 0x3, 0x2, 0xf395afcd01969e57}, {0x3, 0x5, 0x5, 0x5}, {0x4, 0x5, 0xb}, {0x0, 0x3, 0xd, 0x4}, {0x4, 0x4, 0x4, 0x1}], 0x10, 0x7fffffff, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 73.998011][ T5830] cgroup: Unknown subsys name 'net' [ 74.125613][ T5830] cgroup: Unknown subsys name 'cpuset' [ 74.134469][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.698123][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.005981][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.014996][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.023146][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.031940][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.039702][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.048759][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.057052][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.066893][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.075483][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.096428][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.112035][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.131625][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.143356][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.146242][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.153529][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.161279][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.172599][ T5151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.181173][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.189055][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.196545][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.204426][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.208636][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.214063][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.229640][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.234115][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.244693][ T5151] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.252932][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.265948][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.273172][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.281323][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.686748][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 78.728864][ T5873] modprobe (5873) used greatest stack depth: 19376 bytes left [ 78.798733][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 78.808639][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 78.904115][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.917635][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.957847][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.965137][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.973084][ T5852] bridge_slave_0: entered allmulticast mode [ 78.979873][ T5852] bridge_slave_0: entered promiscuous mode [ 79.024157][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.031366][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.038633][ T5852] bridge_slave_1: entered allmulticast mode [ 79.046168][ T5852] bridge_slave_1: entered promiscuous mode [ 79.060488][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.067776][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.075797][ T5849] bridge_slave_0: entered allmulticast mode [ 79.082953][ T5849] bridge_slave_0: entered promiscuous mode [ 79.099318][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.106477][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.114920][ T5855] bridge_slave_0: entered allmulticast mode [ 79.121875][ T5855] bridge_slave_0: entered promiscuous mode [ 79.130087][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.137363][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.144717][ T5855] bridge_slave_1: entered allmulticast mode [ 79.152388][ T5855] bridge_slave_1: entered promiscuous mode [ 79.189853][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.197266][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.204746][ T5849] bridge_slave_1: entered allmulticast mode [ 79.211751][ T5849] bridge_slave_1: entered promiscuous mode [ 79.247737][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.260405][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.327020][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.345529][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.358371][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.379730][ T5852] team0: Port device team_slave_0 added [ 79.404594][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.442958][ T5852] team0: Port device team_slave_1 added [ 79.448916][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.457292][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.465262][ T5845] bridge_slave_0: entered allmulticast mode [ 79.472812][ T5845] bridge_slave_0: entered promiscuous mode [ 79.487376][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.495038][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.502712][ T5840] bridge_slave_0: entered allmulticast mode [ 79.509425][ T5840] bridge_slave_0: entered promiscuous mode [ 79.519474][ T5855] team0: Port device team_slave_0 added [ 79.543004][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.550313][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.558202][ T5845] bridge_slave_1: entered allmulticast mode [ 79.565639][ T5845] bridge_slave_1: entered promiscuous mode [ 79.589154][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.596483][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.604287][ T5840] bridge_slave_1: entered allmulticast mode [ 79.611069][ T5840] bridge_slave_1: entered promiscuous mode [ 79.619390][ T5855] team0: Port device team_slave_1 added [ 79.634846][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.642116][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.668660][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.682682][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.689667][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.715738][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.738171][ T5849] team0: Port device team_slave_0 added [ 79.746868][ T5849] team0: Port device team_slave_1 added [ 79.777245][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.784379][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.810410][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.844062][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.856411][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.883299][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.893280][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.900258][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.926545][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.953253][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.960270][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.986682][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.000374][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.028147][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.035657][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.061800][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.108178][ T5845] team0: Port device team_slave_0 added [ 80.116768][ T5845] team0: Port device team_slave_1 added [ 80.139325][ T5840] team0: Port device team_slave_0 added [ 80.149314][ T5852] hsr_slave_0: entered promiscuous mode [ 80.156336][ T5852] hsr_slave_1: entered promiscuous mode [ 80.183841][ T5855] hsr_slave_0: entered promiscuous mode [ 80.190107][ T5855] hsr_slave_1: entered promiscuous mode [ 80.197324][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.205642][ T5855] Cannot create hsr debugfs directory [ 80.212787][ T5840] team0: Port device team_slave_1 added [ 80.220636][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.227860][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.253839][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.266486][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.273549][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.300912][ T54] Bluetooth: hci2: command tx timeout [ 80.306623][ T54] Bluetooth: hci1: command tx timeout [ 80.311741][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.312395][ T5846] Bluetooth: hci0: command tx timeout [ 80.381772][ T5846] Bluetooth: hci4: command tx timeout [ 80.387647][ T5846] Bluetooth: hci3: command tx timeout [ 80.409568][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.417029][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.443385][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.459702][ T5849] hsr_slave_0: entered promiscuous mode [ 80.466327][ T5849] hsr_slave_1: entered promiscuous mode [ 80.472775][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.480362][ T5849] Cannot create hsr debugfs directory [ 80.513396][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.520386][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.546652][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.605302][ T5845] hsr_slave_0: entered promiscuous mode [ 80.613422][ T5845] hsr_slave_1: entered promiscuous mode [ 80.619495][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.627371][ T5845] Cannot create hsr debugfs directory [ 80.687172][ T5840] hsr_slave_0: entered promiscuous mode [ 80.695263][ T5840] hsr_slave_1: entered promiscuous mode [ 80.701539][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.709140][ T5840] Cannot create hsr debugfs directory [ 80.970389][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.984017][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.002509][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.038069][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.084479][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.096459][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.112833][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.128932][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.179034][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.195998][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.207450][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.231975][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.316308][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.328219][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.340281][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.377929][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.391328][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.403658][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.419607][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.430589][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.453599][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.506023][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.551789][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.559078][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.590816][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.598015][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.618682][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.684886][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.729041][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.746656][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.753915][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.775972][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.809473][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.816651][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.847418][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.871115][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.878312][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.899186][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.906426][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.923953][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.984955][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.025539][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.032775][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.048177][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.055347][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.089272][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.138749][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145947][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.195869][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.203177][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.239298][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.378154][ T5846] Bluetooth: hci0: command tx timeout [ 82.382289][ T54] Bluetooth: hci1: command tx timeout [ 82.383762][ T5846] Bluetooth: hci2: command tx timeout [ 82.452680][ T5846] Bluetooth: hci4: command tx timeout [ 82.462554][ T5846] Bluetooth: hci3: command tx timeout [ 82.464504][ T5855] veth0_vlan: entered promiscuous mode [ 82.499900][ T5855] veth1_vlan: entered promiscuous mode [ 82.509444][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.635185][ T5855] veth0_macvtap: entered promiscuous mode [ 82.657494][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.676122][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.686404][ T5855] veth1_macvtap: entered promiscuous mode [ 82.728153][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.739754][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.786031][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.839933][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.850096][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862286][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.871133][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.901326][ T5840] veth0_vlan: entered promiscuous mode [ 82.930117][ T5849] veth0_vlan: entered promiscuous mode [ 82.960609][ T5840] veth1_vlan: entered promiscuous mode [ 83.034943][ T5852] veth0_vlan: entered promiscuous mode [ 83.052914][ T5849] veth1_vlan: entered promiscuous mode [ 83.081132][ T5852] veth1_vlan: entered promiscuous mode [ 83.124530][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.146822][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.190754][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.206841][ T5840] veth0_macvtap: entered promiscuous mode [ 83.213288][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.235476][ T5849] veth0_macvtap: entered promiscuous mode [ 83.268153][ T5840] veth1_macvtap: entered promiscuous mode [ 83.285494][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.293853][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.296258][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.322261][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.333331][ T5849] veth1_macvtap: entered promiscuous mode [ 83.366759][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.381908][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.395308][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.412082][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.420860][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.429776][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.438654][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469184][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.481009][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.503732][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.517812][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.533678][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.541973][ T5852] veth0_macvtap: entered promiscuous mode [ 83.548846][ T5845] veth0_vlan: entered promiscuous mode [ 83.568891][ T5852] veth1_macvtap: entered promiscuous mode [ 83.611218][ T5845] veth1_vlan: entered promiscuous mode [ 83.620507][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.632607][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643159][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.656147][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.669151][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.736661][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753932][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.763171][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.773106][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791738][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.800037][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.831305][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.843538][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.854298][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.871474][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.881355][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.905822][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.917452][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.959606][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.971226][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.996545][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.008459][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.018611][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.029383][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.044398][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.075060][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.084062][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.093109][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.102006][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150182][ T5845] veth0_macvtap: entered promiscuous mode [ 84.180360][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.195183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.257296][ T5845] veth1_macvtap: entered promiscuous mode [ 84.287738][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.314228][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.340924][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.354494][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.370880][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.383177][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.395643][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.418765][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.435692][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.446362][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.456348][ T5853] Bluetooth: hci1: command tx timeout [ 84.457015][ T54] Bluetooth: hci0: command tx timeout [ 84.467347][ T54] Bluetooth: hci2: command tx timeout [ 84.473908][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.494862][ T5943] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 84.504599][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 84.508802][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.529334][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.541615][ T5846] Bluetooth: hci4: command tx timeout [ 84.547189][ T54] Bluetooth: hci3: command tx timeout [ 84.554442][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.581477][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.606703][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.627914][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.639288][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.650400][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.661256][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.672507][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.697695][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.706641][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.751641][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760658][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.770996][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.786920][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.833752][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.843988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.024632][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.033135][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.141766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.165667][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.194835][ T5969] Cannot find add_set index 0 as target [ 85.238024][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.282417][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.503873][ T5980] lo speed is unknown, defaulting to 1000 [ 85.518072][ T5980] lo speed is unknown, defaulting to 1000 [ 85.535174][ T5980] lo speed is unknown, defaulting to 1000 [ 85.627835][ T5987] openvswitch: netlink: Actions may not be safe on all matching packets [ 85.641222][ T5987] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 85.649371][ T5987] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.665695][ T5987] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 85.673392][ T5987] netlink: 636 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.977644][ T5980] infiniband syz0: set active [ 85.982871][ T5980] infiniband syz0: added lo [ 85.989509][ T5980] syz0: rxe_create_cq: returned err = -12 [ 85.995851][ T5980] infiniband syz0: Couldn't create ib_mad CQ [ 86.002732][ T5980] infiniband syz0: Couldn't open port 1 [ 86.022638][ T2145] lo speed is unknown, defaulting to 1000 [ 86.101225][ T5980] RDS/IB: syz0: added [ 86.108678][ T5980] smc: adding ib device syz0 with port count 1 [ 86.124861][ T6003] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.140997][ T6003] unsupported nlmsg_type 40 [ 86.146229][ T5980] smc: ib device syz0 port 1 has pnetid [ 86.156314][ T5980] lo speed is unknown, defaulting to 1000 [ 86.175345][ T5843] lo speed is unknown, defaulting to 1000 [ 86.287076][ T6009] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.337040][ T6009] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 86.532208][ T54] Bluetooth: hci2: command tx timeout [ 86.533297][ T5853] Bluetooth: hci0: command tx timeout [ 86.543797][ T5846] Bluetooth: hci1: command tx timeout [ 86.562857][ T6014] Bluetooth: MGMT ver 1.23 [ 86.618433][ T5846] Bluetooth: hci3: command tx timeout [ 86.626565][ T5846] Bluetooth: hci4: command tx timeout [ 86.628567][ T5980] lo speed is unknown, defaulting to 1000 [ 86.939485][ T5980] lo speed is unknown, defaulting to 1000 [ 86.950234][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.973136][ T6021] Zero length message leads to an empty skb [ 87.061922][ T968] cfg80211: failed to load regulatory.db [ 87.503154][ T5980] lo speed is unknown, defaulting to 1000 [ 88.019498][ T6043] lo speed is unknown, defaulting to 1000 [ 88.043758][ T6059] netlink: 'syz.4.42': attribute type 18 has an invalid length. [ 88.108896][ T6059] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.118643][ T6059] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.127761][ T6059] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.136972][ T6059] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.203564][ T6064] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 88.320503][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 88.413290][ T5980] lo speed is unknown, defaulting to 1000 [ 88.671083][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.866276][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.888337][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.901961][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.917329][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.931150][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.963043][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.973857][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.984634][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.994540][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.007189][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.526701][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.536494][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.866886][ T6120] pim6reg1: entered promiscuous mode [ 89.896548][ T6120] pim6reg1: entered allmulticast mode [ 90.487897][ T6145] ɶƣ0GC: entered promiscuous mode [ 90.494442][ T6144] netlink: 'syz.0.67': attribute type 10 has an invalid length. [ 90.512493][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.68'. [ 90.518552][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.701895][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 90.867704][ T6166] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 90.904340][ T6166] netlink: 9332 bytes leftover after parsing attributes in process `syz.0.70'. [ 90.947320][ T6166] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 90.968588][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 91.311845][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 91.380356][ T6189] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 91.605193][ T6196] veth1_macvtap: left promiscuous mode [ 91.658797][ T6199] pim6reg: entered allmulticast mode [ 91.685181][ T6199] pim6reg: left allmulticast mode [ 92.200235][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.442561][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 92.474028][ T6241] netlink: 'syz.3.96': attribute type 33 has an invalid length. [ 92.981245][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 92.991560][ T6268] IPVS: persistence engine module ip_vs_pe_ not found [ 93.005897][ T6268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 93.680920][ T6305] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 94.009144][ T6320] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 94.395171][ T6340] Cannot find set identified by id 0 to match [ 94.500431][ T6350] netlink: 'syz.3.131': attribute type 4 has an invalid length. [ 94.691992][ T6356] __nla_validate_parse: 5 callbacks suppressed [ 94.692011][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.134'. [ 94.734112][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.134'. [ 94.772610][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.134'. [ 95.058170][ T6331] syz.1.126 (6331) used greatest stack depth: 17904 bytes left [ 95.627541][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 95.670948][ T6363] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 95.737111][ T6363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.908515][ T6404] netlink: 2 bytes leftover after parsing attributes in process `syz.4.151'. [ 95.908618][ T6407] tipc: Failed to remove unknown binding: 66,1,1/0:3982419279/3982419281 [ 96.125595][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 96.146092][ T6408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.201647][ T6414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.153'. [ 96.329574][ T6420] netlink: 'syz.2.155': attribute type 9 has an invalid length. [ 96.368270][ T6420] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.155'. [ 96.446475][ T6420] ip6t_srh: unknown srh invflags A757 [ 96.446898][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 96.965339][ T6453] IPv6: sit1: Disabled Multicast RS [ 96.977011][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 97.145311][ T6457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.200701][ T6458] netlink: 'syz.0.170': attribute type 21 has an invalid length. [ 97.216570][ T6458] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 97.233714][ T6463] tipc: Started in network mode [ 97.239263][ T6463] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 97.265490][ T6463] tipc: Enabled bearer , priority 10 [ 97.633372][ T6485] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 97.728179][ T6487] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 97.788952][ T6490] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 98.382941][ T968] tipc: Node number set to 10005162 [ 98.628286][ T6531] netlink: 'syz.1.191': attribute type 4 has an invalid length. [ 98.678723][ T6533] bond1: entered promiscuous mode [ 98.693083][ T6533] bond1: entered allmulticast mode [ 98.702619][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.332659][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.339019][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.325749][ T6537] veth0_to_team: entered promiscuous mode [ 101.332123][ T6537] veth0_to_team: entered allmulticast mode [ 101.582863][ T6553] __nla_validate_parse: 2 callbacks suppressed [ 101.582886][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.035009][ T6578] netlink: 100 bytes leftover after parsing attributes in process `syz.2.202'. [ 102.058895][ T6579] netlink: 'syz.4.203': attribute type 5 has an invalid length. [ 102.191862][ T6581] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.425762][ T6590] tipc: Started in network mode [ 102.430699][ T6590] tipc: Node identity type_len, cluster identity 4711 [ 102.456919][ T6590] tipc: Enabling of bearer rejected, failed to enable media [ 102.584094][ T6590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.209'. [ 102.603497][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 103.140764][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 103.221665][ T6636] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 103.247647][ T6636] netlink: 512 bytes leftover after parsing attributes in process `syz.0.223'. [ 103.743220][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 103.770400][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 103.961980][ T6677] netlink: 'syz.0.234': attribute type 72 has an invalid length. [ 103.989679][ T6677] netlink: 'syz.0.234': attribute type 8 has an invalid length. [ 104.315676][ T6695] netlink: 100 bytes leftover after parsing attributes in process `syz.1.242'. [ 104.447559][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'. [ 104.700757][ T6716] lo speed is unknown, defaulting to 1000 [ 104.734106][ T6716] lo speed is unknown, defaulting to 1000 [ 104.750664][ T6718] netlink: 'syz.3.251': attribute type 72 has an invalid length. [ 104.759844][ T6716] lo speed is unknown, defaulting to 1000 [ 104.792684][ T6722] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 104.795916][ T6718] netlink: 'syz.3.251': attribute type 8 has an invalid length. [ 104.817276][ T6716] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.882177][ T6722] infiniband syz0: set down [ 104.897928][ T6716] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.049730][ T6735] xt_TCPMSS: Only works on TCP SYN packets [ 105.080761][ T5893] lo speed is unknown, defaulting to 1000 [ 105.087854][ T6716] lo speed is unknown, defaulting to 1000 [ 105.096753][ T968] lo speed is unknown, defaulting to 1000 [ 105.107724][ T6716] lo speed is unknown, defaulting to 1000 [ 105.113948][ T968] lo speed is unknown, defaulting to 1000 [ 105.122465][ T6716] lo speed is unknown, defaulting to 1000 [ 105.138720][ T6716] lo speed is unknown, defaulting to 1000 [ 105.157309][ T6716] lo speed is unknown, defaulting to 1000 [ 105.403413][ T6748] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.483715][ T6750] trusted_key: syz.2.259 sent an empty control message without MSG_MORE. [ 105.720572][ T6764] netlink: 'syz.0.263': attribute type 72 has an invalid length. [ 105.750683][ T6764] netlink: 'syz.0.263': attribute type 8 has an invalid length. [ 105.974940][ T6780] openvswitch: netlink: Unknown key attributes 2 [ 106.370361][ T6797] caif0: entered promiscuous mode [ 106.592346][ T6806] __nla_validate_parse: 6 callbacks suppressed [ 106.592369][ T6806] netlink: 892 bytes leftover after parsing attributes in process `syz.3.279'. [ 106.621299][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 106.738990][ T6813] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.950716][ T6820] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 106.976805][ T6820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.009815][ T6820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.017842][ T6820] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 107.030025][ T6820] bond2: (slave vti0): Error -95 calling set_mac_address [ 107.101149][ T6825] netlink: 'syz.1.287': attribute type 11 has an invalid length. [ 107.110448][ T6825] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.287'. [ 107.122195][ T6825] openvswitch: netlink: Message has 8 unknown bytes. [ 107.152092][ T6825] netlink: 136 bytes leftover after parsing attributes in process `syz.1.287'. [ 107.506437][ T6839] netlink: 892 bytes leftover after parsing attributes in process `syz.0.293'. [ 108.149996][ T6873] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:0 [ 108.198182][ T2145] IPVS: starting estimator thread 0... [ 108.235727][ T6876] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.293736][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.308'. [ 108.311807][ T6874] IPVS: using max 19 ests per chain, 45600 per kthread [ 108.387588][ T6882] syzkaller1: entered promiscuous mode [ 108.397241][ T6882] syzkaller1: entered allmulticast mode [ 108.445585][ T6885] netlink: 892 bytes leftover after parsing attributes in process `syz.2.310'. [ 108.821234][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 109.002698][ T6908] netlink: 84 bytes leftover after parsing attributes in process `syz.1.319'. [ 109.014846][ T6906] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 109.019029][ T6908] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 109.085309][ T6908] xt_bpf: check failed: parse error [ 109.778639][ T6931] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 109.885829][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.923884][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.933785][ T6940] pim6reg1: entered promiscuous mode [ 109.939164][ T6940] pim6reg1: entered allmulticast mode [ 110.009627][ T6946] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 110.704116][ T6985] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.339'. [ 110.763597][ T6985] openvswitch: netlink: Key type 4112 is out of range max 32 [ 110.986184][ T6996] ebtables: ebtables: counters copy to user failed while replacing table [ 111.095400][ T7009] netlink: 'syz.2.351': attribute type 5 has an invalid length. [ 111.320968][ T7018] openvswitch: netlink: Actions may not be safe on all matching packets [ 111.627013][ T7029] __nla_validate_parse: 3 callbacks suppressed [ 111.627035][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.4.358'. [ 111.793875][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.361'. [ 112.002972][ T7046] bond2: entered promiscuous mode [ 112.112829][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 112.157916][ T7059] bond0: entered promiscuous mode [ 112.171244][ T7059] bond_slave_0: entered promiscuous mode [ 112.185154][ T7059] bond_slave_1: entered promiscuous mode [ 112.228145][ T7051] syzkaller1: entered promiscuous mode [ 112.247495][ T7051] syzkaller1: entered allmulticast mode [ 112.259742][ T7063] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 112.450469][ T7072] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 112.677344][ T7079] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 113.092810][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 113.127074][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 113.157193][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 113.171243][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 113.510877][ T7124] raw_sendmsg: syz.1.384 forgot to set AF_INET. Fix it! [ 113.600312][ T7127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.385'. [ 113.617191][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 113.626777][ T7127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.385'. [ 114.163889][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.192840][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.247366][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.310158][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.368674][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.390303][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.485558][ T7174] xt_socket: unknown flags 0x3c [ 114.569782][ T7175] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 114.594877][ T7175] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 114.659313][ T7179] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 114.688288][ T7180] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 114.718565][ T7182] netlink: 'syz.3.403': attribute type 10 has an invalid length. [ 114.773611][ T7182] team0: Device ipvlan1 failed to register rx_handler [ 115.052838][ T7199] netlink: 'syz.3.409': attribute type 22 has an invalid length. [ 115.488183][ T7223] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 115.802170][ C0] net_ratelimit: 88 callbacks suppressed [ 115.802191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.816701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.891545][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 116.235022][ T7263] openvswitch: netlink: nsh attr 3388 is out of range max 3 [ 116.277157][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.312058][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.343376][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.369142][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.412780][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.466627][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.721713][ T7280] __nla_validate_parse: 3 callbacks suppressed [ 116.721735][ T7280] netlink: 76 bytes leftover after parsing attributes in process `syz.3.428'. [ 116.776271][ T7283] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.430'. [ 116.799863][ T7280] : entered promiscuous mode [ 117.354689][ T7315] netem: change failed [ 117.422918][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.635043][ T7326] veth0_vlan: left promiscuous mode [ 117.645850][ T7326] veth0_vlan: entered promiscuous mode [ 118.092173][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 118.107289][ T7345] netlink: 256 bytes leftover after parsing attributes in process `syz.1.448'. [ 118.147990][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 118.765038][ T7382] netlink: 176 bytes leftover after parsing attributes in process `syz.2.461'. [ 118.846148][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.071184][ T7400] netlink: 'syz.2.465': attribute type 32 has an invalid length. [ 119.210875][ T7410] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 119.255232][ T7410] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.468'. [ 119.338311][ T7410] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.468'. [ 119.390316][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 119.786477][ T7432] ip6t_REJECT: ECHOREPLY is not supported [ 119.882354][ T7437] netlink: 'syz.0.480': attribute type 30 has an invalid length. [ 119.890473][ T7437] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 119.907500][ T7437] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 119.917961][ T7439] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 119.947944][ T7439] netlink: 17 bytes leftover after parsing attributes in process `syz.2.479'. [ 120.064794][ T7444] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 120.097962][ T7442] netlink: 'syz.1.481': attribute type 24 has an invalid length. [ 120.524459][ T7468] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.853575][ T7486] IPv6: sit1: Disabled Multicast RS [ 121.090549][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.288449][ T7508] xt_hashlimit: max too large, truncated to 1048576 [ 121.516206][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.572675][ T5843] net_ratelimit: 12 callbacks suppressed [ 121.572695][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.603752][ T7528] xt_hashlimit: max too large, truncated to 1048576 [ 121.652208][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.733667][ T7520] bridge_slave_0 (unregistering): left allmulticast mode [ 121.740925][ T7520] bridge_slave_0 (unregistering): left promiscuous mode [ 121.752017][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.774703][ T7532] sctp: [Deprecated]: syz.3.505 (pid 7532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.774703][ T7532] Use struct sctp_sack_info instead [ 122.081763][ T7546] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 122.168041][ T7554] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 122.220509][ T7557] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 122.223247][ T7554] __nla_validate_parse: 4 callbacks suppressed [ 122.223267][ T7554] netlink: 244 bytes leftover after parsing attributes in process `syz.3.516'. [ 122.451976][ T7562] sctp: [Deprecated]: syz.1.515 (pid 7562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.451976][ T7562] Use struct sctp_sack_info instead [ 122.509255][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.520'. [ 122.519389][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.561641][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.655091][ T7570] netlink: 'syz.3.521': attribute type 26 has an invalid length. [ 122.695486][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.307238][ T7587] IPVS: set_ctl: invalid protocol: 48 224.0.0.1:20001 [ 123.509005][ T7593] netlink: 48 bytes leftover after parsing attributes in process `syz.4.528'. [ 123.733733][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.875756][ T7606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.989564][ T7611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.002940][ T7611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.101721][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 124.203632][ T7623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.323487][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.543'. [ 124.411103][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 124.499215][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 125.482916][ T7653] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 125.761331][ T7675] syzkaller0: entered promiscuous mode [ 125.770851][ T7681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.561'. [ 125.780066][ T7675] syzkaller0: entered allmulticast mode [ 125.795649][ T7677] netlink: 44 bytes leftover after parsing attributes in process `syz.2.560'. [ 125.816871][ T7682] netlink: 56 bytes leftover after parsing attributes in process `syz.1.561'. [ 126.057736][ T7686] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 126.774908][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.854365][ T968] net_ratelimit: 4 callbacks suppressed [ 126.854383][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.627912][ T7700] __nla_validate_parse: 1 callbacks suppressed [ 127.627934][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.566'. [ 127.677849][ T7700] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 127.731606][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.904536][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.935963][ T7706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.044252][ T7715] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 128.071522][ T7715] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 128.133726][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.197463][ T7720] batadv_slave_1: entered promiscuous mode [ 128.204937][ T7720] batadv_slave_1: entered allmulticast mode [ 128.425454][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 128.769163][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.901917][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.934731][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.073088][ T7729] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 129.272773][ T7760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.584'. [ 129.312024][ T7760] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 129.331697][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 129.408281][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.415898][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.622425][ T7782] netlink: zone id is out of range [ 129.627852][ T7782] netlink: zone id is out of range [ 129.633366][ T7782] netlink: zone id is out of range [ 129.648662][ T7782] netlink: zone id is out of range [ 129.657179][ T7782] netlink: zone id is out of range [ 129.694003][ T7771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.734347][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 129.806567][ T7788] pim6reg1: entered promiscuous mode [ 129.816689][ T7788] pim6reg1: entered allmulticast mode [ 129.914127][ T7791] x_tables: duplicate underflow at hook 1 [ 130.116338][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'. [ 130.170306][ T7800] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.595'. [ 130.220838][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 130.372551][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.455349][ T7825] No such timeout policy "syz0" [ 130.469228][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.601'. [ 130.488169][ T7823] netlink: 80 bytes leftover after parsing attributes in process `syz.2.600'. [ 130.745946][ T7840] netlink: 'syz.2.606': attribute type 2 has an invalid length. [ 130.796126][ T7842] netlink: 'syz.2.606': attribute type 2 has an invalid length. [ 130.913074][ T7830] tun0: tun_chr_ioctl cmd 1074025681 [ 131.856502][ T7872] netlink: 'syz.2.614': attribute type 33 has an invalid length. [ 131.957817][ T7863] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 132.060090][ T968] net_ratelimit: 18 callbacks suppressed [ 132.060110][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.411742][ T7908] veth0_to_bond: mtu less than device minimum [ 132.431302][ T7907] bridge_slave_0: left allmulticast mode [ 132.437255][ T7907] bridge_slave_0: left promiscuous mode [ 132.446638][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.537796][ T7907] bridge_slave_1: left allmulticast mode [ 132.565933][ T7907] bridge_slave_1: left promiscuous mode [ 132.595889][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.637155][ T7907] bond0: (slave bond_slave_0): Releasing backup interface [ 132.786130][ T7907] bond0: (slave bond_slave_1): Releasing backup interface [ 132.800165][ T7930] __nla_validate_parse: 9 callbacks suppressed [ 132.800186][ T7930] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.629'. [ 132.816961][ T7930] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.838806][ T7907] team0: Port device team_slave_0 removed [ 132.874182][ T7907] team0: Port device team_slave_1 removed [ 132.880807][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.909329][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.923813][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.947910][ T7910] wg2: entered promiscuous mode [ 132.965702][ T7910] team0: Port device wg2 added [ 133.095128][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.096112][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.106145][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.300443][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 133.355296][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 133.365866][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 133.375177][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 133.385794][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 133.499026][ T5903] IPVS: starting estimator thread 0... [ 133.600692][ T7956] IPVS: using max 19 ests per chain, 45600 per kthread [ 133.821917][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.065819][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 134.137856][ T7984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.148885][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.189732][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 134.201905][ T7988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.210787][ T7988] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 134.228337][ T7988] bond1: (slave vcan1): Error -95 calling set_mac_address [ 134.311778][ T7993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.648'. [ 134.482287][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 134.611272][ T8016] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 135.057709][ T8039] netlink: 'syz.0.663': attribute type 2 has an invalid length. [ 135.132959][ T8042] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 135.143732][ T8040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.173299][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.510499][ T8052] unsupported nla_type 21166 [ 135.770486][ T8057] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.811890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.212177][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.243429][ T8083] tipc: Started in network mode [ 136.261611][ T8083] tipc: Node identity ffffffff, cluster identity 4711 [ 136.281552][ T8083] tipc: Node number set to 4294967295 [ 136.354685][ T8090] netlink: 'syz.1.681': attribute type 13 has an invalid length. [ 136.392066][ T8090] netlink: 'syz.1.681': attribute type 58 has an invalid length. [ 136.451928][ T8089] netlink: 'syz.1.681': attribute type 13 has an invalid length. [ 136.485399][ T8089] netlink: 'syz.1.681': attribute type 58 has an invalid length. [ 136.642645][ T8100] tipc: New replicast peer: 255.255.255.255 [ 136.649389][ T8100] tipc: Enabled bearer , priority 10 [ 136.692895][ T8104] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 136.894628][ T8113] syz.0.689 (8113) used obsolete PPPIOCDETACH ioctl [ 137.253122][ T5843] net_ratelimit: 3 callbacks suppressed [ 137.253144][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.392689][ T8145] IPv6: addrconf: prefix option has invalid lifetime [ 138.073777][ T8188] __nla_validate_parse: 17 callbacks suppressed [ 138.073802][ T8188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.707'. [ 138.223413][ T8193] netlink: 148 bytes leftover after parsing attributes in process `syz.3.708'. [ 138.282199][ T8195] xt_recent: Unsupported userspace flags (00000042) [ 138.292588][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.304363][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 138.613324][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.716'. [ 138.947678][ T8238] netlink: 'syz.2.722': attribute type 3 has an invalid length. [ 138.981312][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 139.064620][ T8240] netlink: 216 bytes leftover after parsing attributes in process `syz.1.723'. [ 139.094531][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 139.110667][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 139.264833][ T8256] netlink: 'syz.2.726': attribute type 64 has an invalid length. [ 139.310862][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 139.332206][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.408718][ T8264] ipt_REJECT: TCP_RESET invalid for non-tcp [ 139.568425][ T8275] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 139.922001][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.956481][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.010123][ T8291] bond0: (slave bond1): Enslaving as an active interface with an up link [ 140.049545][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 140.372190][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.095195][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.122839][ T8338] validate_nla: 2 callbacks suppressed [ 141.122862][ T8338] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 141.162985][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.201732][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.486748][ T8346] No such timeout policy "syz0" [ 141.833153][ T8355] bridge_slave_0 (unregistering): left allmulticast mode [ 141.840383][ T8355] bridge_slave_0 (unregistering): left promiscuous mode [ 141.852645][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.326350][ T8372] team0 (unregistering): Port device team_slave_0 removed [ 142.339017][ T8372] team0 (unregistering): Port device team_slave_1 removed [ 142.462110][ T968] net_ratelimit: 2 callbacks suppressed [ 142.462131][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.584320][ T8406] dvmrp0: entered allmulticast mode [ 142.694530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.703698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.346851][ T8438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.502390][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.610393][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.631184][ T8444] __nla_validate_parse: 9 callbacks suppressed [ 143.631241][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 143.637146][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'. [ 143.674066][ T8448] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 143.683425][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.779407][ T8444] bridge_slave_0 (unregistering): left allmulticast mode [ 143.788106][ T8444] bridge_slave_0 (unregistering): left promiscuous mode [ 143.803541][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.864205][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 143.903364][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 143.924780][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 143.945709][ T8458] netlink: 'syz.1.782': attribute type 13 has an invalid length. [ 143.970260][ T8458] netlink: 152 bytes leftover after parsing attributes in process `syz.1.782'. [ 143.994103][ T8458] syz_tun: refused to change device tx_queue_len [ 144.017718][ T8458] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.147043][ T8468] netlink: 104 bytes leftover after parsing attributes in process `syz.2.786'. [ 144.189699][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'. [ 144.403259][ T8482] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 144.452144][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.532027][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.706954][ T8493] pimreg: entered allmulticast mode [ 144.805283][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 144.841988][ T8503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.866672][ T8503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.192492][ T8521] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 145.243674][ T8523] netlink: zone id is out of range [ 145.269465][ T8523] netlink: zone id is out of range [ 145.366031][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.801'. [ 146.338630][ T8585] Cannot find set identified by id 752 to match [ 146.653040][ T8599] nbd: must specify at least one socket [ 147.007468][ T8603] gretap1: entered allmulticast mode [ 147.084734][ T8612] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 147.113069][ T8581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 147.159371][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.197867][ T8612] team0: entered promiscuous mode [ 147.230766][ T8612] team_slave_0: entered promiscuous mode [ 147.272210][ T8612] team_slave_1: entered promiscuous mode [ 147.278738][ T8612] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.344323][ T8611] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f47f:95ff:fe53:46f0 error=-28 [ 147.491485][ C1] net_ratelimit: 15 callbacks suppressed [ 147.491506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.505773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.630267][ T8635] netlink: 'syz.3.829': attribute type 14 has an invalid length. [ 147.651846][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.786902][ T8611] infiniband syz1: set active [ 147.792600][ T8611] infiniband syz1: added team_slave_0 [ 147.842719][ T8611] RDS/IB: syz1: added [ 147.848479][ T8611] smc: adding ib device syz1 with port count 1 [ 147.876255][ T8611] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 148.101025][ T5895] IPVS: starting estimator thread 0... [ 148.134452][ T8648] tipc: Started in network mode [ 148.161858][ T8648] tipc: Node identity ac1414aa, cluster identity 4711 [ 148.169332][ T8648] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.200586][ T8648] tipc: Enabled bearer , priority 10 [ 148.201647][ T8649] IPVS: using max 17 ests per chain, 40800 per kthread [ 148.224583][ T8651] netlink: 'syz.2.834': attribute type 7 has an invalid length. [ 148.312250][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.368943][ T8658] Driver unsupported XDP return value 0 on prog (id 200) dev N/A, expect packet loss! [ 148.462421][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.601452][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.741565][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.881467][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.914284][ T8675] __nla_validate_parse: 73 callbacks suppressed [ 148.914306][ T8675] netlink: 256 bytes leftover after parsing attributes in process `syz.1.841'. [ 149.021474][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.186513][ T8] tipc: Node number set to 2886997162 [ 149.745521][ T8702] xt_policy: too many policy elements [ 150.170950][ T8721] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 150.237300][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 150.260063][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 150.260274][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 150.655211][ T8747] netlink: 'syz.4.861': attribute type 9 has an invalid length. [ 150.858811][ T8758] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 151.018582][ T8765] netlink: 216 bytes leftover after parsing attributes in process `syz.0.866'. [ 151.051902][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 151.063031][ T8767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.867'. [ 151.229181][ T8775] netlink: 'syz.0.869': attribute type 32 has an invalid length. [ 151.466403][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 151.832075][ T8805] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 151.914097][ T8805] netlink: 56 bytes leftover after parsing attributes in process `syz.4.877'. [ 152.233921][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.884'. [ 152.536924][ T8839] netlink: 'syz.0.889': attribute type 9 has an invalid length. [ 153.251529][ C0] net_ratelimit: 6 callbacks suppressed [ 153.251549][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.330829][ T8871] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 153.352249][ T8872] tipc: Enabling of bearer rejected, already enabled [ 154.267902][ T8922] __nla_validate_parse: 3 callbacks suppressed [ 154.267922][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'. [ 154.301448][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.323035][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 154.484988][ T8934] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 154.533327][ T8934] netlink: 'syz.3.917': attribute type 2 has an invalid length. [ 154.698749][ T8943] netlink: 892 bytes leftover after parsing attributes in process `syz.4.918'. [ 154.908638][ T8955] netlink: 'syz.3.921': attribute type 24 has an invalid length. [ 154.981894][ T5846] Bluetooth: hci4: link tx timeout [ 154.988091][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.053849][ T8960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.291119][ T5853] Bluetooth: hci4: link tx timeout [ 155.297188][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.314897][ T5853] Bluetooth: hci4: link tx timeout [ 155.320305][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.341449][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.639595][ T8988] veth5: entered allmulticast mode [ 155.869166][ T5853] Bluetooth: hci4: link tx timeout [ 155.876760][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.036970][ T5853] Bluetooth: hci4: link tx timeout [ 156.051738][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.179422][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 156.371532][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.437280][ T9031] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 156.461667][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 156.487322][ T9031] netlink: 8596 bytes leftover after parsing attributes in process `syz.4.933'. [ 156.522446][ T9031] netlink: 'syz.4.933': attribute type 2 has an invalid length. [ 156.592485][ T9031] netlink: 185 bytes leftover after parsing attributes in process `syz.4.933'. [ 156.655938][ T5853] Bluetooth: hci4: link tx timeout [ 156.661137][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.837401][ T9057] xt_l2tp: v2 doesn't support IP mode [ 156.877852][ T9052] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.946'. [ 156.902792][ T9052] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 157.014451][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 157.099784][ T5853] Bluetooth: hci4: link tx timeout [ 157.114977][ T5853] Bluetooth: hci4: link tx timeout [ 157.207226][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 157.259906][ T9080] @: renamed from veth0_vlan (while UP) [ 157.288025][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 157.325478][ T9080] netlink: 'syz.3.949': attribute type 2 has an invalid length. [ 157.411546][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.554253][ T9091] sctp: [Deprecated]: syz.3.954 (pid 9091) Use of int in max_burst socket option. [ 157.554253][ T9091] Use struct sctp_assoc_value instead [ 157.594478][ T9092] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 157.871823][ T9099] vlan2: entered allmulticast mode [ 157.879089][ T9099] bond0: entered allmulticast mode [ 157.893979][ T9099] bond0: left allmulticast mode [ 158.016201][ T9099] vlan2: entered allmulticast mode [ 158.036919][ T9099] bond0: entered allmulticast mode [ 158.051064][ T9099] bond0: left allmulticast mode [ 158.152257][ T9099] vlan2: entered allmulticast mode [ 158.170587][ T9099] bond0: entered allmulticast mode [ 158.200252][ T9099] bond0: left allmulticast mode [ 158.260312][ T8] IPVS: starting estimator thread 0... [ 158.294986][ T9119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.331811][ T9099] vlan2: entered allmulticast mode [ 158.338906][ T9099] bond0: entered allmulticast mode [ 158.367729][ T9099] bond0: left allmulticast mode [ 158.374267][ T9120] IPVS: using max 16 ests per chain, 38400 per kthread [ 158.451498][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.501884][ T9099] vlan2: entered allmulticast mode [ 158.508201][ T9099] bond0: entered allmulticast mode [ 158.564472][ T9099] bond0: left allmulticast mode [ 158.615085][ T9128] netlink: 'syz.1.966': attribute type 21 has an invalid length. [ 158.626516][ T9128] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 158.681714][ T9099] vlan2: entered allmulticast mode [ 158.702523][ T9099] bond0: entered allmulticast mode [ 158.761044][ T9099] bond0: left allmulticast mode [ 159.483030][ T9136] x_tables: duplicate underflow at hook 2 [ 159.491536][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.510988][ T9166] __nla_validate_parse: 5 callbacks suppressed [ 159.511009][ T9166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.978'. [ 159.529642][ T9166] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 159.772695][ T9175] IPv6: sit1: Disabled Multicast RS [ 159.959845][ T9179] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.984'. [ 159.995277][ T9179] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 160.521741][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 160.531458][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.539570][ T9208] ip6t_srh: unknown srh invflags A757 [ 160.593756][ T9212] ip6t_srh: unknown srh invflags A757 [ 160.911892][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 160.956878][ T9229] lo speed is unknown, defaulting to 1000 [ 161.355474][ T9229] lo speed is unknown, defaulting to 1000 [ 161.515979][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 161.538853][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.581457][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.695499][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 162.008919][ T9259] netlink: 'syz.3.1008': attribute type 2 has an invalid length. [ 162.034773][ T9259] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1008'. [ 162.259306][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1012'. [ 162.364530][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 162.611440][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.632873][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 163.444152][ T9308] wg2: entered promiscuous mode [ 163.651557][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.764144][ T9325] macvlan0: entered promiscuous mode [ 163.782018][ T9325] macvlan0: entered allmulticast mode [ 163.956553][ T9328] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 163.963577][ T9330] xt_TCPMSS: Only works on TCP SYN packets [ 164.451547][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 164.543431][ T9362] xt_CT: No such helper "syz1" [ 164.691456][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.727296][ T9379] lo speed is unknown, defaulting to 1000 [ 165.283475][ T9402] __nla_validate_parse: 3 callbacks suppressed [ 165.283578][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 165.332535][ T9403] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 165.346703][ T9379] lo speed is unknown, defaulting to 1000 [ 165.355782][ T9403] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1045'. [ 165.399553][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 165.613182][ T9414] xt_bpf: check failed: parse error [ 165.733170][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.099114][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 166.781436][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.647663][ T9470] tipc: Started in network mode [ 167.666430][ T9468] vxcan1: tx address claim with dlc 90 [ 167.678540][ T9470] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.717309][ T9470] tipc: Enabled bearer , priority 10 [ 167.811451][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.208752][ T9504] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.336075][ T9508] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 168.656123][ T9516] netlink: 'syz.4.1074': attribute type 3 has an invalid length. [ 168.701935][ T9516] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1074'. [ 168.760006][ T9523] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 168.851538][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.969362][ T9523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.008505][ T9526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1076'. [ 169.115196][ T9513] bond1: (slave ip6gretap3): making interface the new active one [ 169.168374][ T9513] bond1: (slave ip6gretap3): Enslaving as an active interface with an up link [ 169.282964][ T9516] bond1: entered allmulticast mode [ 169.313219][ T9516] ip6gretap3: entered allmulticast mode [ 169.395374][ T9537] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 169.756316][ T9546] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 169.824400][ T9546] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.891453][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.992191][ T5895] tipc: Node number set to 2886997162 [ 170.931441][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.794885][ T9364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.971674][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.025841][ T9364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.077875][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 172.202322][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.213604][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.361316][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.377934][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.405851][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.413465][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.468641][ T9364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.510791][ T9607] lo speed is unknown, defaulting to 1000 [ 172.725824][ T9364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.800631][ T9607] lo speed is unknown, defaulting to 1000 [ 173.021546][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.108613][ T9364] bridge_slave_1: left allmulticast mode [ 173.114993][ T9364] bridge_slave_1: left promiscuous mode [ 173.122814][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.697282][ T9364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.714194][ T9364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.725487][ T9364] bond0 (unregistering): Released all slaves [ 173.847287][ T9364] bond1 (unregistering): Released all slaves [ 173.861267][ T9364] bond2 (unregistering): Released all slaves [ 173.873995][ T9364] bond3 (unregistering): Released all slaves [ 174.051609][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.126268][ T9364] tipc: Disabling bearer [ 174.139322][ T9364] tipc: Left network mode [ 174.342147][ T9657] netlink: 'syz.0.1115': attribute type 4 has an invalid length. [ 174.451923][ T5853] Bluetooth: hci3: command tx timeout [ 175.091471][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.404310][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 175.524569][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.534636][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.554303][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.562647][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.570357][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.580032][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.809250][ T9723] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 175.854186][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.861845][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.912805][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.920021][ T9723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.927562][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.934821][ T9723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.963458][ T9723] bridge0: entered promiscuous mode [ 175.975274][ T9723] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.244371][ T9364] hsr_slave_0: left promiscuous mode [ 176.263500][ T9364] hsr_slave_1: left promiscuous mode [ 176.297838][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.321515][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.411055][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.425659][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.460090][ T9364] veth1_macvtap: left promiscuous mode [ 176.491774][ T9364] veth0_macvtap: left promiscuous mode [ 176.497475][ T9364] veth1_vlan: left promiscuous mode [ 176.557930][ T5853] Bluetooth: hci3: command tx timeout [ 176.572141][ T9364] veth0_vlan: left promiscuous mode [ 176.692402][ T9757] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1133'. [ 176.857895][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.867532][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.876281][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.889277][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.895684][ T9364] pimreg (unregistering): left allmulticast mode [ 176.897861][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.910440][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.280565][ T9364] team0 (unregistering): Port device team_slave_1 removed [ 177.321248][ T9364] team0 (unregistering): Port device team_slave_0 removed [ 177.651638][ T5846] Bluetooth: hci2: command tx timeout [ 177.708461][ T9740] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 177.782574][ T9710] lo speed is unknown, defaulting to 1000 [ 177.791913][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.831646][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.851631][ T9607] bridge_slave_0: entered allmulticast mode [ 177.858763][ T9607] bridge_slave_0: entered promiscuous mode [ 177.884114][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.894389][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.901766][ T9607] bridge_slave_1: entered allmulticast mode [ 177.909561][ T9607] bridge_slave_1: entered promiscuous mode [ 178.094172][ T9710] lo speed is unknown, defaulting to 1000 [ 178.097469][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.141592][ T29] audit: type=1107 audit(1732215752.416:2): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ϋv_ҍC0^+NC,' [ 178.160821][ T9760] lo speed is unknown, defaulting to 1000 [ 178.177287][ T9776] tipc: Enabling of bearer rejected, failed to enable media [ 178.198033][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.337501][ T9607] team0: Port device team_slave_0 added [ 178.363736][ T9607] team0: Port device team_slave_1 added [ 178.441205][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.466783][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.546764][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.560574][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.569415][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.597442][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.612101][ T5846] Bluetooth: hci3: command tx timeout [ 178.623610][ T9364] IPVS: stop unused estimator thread 0... [ 178.634291][ T9760] lo speed is unknown, defaulting to 1000 [ 178.640528][ T9784] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 178.931806][ T5846] Bluetooth: hci0: command tx timeout [ 179.014081][ T9607] hsr_slave_0: entered promiscuous mode [ 179.041569][ T9607] hsr_slave_1: entered promiscuous mode [ 179.088211][ T9804] : renamed from vlan0 (while UP) [ 179.541743][ T9710] chnl_net:caif_netlink_parms(): no params data found [ 179.758795][ T5846] Bluetooth: hci2: command tx timeout [ 180.100306][ T9843] siw: device registration error -23 [ 180.424197][ T8880] ================================================================== [ 180.432325][ T8880] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 180.440545][ T8880] Read of size 8 at addr ffff888061ae5308 by task kbnepd bnep0/8880 [ 180.448546][ T8880] [ 180.450895][ T8880] CPU: 1 UID: 0 PID: 8880 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 180.461766][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.471873][ T8880] Call Trace: [ 180.475178][ T8880] [ 180.478124][ T8880] dump_stack_lvl+0x241/0x360 [ 180.482834][ T8880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.488066][ T8880] ? __pfx__printk+0x10/0x10 [ 180.492680][ T8880] ? _printk+0xd5/0x120 [ 180.496870][ T8880] ? __virt_addr_valid+0x183/0x530 [ 180.502021][ T8880] ? __virt_addr_valid+0x183/0x530 [ 180.507163][ T8880] print_report+0x169/0x550 [ 180.511693][ T8880] ? __virt_addr_valid+0x183/0x530 [ 180.516836][ T8880] ? __virt_addr_valid+0x183/0x530 [ 180.521962][ T8880] ? __virt_addr_valid+0x45f/0x530 [ 180.527092][ T8880] ? __phys_addr+0xba/0x170 [ 180.531616][ T8880] ? device_for_each_child+0xbb/0x1b0 [ 180.537024][ T8880] kasan_report+0x143/0x180 [ 180.541546][ T8880] ? device_for_each_child+0xbb/0x1b0 [ 180.546945][ T8880] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 180.552419][ T8880] device_for_each_child+0xbb/0x1b0 [ 180.557651][ T8880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.564003][ T8880] ? __pfx_device_for_each_child+0x10/0x10 [ 180.569820][ T8880] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.575028][ T8880] ? lockdep_hardirqs_on+0x99/0x150 [ 180.580245][ T8880] pm_runtime_set_memalloc_noio+0x114/0x260 [ 180.586155][ T8880] netdev_unregister_kobject+0x178/0x250 [ 180.591807][ T8880] unregister_netdevice_many_notify+0x1851/0x1da0 [ 180.598257][ T8880] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 180.605133][ T8880] ? do_raw_spin_unlock+0x13c/0x8b0 [ 180.610433][ T8880] ? __mutex_lock+0x52a/0xd70 [ 180.615131][ T8880] unregister_netdevice_queue+0x303/0x370 [ 180.620884][ T8880] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 180.627134][ T8880] ? down_write+0x18c/0x220 [ 180.631657][ T8880] ? __pfx_down_write+0x10/0x10 [ 180.636552][ T8880] unregister_netdev+0x1c/0x30 [ 180.641379][ T8880] bnep_session+0x2e0e/0x3000 [ 180.646116][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 180.651240][ T8880] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 180.657577][ T8880] ? __pfx_woken_wake_function+0x10/0x10 [ 180.663236][ T8880] ? __kthread_parkme+0x169/0x1d0 [ 180.668274][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 180.673317][ T8880] kthread+0x2f0/0x390 [ 180.677421][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 180.682490][ T8880] ? __pfx_kthread+0x10/0x10 [ 180.687104][ T8880] ret_from_fork+0x4b/0x80 [ 180.691541][ T8880] ? __pfx_kthread+0x10/0x10 [ 180.696161][ T8880] ret_from_fork_asm+0x1a/0x30 [ 180.700967][ T8880] [ 180.703999][ T8880] [ 180.706320][ T8880] Allocated by task 5855: [ 180.710643][ T8880] kasan_save_track+0x3f/0x80 [ 180.715334][ T8880] __kasan_kmalloc+0x98/0xb0 [ 180.719945][ T8880] __kmalloc_noprof+0x1fc/0x400 [ 180.724808][ T8880] hci_alloc_dev_priv+0x27/0x2030 [ 180.729858][ T8880] vhci_create_device+0x116/0x6a0 [ 180.734897][ T8880] vhci_write+0x3cf/0x490 [ 180.739277][ T8880] vfs_write+0xaeb/0xd30 [ 180.743534][ T8880] ksys_write+0x183/0x2b0 [ 180.747886][ T8880] do_syscall_64+0xf3/0x230 [ 180.752403][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.758318][ T8880] [ 180.760654][ T8880] Freed by task 5855: [ 180.764721][ T8880] kasan_save_track+0x3f/0x80 [ 180.769424][ T8880] kasan_save_free_info+0x40/0x50 [ 180.774467][ T8880] __kasan_slab_free+0x59/0x70 [ 180.779262][ T8880] kfree+0x1a0/0x440 [ 180.783229][ T8880] hci_release_dev+0x1525/0x16b0 [ 180.788194][ T8880] bt_host_release+0x83/0x90 [ 180.792799][ T8880] device_release+0x99/0x1c0 [ 180.797442][ T8880] kobject_put+0x22f/0x480 [ 180.801872][ T8880] vhci_release+0x88/0xd0 [ 180.806215][ T8880] __fput+0x23f/0x880 [ 180.810229][ T8880] task_work_run+0x24f/0x310 [ 180.814827][ T8880] do_exit+0xa2f/0x28e0 [ 180.819088][ T8880] do_group_exit+0x207/0x2c0 [ 180.823680][ T8880] __x64_sys_exit_group+0x3f/0x40 [ 180.828714][ T8880] x64_sys_call+0x2634/0x2640 [ 180.833410][ T8880] do_syscall_64+0xf3/0x230 [ 180.837937][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.843840][ T8880] [ 180.846159][ T8880] Last potentially related work creation: [ 180.851876][ T8880] kasan_save_stack+0x3f/0x60 [ 180.856577][ T8880] __kasan_record_aux_stack+0xac/0xc0 [ 180.861987][ T8880] insert_work+0x3e/0x330 [ 180.866337][ T8880] __queue_work+0xc8b/0xf50 [ 180.870850][ T8880] queue_work_on+0x1c2/0x380 [ 180.875471][ T8880] l2cap_chan_send+0x3d6/0x2690 [ 180.880382][ T8880] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 180.885410][ T8880] __sock_sendmsg+0x221/0x270 [ 180.890085][ T8880] kernel_sendmsg+0x151/0x220 [ 180.894788][ T8880] bnep_session+0x287a/0x3000 [ 180.899500][ T8880] kthread+0x2f0/0x390 [ 180.903593][ T8880] ret_from_fork+0x4b/0x80 [ 180.908016][ T8880] ret_from_fork_asm+0x1a/0x30 [ 180.912794][ T8880] [ 180.915132][ T8880] Second to last potentially related work creation: [ 180.921737][ T8880] kasan_save_stack+0x3f/0x60 [ 180.926428][ T8880] __kasan_record_aux_stack+0xac/0xc0 [ 180.931816][ T8880] insert_work+0x3e/0x330 [ 180.936179][ T8880] __queue_work+0xc8b/0xf50 [ 180.940712][ T8880] queue_work_on+0x1c2/0x380 [ 180.945307][ T8880] l2cap_chan_send+0x3d6/0x2690 [ 180.950192][ T8880] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 180.955226][ T8880] __sock_sendmsg+0x221/0x270 [ 180.959916][ T8880] kernel_sendmsg+0x151/0x220 [ 180.964590][ T8880] bnep_session+0x287a/0x3000 [ 180.969264][ T8880] kthread+0x2f0/0x390 [ 180.973374][ T8880] ret_from_fork+0x4b/0x80 [ 180.977861][ T8880] ret_from_fork_asm+0x1a/0x30 [ 180.982661][ T8880] [ 180.985021][ T8880] The buggy address belongs to the object at ffff888061ae4000 [ 180.985021][ T8880] which belongs to the cache kmalloc-8k of size 8192 [ 180.999074][ T8880] The buggy address is located 4872 bytes inside of [ 180.999074][ T8880] freed 8192-byte region [ffff888061ae4000, ffff888061ae6000) [ 181.013141][ T8880] [ 181.015491][ T8880] The buggy address belongs to the physical page: [ 181.021927][ T8880] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61ae0 [ 181.030709][ T8880] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 181.039318][ T8880] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 181.046888][ T8880] page_type: f5(slab) [ 181.050866][ T8880] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 181.059451][ T8880] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 181.068140][ T8880] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 181.076815][ T8880] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 181.085493][ T8880] head: 00fff00000000003 ffffea000186b801 ffffffffffffffff 0000000000000000 [ 181.094178][ T8880] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 181.102869][ T8880] page dumped because: kasan: bad access detected [ 181.109314][ T8880] page_owner tracks the page as allocated [ 181.115029][ T8880] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 78033890179, free_ts 25749183438 [ 181.136430][ T8880] post_alloc_hook+0x1f3/0x230 [ 181.141202][ T8880] get_page_from_freelist+0x3649/0x3790 [ 181.146811][ T8880] __alloc_pages_noprof+0x292/0x710 [ 181.152023][ T8880] alloc_pages_mpol_noprof+0x3e8/0x680 [ 181.157499][ T8880] alloc_slab_page+0x6a/0x140 [ 181.162182][ T8880] allocate_slab+0x5a/0x2f0 [ 181.166701][ T8880] ___slab_alloc+0xcd1/0x14b0 [ 181.171390][ T8880] __slab_alloc+0x58/0xa0 [ 181.175749][ T8880] __kmalloc_noprof+0x25a/0x400 [ 181.180634][ T8880] hci_alloc_dev_priv+0x27/0x2030 [ 181.185702][ T8880] vhci_create_device+0x116/0x6a0 [ 181.190746][ T8880] vhci_write+0x3cf/0x490 [ 181.195073][ T8880] vfs_write+0xaeb/0xd30 [ 181.199314][ T8880] ksys_write+0x183/0x2b0 [ 181.203647][ T8880] do_syscall_64+0xf3/0x230 [ 181.208175][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.214089][ T8880] page last free pid 1 tgid 1 stack trace: [ 181.220317][ T8880] free_unref_page+0xdf9/0x1140 [ 181.225184][ T8880] free_contig_range+0x152/0x550 [ 181.230149][ T8880] destroy_args+0x92/0x910 [ 181.234562][ T8880] debug_vm_pgtable+0x4be/0x550 [ 181.239437][ T8880] do_one_initcall+0x248/0x880 [ 181.244209][ T8880] do_initcall_level+0x157/0x210 [ 181.249164][ T8880] do_initcalls+0x3f/0x80 [ 181.253494][ T8880] kernel_init_freeable+0x435/0x5d0 [ 181.258707][ T8880] kernel_init+0x1d/0x2b0 [ 181.263133][ T8880] ret_from_fork+0x4b/0x80 [ 181.267592][ T8880] ret_from_fork_asm+0x1a/0x30 [ 181.272460][ T8880] [ 181.274784][ T8880] Memory state around the buggy address: [ 181.280404][ T8880] ffff888061ae5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.288488][ T8880] ffff888061ae5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.296564][ T8880] >ffff888061ae5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.304629][ T8880] ^ [ 181.308971][ T8880] ffff888061ae5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.317029][ T8880] ffff888061ae5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.325098][ T8880] ================================================================== [ 181.334110][ T5846] Bluetooth: hci3: command tx timeout [ 181.339567][ T5846] Bluetooth: hci0: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 181.383102][ T8880] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.390373][ T8880] CPU: 0 UID: 0 PID: 8880 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 181.401259][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.411348][ T8880] Call Trace: [ 181.414648][ T8880] [ 181.417603][ T8880] dump_stack_lvl+0x241/0x360 [ 181.422320][ T8880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.427552][ T8880] ? __pfx__printk+0x10/0x10 [ 181.432279][ T8880] ? preempt_schedule+0xe1/0xf0 [ 181.437160][ T8880] ? vscnprintf+0x5d/0x90 [ 181.441524][ T8880] panic+0x349/0x880 [ 181.445452][ T8880] ? check_panic_on_warn+0x21/0xb0 [ 181.450599][ T8880] ? __pfx_panic+0x10/0x10 [ 181.455057][ T8880] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 181.461071][ T8880] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.467435][ T8880] ? print_report+0x502/0x550 [ 181.472146][ T8880] check_panic_on_warn+0x86/0xb0 [ 181.477110][ T8880] ? device_for_each_child+0xbb/0x1b0 [ 181.482512][ T8880] end_report+0x77/0x160 [ 181.486787][ T8880] kasan_report+0x154/0x180 [ 181.491323][ T8880] ? device_for_each_child+0xbb/0x1b0 [ 181.496732][ T8880] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 181.502221][ T8880] device_for_each_child+0xbb/0x1b0 [ 181.507449][ T8880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.513812][ T8880] ? __pfx_device_for_each_child+0x10/0x10 [ 181.519745][ T8880] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.524974][ T8880] ? lockdep_hardirqs_on+0x99/0x150 [ 181.530199][ T8880] pm_runtime_set_memalloc_noio+0x114/0x260 [ 181.536213][ T8880] netdev_unregister_kobject+0x178/0x250 [ 181.541884][ T8880] unregister_netdevice_many_notify+0x1851/0x1da0 [ 181.548341][ T8880] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 181.555137][ T8880] ? do_raw_spin_unlock+0x13c/0x8b0 [ 181.560387][ T8880] ? __mutex_lock+0x52a/0xd70 [ 181.565100][ T8880] unregister_netdevice_queue+0x303/0x370 [ 181.570864][ T8880] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 181.577228][ T8880] ? down_write+0x18c/0x220 [ 181.581775][ T8880] ? __pfx_down_write+0x10/0x10 [ 181.586654][ T8880] unregister_netdev+0x1c/0x30 [ 181.591449][ T8880] bnep_session+0x2e0e/0x3000 [ 181.596172][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 181.601399][ T8880] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.607751][ T8880] ? __pfx_woken_wake_function+0x10/0x10 [ 181.613422][ T8880] ? __kthread_parkme+0x169/0x1d0 [ 181.618497][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 181.623547][ T8880] kthread+0x2f0/0x390 [ 181.627641][ T8880] ? __pfx_bnep_session+0x10/0x10 [ 181.632691][ T8880] ? __pfx_kthread+0x10/0x10 [ 181.637299][ T8880] ret_from_fork+0x4b/0x80 [ 181.641754][ T8880] ? __pfx_kthread+0x10/0x10 [ 181.646378][ T8880] ret_from_fork_asm+0x1a/0x30 [ 181.651283][ T8880] [ 181.654600][ T8880] Kernel Offset: disabled [ 181.658963][ T8880] Rebooting in 86400 seconds..