last executing test programs: 1m1.507560126s ago: executing program 0 (id=951): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r2}, 0x38) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x0, 0x8000, 0x200, 0x1, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) r10 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468315f746f5f6d65616d0000007369743020000000000004000000000062adc42d925553c1df0000000000000076657468305f746f5f627269646365000180c2000000000000000000aaaaaaaaaa0000000000000000007000000070000000a80000006d61726b00000000000000000000000000000000000000030000000000000000100000000000000000000006ed4b7b69aa0317ff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000007465716c30000000000000000000000073797a5f74757e0000000000000000006976366772673000e8ffffff080000007663616e30000000d53fa73b00000000ffffffffffff000000000000aaaaaace98aa008d857c510000007000000070000000a0000000415544495400000000000000000000000000ff000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000002000000ffffffff00000000"]}, 0x250) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r11}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000001840)=@udp6}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0x19, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaa6c, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@jmp={0x5, 0x0, 0x8, 0xd, 0xa, 0x80, 0x1}, @alu={0x7, 0x0, 0x9, 0x8, 0xa, 0xfffffffffffffffc, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r12}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000022c0)='syzkaller\x00', 0xe9, 0x55, &(0x7f0000002300)=""/85, 0x41000, 0x21, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002400)={0x0, 0xa, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002440)=[0xffffffffffffffff, r12, r13, r2, r12, r13], &(0x7f0000002480)=[{0x1, 0x2, 0x1, 0x6}, {0x3, 0x1, 0xd}, {0x1, 0x3, 0x0, 0xb}, {0x3, 0x2, 0xd}, {0x4, 0x4, 0xb, 0x7}, {0x3, 0x4, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r13, &(0x7f0000001ec0)="85bd436538c6e4bede3d0ca9ae373ef7f822cd0f0400fa82c4bfc9b7f13af123d290db8da07c7ac5e2d3fbefdca468b0cecd2b0d31338be491611504000000000000001a4bc97d7d0b9b13c503957c65a93e9fa59d099d0b8c9d8508e783a5"}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x1, 0xa, 0x2, 0x2, 0x8, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x25, 0x1000, &(0x7f0000000e40)=""/4096, 0x41100, 0x8, '\x00', r3, @fallback=0x2d, r8, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xa, 0x4ca4, 0xe}, 0x10, 0x0, r1, 0x0, &(0x7f0000000500)=[r2, r2, r9, r12], 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001f40)="cb6c6f5a0d3435cf04dba0e7d53287726be891dbe89f07c75df5777741a037dde51045f33811f3bad2c621cca3b4f14bc4e19a201e1407ed612a28cdbde915e8725e2b398d02a29151ea37a4135fc192bcf8ff2d60f3fd4ae238c36b96cd5aad15007b8c23f3c6db82e1478fbb81412ea7f315f714aab9b59ed8bf906c8f604cb73d100dbab4ad6d24aa1df7e695d5173113b8c52598b976bb5a787213e0d0687f182c7901018b97924d43d8cf5e1aa0e60fc82df4d16f410b857527f59a9efc656386a1982270fe47f9a54773f6bc26d97452117eec143fc60a55", &(0x7f0000002040)="32cc65fa834088b771d377a7fe16454fac0277da431898f2a0c3365536fc643aeca94e93e29c23e62e88037c4655770c0a3be121d9e7a2e8d34d851090e0b788a41f4ad2706133eb131f22d7c69da825b3d32441f88895d7950431aa4dce326092ff8e407b939409053ea5b055430f00000000000000a125e2013e8e81051d46ea7280c1d27481764580986b4b61b6c6a51ed4ccf054e1c88f77933c3bfb232f644dd2f33b0ff41d2b7e7b5179664933b573c6cb6eb33bd55e285d5357956803cb6727b55f7f9f471e152d0b910cfd3ac3d9a0fac57e115bae", 0xffffff7a, r9, 0x4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) socket$inet6(0xa, 0x1, 0x100) 1m1.339683943s ago: executing program 0 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf31141cff22acb68}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="24002d8005000100000000000500040000000000080002009c"], 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xf, 0x1}, {0x7, 0x5}, {0xf}, {0xc, 0x1}, {0xf, 0x3}]}, @var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @fwd={0xc}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @func={0x318, 0x0, 0x0, 0xc, 0x5}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @struct={0x4, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x9, 0x4, 0x8000}, {0xa, 0x2, 0xa4f}, {0xb, 0x4, 0x1}]}]}, {0x0, [0x6f, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000400)=""/150, 0xd6, 0x96, 0x0, 0x9, 0x0, @void, @value}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000cf6e723883000000000000000000000000000000000000000000080000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r9}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xff1, &(0x7f0000001300)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0xd4, 0x5, 0x5, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x8000, 0x1, 0x8, 0x8}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_rx_abort\x00', r11}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r12, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5ac"}}}}}}, 0x0) r13 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r13, 0x10d, 0xe9, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_INITMSG(r13, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', r10, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m1.088034623s ago: executing program 0 (id=954): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040)=0x200, 0xfe8d) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2001000, @local, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e23, 0xfffffff8, @empty, 0x3}, {0xa, 0x4e23, 0x4, @remote, 0x1}, 0x0, {[0x3, 0xcd3, 0x9, 0x1, 0x3, 0xaeba, 0x3, 0x80]}}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x58, &(0x7f0000000500)}, 0x10) 46.845254668s ago: executing program 0 (id=954): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040)=0x200, 0xfe8d) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2001000, @local, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e23, 0xfffffff8, @empty, 0x3}, {0xa, 0x4e23, 0x4, @remote, 0x1}, 0x0, {[0x3, 0xcd3, 0x9, 0x1, 0x3, 0xaeba, 0x3, 0x80]}}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x58, &(0x7f0000000500)}, 0x10) 29.118273476s ago: executing program 0 (id=954): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040)=0x200, 0xfe8d) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2001000, @local, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e23, 0xfffffff8, @empty, 0x3}, {0xa, 0x4e23, 0x4, @remote, 0x1}, 0x0, {[0x3, 0xcd3, 0x9, 0x1, 0x3, 0xaeba, 0x3, 0x80]}}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x58, &(0x7f0000000500)}, 0x10) 17.764190062s ago: executing program 1 (id=1370): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25040000000d000a000a000030323135340000000008"], 0xc0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008000020850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x60000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc89}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 17.398748098s ago: executing program 1 (id=1376): syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff020000000000000000000000000001042065580000000000040800000086dd080088f7"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x1000, 0x7ff, 0x4}, 0x14) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @mcast2, 0x2}], 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff020000000000000000000000000001042065580000000000040800000086dd080088f7"], 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x1000, 0x7ff, 0x4}, 0x14) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @mcast2, 0x2}], 0x1c) (async) 17.192888558s ago: executing program 1 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x12) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x41145faac3e52eb1, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pB \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x7f, 0x80, &(0x7f0000000340)=""/128, 0x41100, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x3, 0xa2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r5, r6, r7], 0x0, 0x10, 0x800, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0xd5f953f96fd2e31a}]}}]}, 0x48}}, 0x0) 17.018554252s ago: executing program 1 (id=1381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic='\nN']}]}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={r8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x1800}, &(0x7f0000000040)=0x8) socket$inet6(0xa, 0x80000, 0x8) 16.797359454s ago: executing program 1 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x8, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01070000000000000000060000000800030049"], 0x1c}}, 0x4000000) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @local}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 16.595357787s ago: executing program 1 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x13) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x1a, 0x0, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_MTU={0x8, 0x4, 0x6a7}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0xc061, 0x6, 0x530, 0x0, 0x370, 0xd0, 0x1b0, 0x370, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@ipv6={@remote, @dev, [], [], 'macvlan1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 15.0144419s ago: executing program 0 (id=954): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040)=0x200, 0xfe8d) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2001000, @local, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e23, 0xfffffff8, @empty, 0x3}, {0xa, 0x4e23, 0x4, @remote, 0x1}, 0x0, {[0x3, 0xcd3, 0x9, 0x1, 0x3, 0xaeba, 0x3, 0x80]}}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x58, &(0x7f0000000500)}, 0x10) 3.019798102s ago: executing program 2 (id=1482): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 2.352059563s ago: executing program 4 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x441}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x4d00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001300)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20044045) recvmmsg$unix(r6, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=""/36, 0x24}, {&(0x7f0000001780)=""/184, 0xb8}], 0x2}}], 0x1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={&(0x7f00000005c0)="aee4ae5442dc8bd4ec56cb7dab4862efe88eb06da761b7e6ba70a98fb89db12cea87984d425dc4a75f366f9e269ba015e145e0094657a8cd7d826fd9e141e8e9bd300c7e62b4a52784c04f1a9da5b5abc1f6a2ec38891759238456285d213e2eb0b930585cf247d46025b0f903dfaeac3f04505cd2c4217c2c715ba42aee30d2f1873ce06eb0ac26ec08652683ba5a3d812c7e83b6d01a44438b4b1e9789efb1ed7344e7070ece82004b46ec55378bad6702997c5b13", &(0x7f0000000680)=""/189, &(0x7f00000011c0)="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", &(0x7f0000000100)="61ac85bd35d6e3b41d4d5b74e773c9cd3d4a55d096bae74fa65659471124423faafe778f0adf4c604dc6b574aaffecec311a3784959856021bb2c5b0", 0x577, r4, 0x4}, 0x38) 2.011747723s ago: executing program 2 (id=1491): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x7) sendto$inet6(r3, 0x0, 0x0, 0xbcff, 0x0, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x22d, 0x9, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@generic={0xcd, 0xc, "495caf13efda5c6ebe7b"}, @timestamp={0x44, 0x18, 0x3c, 0x0, 0x7, [0x2, 0x5, 0x8000, 0x9a, 0x4]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000480)={'syztnl0\x00', r5, 0x1, 0x0, 0xe, 0x9, {{0x2d, 0x4, 0x2, 0x5, 0xb4, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@end, @timestamp={0x44, 0x20, 0x1a, 0x0, 0x2, [0x3e, 0x0, 0x7, 0x80000000, 0x0, 0x71, 0x9]}, @noop, @rr={0x7, 0xb, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x5b, 0x1, 0x4, [{@rand_addr=0x64010100, 0x1}, {@empty, 0x6}, {@multicast1, 0x8}, {@broadcast, 0xa16}, {@local, 0x9}]}, @rr={0x7, 0x17, 0x7e, [@loopback, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x6c, 0x0, 0x0, [0x2, 0x80000000, 0x0, 0x1, 0x8]}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x0, [0x80000000]}]}}}}}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYBLOB="01000000000000000000040000fca948b86a0008000700ffffffff08000800ac143400080002"], 0x2c}}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0x102}], 0x1, 0x0, 0x2a}, 0x300) 1.420479927s ago: executing program 3 (id=1495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008c004d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1d4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1ac, 0x4, 0x0, 0x1, [{0x16c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "7a601e6b31cd203c174aa26102b00e0d832454c8149ae844a0a9b59082a521efb5af18bed63b46b933d06f0edb4e9e5ede882911ce5b5d807d21bcf3c4db89e0e423fcf60a"}, @NFTA_DATA_VALUE={0x20, 0x1, "0b9a7e9e5bed88ca385c7112cb33ca567db328d428faeb3a228cfd2f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x70, 0x1, "8b892e88d81f4ba57ac960e56ab1f3be277c923d94e28e81b0758cf9fd9b08c8da088a9c45697c4840b98489a608f8c91df8002d354bfdad5b4e6201af25253c0c5cb7a2583101da56d78789cb575ffb6206b1de1aa9399d5615491fc47e2ae637e1ed3808b9ccac5f7c0f9a"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x248}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000271121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000740000000030a010200000000000000000a0000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000020a0b01000000000000000000000000140000001100010000000000000000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0x7) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500200600fe8000000000000000000001000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c1f4074c01ff5133cf07e"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r7, &(0x7f0000001440)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa}, @mpls={[], @ipv6=@udp={0x2, 0x6, "3d885d", 0xf98, 0x11, 0x0, @empty, @mcast2, {[], {0x4e22, 0x4e21, 0xf98, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x0, @void}, "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"}}}}}}, 0xfce) syz_emit_ethernet(0x9f, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) 1.415739039s ago: executing program 4 (id=1496): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1003, 0x0, 0x0, 0x204, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x73) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) close(r0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000240), 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x75) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000280)={0x2b, 0xc, 0x0, 0x8, 0x0, [@empty, @loopback, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private0]}, 0x68) 1.195001582s ago: executing program 4 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00'}, 0x10) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1f4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 32) splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000002d40)=ANY=[@ANYBLOB="000022eb01051c000712000006"], 0x1017) 1.037171246s ago: executing program 3 (id=1498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b707, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f0000000000)={@dev, 0x78, r6}) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xe59, 0x17}}]}}]}, 0x14c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xea8}}, 0x0) 1.027750025s ago: executing program 2 (id=1499): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000003850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000000), &(0x7f0000000600)=""/84}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000000) 851.934387ms ago: executing program 4 (id=1500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00040001040103468f1a0e449ac0f80f000d00050001000400000014e671c7d7957c7a2fd384ed679e3c1706dfc4faa7b169b3848bd5d1bc4f7bb1c618c70d467bf2e98bf2fc92c77a69f343bdc956d4f47b1adae7bf26fe0bf229aae4845edd7a74e38ea38ffd37f7ce3b12469ac1dae0197a5a39ec8c7e316c401d51b9752388c3cdb1397b1631e2e774393ab4d1c38b1ff390132e2977bffad7ef458d1aaa3d1bbfd3b12e9566a162b3fa2ef4d3b76af511bcc86955fa28aa25e2c18518aad4739125108e3d1b7dd235040e35edeaa026764da8686354ec844a52ac51"], 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00040001040103468f1a0e449ac0f80f000d00050001000400000014e671c7d7957c7a2fd384ed679e3c1706dfc4faa7b169b3848bd5d1bc4f7bb1c618c70d467bf2e98bf2fc92c77a69f343bdc956d4f47b1adae7bf26fe0bf229aae4845edd7a74e38ea38ffd37f7ce3b12469ac1dae0197a5a39ec8c7e316c401d51b9752388c3cdb1397b1631e2e774393ab4d1c38b1ff390132e2977bffad7ef458d1aaa3d1bbfd3b12e9566a162b3fa2ef4d3b76af511bcc86955fa28aa25e2c18518aad4739125108e3d1b7dd235040e35edeaa026764da8686354ec844a52ac51"], 0x1c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x360, 0x11, 0x148, 0x360, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socket(0x10, 0x80002, 0x4) (async) r3 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES16, @ANYRES64=r4, @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES16, @ANYRES64=r4, @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18009e0000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fcdbdf251800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0xc000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000008a606672"], 0x24}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r2) 774.989086ms ago: executing program 3 (id=1501): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) unshare(0x20000400) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000001d00), 0x4) r4 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) unshare(0x20000400) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000001d00), 0x4) (async) socket(0x10, 0x80002, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) (async) 689.563764ms ago: executing program 3 (id=1502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000000080)={0x5, 0x3, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "97a56f6048021ea4"}}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[], 0x14}}, 0x8005) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x1) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044081}, 0x40810) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0xbf9d, 0x200, 0x0, 0x4, 0x0, 0xffff, 0x5, 0xffffffff}, 0x20) sendmmsg$inet6(r3, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="44327b70460a74a939383e3a0f7a1d95f9ec80e1fbd70e261766b66dad58f03eb32844987b5383e9bc755e03122b9eccebe1cdfa1737011b38177c970e3370feaf3dfa2b9de1d350b1820e5d32162775035988e48f49c88bc0eff572e3c8796e2865efdf25413a5da95cea0f3000c05c4a931494c1263367338bbee30c946c6ae1279b780f40eb9b651698ebb4a9726e0d1220da83883ef55168787552e3c62a4a776c5e8f5bbd1ad85e2ec4", 0xac}, {&(0x7f0000000380)="5291f9ab631ec0c8bd63d1c13edbf5675da38518f8c7c36a5ef1ab21b04550868703327913e33c5282323c06a5086c469a7dce3600e6d2deb3f695524035feada832077c10bf5dca702ccb6c2e9456cca64198963a124c3bf189b7c557c030ba5d986a1da126a3aa8299b76ef09e7a1cf52996f3314cd9f65c6adffd8c569eaa157f1797941cede1d00d00794dadff898f62c23781c2c3f47bb755da745ede0c003bf0370994c68d7bc9289f0e48e7e08b5b3d78eb39b3027e20fc953862b67eb17419afee723b08721acacf8d011a9ee0f26f4de8c593c01f5280f7232fbfb1ac658f6b118526c0fb25a90c", 0xec}, {&(0x7f0000000000)="dfd6d921391e89a74f3a3a3954297bbcd41249aa212b5f150c0791aaaa81bfd44be481dd7036d1ddbf5d76bdfbbb62bd85e726", 0x33}], 0x3, &(0x7f0000001ac0)=ANY=[], 0x18}}], 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0xff, @private0, 0x9}, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, @in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x27}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 572.170181ms ago: executing program 4 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) listen(r2, 0x35b) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 370.589946ms ago: executing program 2 (id=1504): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2060, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000880)="2fb516919755e0", 0x7}, {&(0x7f0000001040)="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", 0xd96}, {&(0x7f0000001e00)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24080010}, 0x44000) 286.747529ms ago: executing program 3 (id=1505): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@deltclass={0x50, 0x29, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {0x6, 0xfff3}, {0x3, 0xc}}, [@TCA_RATE={0x3, 0x5, {0x10, 0x9}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x3a}, @tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=@setlink={0x7c, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x10, 0x2184}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1683}, @IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8e6a8c72466403a972800c823a72f4bb"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40084}, 0x20004040) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000540)=']*]\x00', 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/86, 0x56}], 0x2, &(0x7f0000000400)=""/190, 0xbe}, 0x40000102) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 232.294941ms ago: executing program 4 (id=1506): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5, 0x2}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109f00"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 198.115571ms ago: executing program 2 (id=1507): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) 93.279713ms ago: executing program 3 (id=1508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000002, 0x10, r0, 0xf9c1d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfdf, &(0x7f0000001e00)=""/4063, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x802) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x5c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x5, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) recvmsg$unix(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x400, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@multicast1}, 0x5, 0x5}}, 0xf8}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000001640), 0x0, &(0x7f0000001700)=ANY=[@ANYRES32=r0, @ANYRES32=0x0], 0xc8, 0x8814}, 0x48000) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) 0s ago: executing program 2 (id=1509): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000073113100000000008510000002000000850000007600000095000810000000009500a50500000000db2bd89a2dd04b9fc418efb7a3630daebfd3ab2404abd0069daff32495081035f654ef4fb6be665d669e2b7adc893f6013db654ebbfc9d6fe6ce0eb2aa0fd324c4c0e04596eb3328c00000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1cc, 0xc, 0xa, 0xb00, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a4, 0x3, 0x0, 0x1, [{0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "c2b59faff992c52ca9c55caff2e1336f4bb831e42dbef1a01b470dd54175e4c822a8a64f5d80200c264207ba6b90c59186c2297ee3598e726e318ad4a67160b813a3ca9eba6c151536f63dd08c166d177a289f324fd7e57fada6bfbfc94f3cd56add20fefa4d7d868531aa8c20cc7580b59e94967b7005e8c2e28c178ad972f7be0cfee93770e0efad0fa9032e4df96a57cd8d1098deb054219fb1e02b3f274485dd4594ba0e95fe5961682928f2f375538faef4db80eacdb4def8efd44f4ce1fd641243332cf18ee27c6de367b0064647add50c46632796ab3c09ab79ad868761e934017e0e35e1d71fa4e4e0c8e262ea41"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xffffffffffffff09}]}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @match={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x0, 0x3, "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"}, @NFTA_MATCH_INFO={0x0, 0x3, "859e0fcb1478cf011b78b6cc5fc16fcd3ead5b"}, @NFTA_MATCH_INFO={0x0, 0x3, "04e9ef32a5c823650237f0dab03b23b6ead0ae38355cd9d1e98efef5f045647d9624f332420efb9fe2f38a3f9941c079b36a339fe94d16ab5629cfd6bc0f9b15896d025e0ce9f8c5fa0d8ba7d2948cf95a1143242d5ff2ab0fd1cadabb7a22b6ca85a2df78bf62187954cd46ca3ca1848678e8184edf816a88f0ef5c3223019e01483e68d2b04459fdfb9dd8800b91"}, @NFTA_MATCH_REV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x0, 0x1, 'nfacct\x00'}, @NFTA_MATCH_INFO={0x0, 0x3, "9b286ce633cb6e4d01811aaa0b2b8c4505521115e5ce3ca5efa7fe6017e663ba5f1b0e94f027b353ec323e797b97a1ffcc13985418eee36c27696a32883e58f341e6b07e16a76b0d91e5261c4caa57709a4b3d2f494ae25eddc591efad292275a182fe553af7f8b0bceea770e5cfcaa8047d17c2c6e493f07fd1431a12a3ceb3017219da36fdd2c6a1bbcd1f7db2a056598b83531f9f10ad349e99d5ecfd5b2eeb8f1af1b9a3f119327ddf5f37e2311568d814db1fb554bbe86a4b3b645b0e69a82549aa989c43d2e800317b8c63eee696b2d0ab405b3d2cff359180e51cc35977e6e04bfb48b4"}, @NFTA_MATCH_REV, @NFTA_MATCH_INFO={0x0, 0x3, "1023a9d0c481ece98d307e2e2fa576087c7095928f861cdf556d66eebe55ceb2be900848c862352b64fa43078dab414334e0af48424d0d0e9fd4e864b1672bcff40ba83f2ceba31d785ebce6a0228c9bcb33e4eb05cf1e9b9708e42334b40b59be85fc883eac987dca86914dd9d91a191501b7a3f6d897d2d18b7f28b77a48c6e527f9312e3e5be4c7461e63cec62f68acd3fe75cb1dac65a5cc8d3d128bc1dc05af220be4b6c9fcca727423eaf09955307dc79bdc6fb60174660143b9ddde96f9ca6af9"}]}}}, {0x0, 0x1, 0x0, 0x1, @flow_offload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @nat={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x0, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_SET_ID, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @counter={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xfffffffffffffff9}]}}}]}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "81b5e0e7"}]}], {0x14, 0x10}}, 0x214}}, 0x20040000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x57}}, {{0xa, 0x4e22, 0x5, @empty, 0x3}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0ebe097fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f7191070000000000002ea37e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85ecb29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r1, r3, 0x2f, 0x2038, 0x4, @void, @void, @value}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010001", 0x7) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000240)={0x0, 0x1, 0x14}) kernel console output (not intermixed with test programs): this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.690499][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.721221][ T5252] team0: Port device team_slave_0 added [ 78.730392][ T5252] team0: Port device team_slave_1 added [ 78.784660][ T5234] team0: Port device team_slave_0 added [ 78.819619][ T5233] hsr_slave_0: entered promiscuous mode [ 78.826118][ T5233] hsr_slave_1: entered promiscuous mode [ 78.835263][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.843605][ T5233] Cannot create hsr debugfs directory [ 78.882969][ T5234] team0: Port device team_slave_1 added [ 78.935704][ T5239] hsr_slave_0: entered promiscuous mode [ 78.942353][ T5239] hsr_slave_1: entered promiscuous mode [ 78.950270][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.957973][ T5239] Cannot create hsr debugfs directory [ 79.000531][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.007750][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.034553][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.046889][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.053883][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.080868][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.129930][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.137071][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.163079][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.175370][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.182495][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.209301][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.361967][ T5234] hsr_slave_0: entered promiscuous mode [ 79.371382][ T5234] hsr_slave_1: entered promiscuous mode [ 79.378523][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.386112][ T5234] Cannot create hsr debugfs directory [ 79.425617][ T5252] hsr_slave_0: entered promiscuous mode [ 79.432610][ T5252] hsr_slave_1: entered promiscuous mode [ 79.439334][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.447346][ T5252] Cannot create hsr debugfs directory [ 79.837784][ T5236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.851750][ T5236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.861945][ T5236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.880703][ T5236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.960366][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.970693][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.002611][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.015854][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.077309][ T5234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.090289][ T5234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.100627][ T5234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.118708][ T5234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.220235][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.253562][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.266348][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.297277][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.433045][ T5252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.444766][ T5252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.470338][ T54] Bluetooth: hci0: command tx timeout [ 80.470633][ T5242] Bluetooth: hci2: command tx timeout [ 80.480354][ T54] Bluetooth: hci3: command tx timeout [ 80.490007][ T5252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.525354][ T5252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.546590][ T54] Bluetooth: hci1: command tx timeout [ 80.561105][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.575796][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.590595][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.637175][ T54] Bluetooth: hci4: command tx timeout [ 80.664728][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.698655][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.706050][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.737001][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.745880][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.762784][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.769969][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.813264][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.820440][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.830726][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.837982][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.849101][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.856776][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.896217][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.903461][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.099047][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.139400][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.196263][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.220122][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.260575][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.267807][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.305897][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.313180][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.328813][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.335986][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.364616][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.371846][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.525188][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.604784][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.761552][ T5236] veth0_vlan: entered promiscuous mode [ 81.814453][ T5236] veth1_vlan: entered promiscuous mode [ 81.883776][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.959463][ T5234] veth0_vlan: entered promiscuous mode [ 82.070056][ T5234] veth1_vlan: entered promiscuous mode [ 82.085536][ T5236] veth0_macvtap: entered promiscuous mode [ 82.127737][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.159866][ T5236] veth1_macvtap: entered promiscuous mode [ 82.192872][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.204093][ T5234] veth0_macvtap: entered promiscuous mode [ 82.260780][ T5234] veth1_macvtap: entered promiscuous mode [ 82.282289][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.323592][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.373781][ T5236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.396698][ T5236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.405457][ T5236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.436840][ T5236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480978][ T5233] veth0_vlan: entered promiscuous mode [ 82.515762][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.528078][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.542433][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.550029][ T54] Bluetooth: hci2: command tx timeout [ 82.557019][ T54] Bluetooth: hci3: command tx timeout [ 82.557243][ T5242] Bluetooth: hci0: command tx timeout [ 82.575697][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.588546][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.601099][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.636925][ T5242] Bluetooth: hci1: command tx timeout [ 82.671503][ T5233] veth1_vlan: entered promiscuous mode [ 82.689739][ T5234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.699104][ T5234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711133][ T5234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.722175][ T5242] Bluetooth: hci4: command tx timeout [ 82.728026][ T5234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853216][ T5252] veth0_vlan: entered promiscuous mode [ 82.925191][ T5239] veth0_vlan: entered promiscuous mode [ 82.948696][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.962301][ T5252] veth1_vlan: entered promiscuous mode [ 82.970107][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.035175][ T5233] veth0_macvtap: entered promiscuous mode [ 83.082789][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.083326][ T5233] veth1_macvtap: entered promiscuous mode [ 83.091122][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.123994][ T5239] veth1_vlan: entered promiscuous mode [ 83.233618][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.244864][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.257065][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.286986][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.313766][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.334702][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.349698][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.360809][ T5252] veth0_macvtap: entered promiscuous mode [ 83.394197][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.405468][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.416441][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.427871][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.440066][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.481397][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.517904][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.530490][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.539988][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.559818][ T5252] veth1_macvtap: entered promiscuous mode [ 83.592961][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.603114][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.643328][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.654632][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.665228][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.680679][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.692867][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.704431][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.718648][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.741508][ T5239] veth0_macvtap: entered promiscuous mode [ 83.768327][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.792927][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.827127][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.839299][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.849575][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.861396][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.873718][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.882421][ T5239] veth1_macvtap: entered promiscuous mode [ 83.920198][ T5252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.929431][ T5252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939018][ T5252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948119][ T5252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.014760][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.026874][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.057203][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.070371][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.081025][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.092136][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.102632][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.114278][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.124473][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.135094][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.154548][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.165808][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.186543][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.198202][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.209295][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.219853][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.231092][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.241352][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.252107][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.266223][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.361860][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.373674][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.394369][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.400034][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.413403][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.425257][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.596716][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.606182][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.628057][ T5242] Bluetooth: hci0: command tx timeout [ 84.637486][ T5242] Bluetooth: hci3: command tx timeout [ 84.638015][ T54] Bluetooth: hci2: command tx timeout [ 84.707350][ T54] Bluetooth: hci1: command tx timeout [ 84.786699][ T54] Bluetooth: hci4: command tx timeout [ 84.875752][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.890895][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.904655][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.093597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.120359][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.242269][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.309575][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.362883][ T5358] Cannot find del_set index 4 as target [ 85.391788][ T5349] x_tables: duplicate underflow at hook 2 [ 85.905645][ T5371] pim6reg1: entered promiscuous mode [ 85.941227][ T5371] pim6reg1: entered allmulticast mode [ 86.071613][ T5386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.271050][ T5391] netlink: 256 bytes leftover after parsing attributes in process `syz.2.20'. [ 86.322741][ T5391] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.593581][ T5407] netlink: 'syz.1.25': attribute type 13 has an invalid length. [ 86.727628][ T5412] netlink: 144480 bytes leftover after parsing attributes in process `syz.3.28'. [ 86.771896][ T5412] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 86.894528][ T5422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.970130][ T25] cfg80211: failed to load regulatory.db [ 87.400738][ T5443] gtp0: entered promiscuous mode [ 87.406085][ T5443] gtp0: entered allmulticast mode [ 87.738970][ T5462] Zero length message leads to an empty skb [ 88.066957][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 88.067310][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.273516][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 88.769472][ T5507] netlink: 44 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.783175][ T5507] netlink: 43 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.794322][ T5507] netlink: 43 bytes leftover after parsing attributes in process `syz.4.54'. [ 90.151744][ T5512] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.57'. [ 90.405481][ T5519] syzkaller0: entered allmulticast mode [ 90.592173][ T5525] syz.4.63 uses obsolete (PF_INET,SOCK_PACKET) [ 90.900133][ T5549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.951087][ T5549] dvmrp0: entered allmulticast mode [ 91.050375][ T5548] dvmrp0: left allmulticast mode [ 91.163031][ T5559] nbd: must specify an index to disconnect [ 91.196992][ T5559] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 91.255106][ T5559] team0: Cannot enslave team device to itself [ 91.378448][ T5565] batadv_slave_1: default FDB implementation only supports local addresses [ 91.547362][ T5573] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 91.571962][ T5573] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 91.604269][ T5573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 91.631068][ T5573] netlink: 220 bytes leftover after parsing attributes in process `syz.1.76'. [ 91.661035][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 91.859755][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 91.900521][ T5588] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 92.065999][ T5592] netlink: 'syz.2.83': attribute type 21 has an invalid length. [ 92.103292][ T5592] netlink: 152 bytes leftover after parsing attributes in process `syz.2.83'. [ 92.155770][ T5592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.83'. [ 92.190090][ T5592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 92.522748][ T5618] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 92.544911][ T5617] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 92.566839][ T5617] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 92.590891][ T5617] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 92.618959][ T5611] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 92.967939][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 93.046834][ T5632] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.94'. [ 93.067707][ T5632] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 93.461828][ T5648] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 93.725427][ T5663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.731339][ T5665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.463694][ T5698] netlink: 'syz.1.113': attribute type 3 has an invalid length. [ 94.549026][ T5701] xt_TCPMSS: Only works on TCP SYN packets [ 95.052662][ T5721] trusted_key: syz.0.119 sent an empty control message without MSG_MORE. [ 95.302081][ T5730] __nla_validate_parse: 3 callbacks suppressed [ 95.302110][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 96.824021][ T5739] vlan2: entered allmulticast mode [ 96.939388][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 97.102866][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 97.305212][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.313653][ T5757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.548726][ T5768] xt_cluster: node mask cannot exceed total number of nodes [ 97.736861][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 98.532484][ T5806] ip6gre1: entered allmulticast mode [ 98.696324][ T5812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.153'. [ 98.711382][ T5814] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 98.971359][ T5824] Bluetooth: MGMT ver 1.23 [ 99.060685][ T5829] gtp0: entered promiscuous mode [ 99.086620][ T5829] gtp0: entered allmulticast mode [ 99.257668][ T5836] tipc: Failed to remove unknown binding: 66,1,1/0:474091745/474091747 [ 99.267180][ T5836] tipc: Failed to remove unknown binding: 66,1,1/0:474091745/474091747 [ 99.656858][ T5857] tipc: Can't bind to reserved service type 0 [ 99.818005][ T5867] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 100.152701][ T5879] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.174'. [ 100.162890][ T5879] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 100.498424][ T5890] bond1: entered promiscuous mode [ 100.503534][ T5890] bond1: entered allmulticast mode [ 100.511391][ T5890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.816883][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 100.853806][ T5901] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 101.664303][ T5935] syzkaller0: entered promiscuous mode [ 101.678444][ T5935] syzkaller0: entered allmulticast mode [ 101.847371][ T5950] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 101.861686][ T5950] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.198'. [ 101.987035][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 102.021942][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 103.917378][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 104.395383][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'. [ 104.832508][ T6035] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 105.033444][ T6046] xt_ecn: cannot match TCP bits for non-tcp packets [ 105.916605][ T6093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 105.948062][ T6089] x_tables: duplicate underflow at hook 1 [ 106.247369][ T6104] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.316719][ T6110] netlink: 'syz.3.247': attribute type 24 has an invalid length. [ 106.341073][ T6113] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.248'. [ 106.344882][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 106.465609][ T6120] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 106.490316][ T6120] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.249'. [ 106.497081][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 106.523369][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 106.972777][ T6144] dccp_invalid_packet: P.Data Offset(197) too large [ 106.989552][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 107.014145][ T6150] --map-set only usable from mangle table [ 107.051984][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 107.837387][ T6187] netlink: 830 bytes leftover after parsing attributes in process `syz.2.267'. [ 107.891520][ T6195] netlink: 128 bytes leftover after parsing attributes in process `syz.3.271'. [ 107.979405][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.091395][ T6198] bond1 (unregistering): Released all slaves [ 108.705372][ T6239] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.754707][ T6245] tipc: Trying to set illegal importance in message [ 108.763763][ T6241] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 108.985762][ T6252] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 109.335393][ T6271] atomic_op ffff88805db86998 conn xmit_atomic 0000000000000000 [ 109.342682][ T6272] netlink: 'syz.4.294': attribute type 11 has an invalid length. [ 109.526696][ T6276] netlink: 'syz.2.297': attribute type 9 has an invalid length. [ 109.591395][ T6278] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 109.932329][ T6295] ebt_among: dst integrity fail: 200 [ 110.020071][ T6298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.029759][ T6298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.039311][ T6298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.048180][ T6298] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.092267][ T6298] vxlan0: entered promiscuous mode [ 110.108330][ T6298] vxlan0: entered allmulticast mode [ 110.150588][ T6298] tipc: Invalid UDP bearer configuration [ 110.150730][ T6298] tipc: Enabling of bearer rejected, failed to enable media [ 110.419340][ T6311] syzkaller1: entered promiscuous mode [ 110.434540][ T6319] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 110.451434][ T6311] syzkaller1: entered allmulticast mode [ 110.492515][ T6311] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 110.911687][ T6339] netlink: 'syz.2.317': attribute type 33 has an invalid length. [ 111.094079][ T6344] __nla_validate_parse: 96 callbacks suppressed [ 111.094103][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 111.397350][ T6359] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 111.399514][ T6353] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.323'. [ 111.455499][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 111.674943][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 111.708932][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 111.737790][ T6371] netlink: 'syz.3.328': attribute type 9 has an invalid length. [ 112.327696][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 112.370037][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 112.408188][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 112.450225][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 112.477334][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 112.551480][ T6402] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 112.670341][ T6405] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.770135][ T6415] xt_socket: unknown flags 0x3c [ 112.794893][ T6417] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 112.800526][ T6405] syz.2.340 (6405) used greatest stack depth: 18864 bytes left [ 112.842410][ T6417] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 112.981448][ T6423] lo speed is unknown, defaulting to 1000 [ 113.071048][ T6423] lo speed is unknown, defaulting to 1000 [ 113.126555][ T6423] lo speed is unknown, defaulting to 1000 [ 113.395774][ T6448] netlink: 'syz.3.353': attribute type 9 has an invalid length. [ 113.471269][ T6456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.539488][ T6456] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.566871][ T6456] gretap1: entered promiscuous mode [ 113.572240][ T6456] gretap1: entered allmulticast mode [ 113.699735][ T5287] lo speed is unknown, defaulting to 1000 [ 113.708459][ T6423] infiniband syz0: set active [ 113.729171][ T6423] infiniband syz0: added lo [ 113.764368][ T6423] syz0: rxe_create_cq: returned err = -12 [ 113.787070][ T6423] infiniband syz0: Couldn't create ib_mad CQ [ 113.837085][ T6423] infiniband syz0: Couldn't open port 1 [ 113.929114][ T6423] RDS/IB: syz0: added [ 113.933957][ T6423] smc: adding ib device syz0 with port count 1 [ 113.978467][ T6423] smc: ib device syz0 port 1 has pnetid [ 113.998503][ T5287] lo speed is unknown, defaulting to 1000 [ 114.020747][ T6423] lo speed is unknown, defaulting to 1000 [ 114.093724][ T5317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.565790][ T6501] netlink: 'syz.4.366': attribute type 9 has an invalid length. [ 114.656024][ T6423] lo speed is unknown, defaulting to 1000 [ 114.901389][ T6512] tipc: Started in network mode [ 114.906331][ T6512] tipc: Node identity , cluster identity 4711 [ 114.944207][ T6512] tipc: Failed to set node id, please configure manually [ 114.959050][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 115.061169][ T6517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.271662][ T6423] lo speed is unknown, defaulting to 1000 [ 115.368254][ T6526] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 115.672115][ T6536] netlink: 'syz.0.377': attribute type 9 has an invalid length. [ 115.728026][ T6538] tipc: Started in network mode [ 115.732953][ T6538] tipc: Node identity 06e2570b3d68, cluster identity 4711 [ 115.777441][ T6538] tipc: Enabled bearer , priority 0 [ 115.877996][ T6541] netlink: 'syz.0.379': attribute type 9 has an invalid length. [ 116.027123][ T6538] tipc: Resetting bearer [ 116.048039][ T6532] lo speed is unknown, defaulting to 1000 [ 116.369506][ T6531] tipc: Resetting bearer [ 116.817018][ T5323] tipc: Node number set to 998921995 [ 117.929005][ T6531] tipc: Disabling bearer [ 117.946708][ T6568] __nla_validate_parse: 77 callbacks suppressed [ 117.946728][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 117.970041][ T6568] geneve2: entered promiscuous mode [ 118.082848][ T6423] lo speed is unknown, defaulting to 1000 [ 118.093122][ T6573] netlink: 'syz.1.389': attribute type 9 has an invalid length. [ 118.101864][ T6573] netlink: 134160 bytes leftover after parsing attributes in process `syz.1.389'. [ 118.289762][ T6577] tls_set_device_offload: netdev not found [ 118.528482][ T6585] netlink: 224 bytes leftover after parsing attributes in process `syz.1.392'. [ 118.591080][ T6423] lo speed is unknown, defaulting to 1000 [ 118.820197][ T6599] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 118.897159][ T6552] lo speed is unknown, defaulting to 1000 [ 119.183088][ T6607] xt_cgroup: xt_cgroup: no path or classid specified [ 119.270215][ T6423] syz.2.346 (6423) used greatest stack depth: 18448 bytes left [ 119.334685][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 119.365601][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.396728][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.427181][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.456335][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.468884][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.481218][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.495009][ T6617] netlink: 'syz.1.401': attribute type 9 has an invalid length. [ 119.504320][ T6617] netlink: 134160 bytes leftover after parsing attributes in process `syz.1.401'. [ 119.513821][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.525916][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.223527][ T6634] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 120.254668][ T6634] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.407'. [ 120.312821][ T6634] netlink: 5 bytes leftover after parsing attributes in process `syz.3.407'. [ 120.333302][ T6635] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 120.343362][ T6637] netlink: 248 bytes leftover after parsing attributes in process `syz.4.409'. [ 120.518681][ T6648] netlink: 'syz.2.412': attribute type 9 has an invalid length. [ 120.526663][ T6648] netlink: 134160 bytes leftover after parsing attributes in process `syz.2.412'. [ 120.632667][ T6647] lo speed is unknown, defaulting to 1000 [ 120.665238][ T6651] No such timeout policy "syz0" [ 120.697680][ T6651] netem: change failed [ 120.774644][ T6655] netlink: 176 bytes leftover after parsing attributes in process `syz.3.415'. [ 120.810039][ T6651] No such timeout policy "syz0" [ 121.171604][ T6637] infiniband syz2: set active [ 121.192077][ T6637] infiniband syz2: added ipvlan1 [ 121.200436][ T6637] syz2: rxe_create_cq: returned err = -12 [ 121.208001][ T6670] netlink: 'syz.3.420': attribute type 9 has an invalid length. [ 121.216097][ T6637] infiniband syz2: Couldn't create ib_mad CQ [ 121.235793][ T6637] infiniband syz2: Couldn't open port 1 [ 121.350881][ T6637] RDS/IB: syz2: added [ 121.355639][ T6637] smc: adding ib device syz2 with port count 1 [ 121.383050][ T6637] smc: ib device syz2 port 1 has pnetid [ 121.494047][ T6683] netlink: 'syz.0.424': attribute type 9 has an invalid length. [ 122.439306][ T6713] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.771116][ T6719] netlink: 'syz.3.435': attribute type 9 has an invalid length. [ 122.979797][ T6732] netlink: 'syz.1.438': attribute type 5 has an invalid length. [ 123.003990][ T6732] __nla_validate_parse: 4 callbacks suppressed [ 123.004189][ T6732] netlink: 140 bytes leftover after parsing attributes in process `syz.1.438'. [ 123.073122][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.109546][ T6735] netlink: 48 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.129821][ T6735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.172231][ T6735] vlan2: entered allmulticast mode [ 123.212879][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.226535][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.235960][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.440'. [ 123.259721][ T6734] vlan2: entered allmulticast mode [ 123.490783][ T6751] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 123.593250][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 123.718157][ T6759] netlink: 'syz.3.449': attribute type 9 has an invalid length. [ 123.766730][ T6759] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.449'. [ 124.044046][ T6773] xt_ecn: cannot match TCP bits for non-tcp packets [ 124.199915][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.457'. [ 124.598322][ T6802] netlink: 'syz.0.463': attribute type 9 has an invalid length. [ 124.948724][ T6823] netlink: 'syz.0.467': attribute type 29 has an invalid length. [ 125.270327][ T6839] netlink: 'syz.0.472': attribute type 12 has an invalid length. [ 125.283918][ T6837] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 125.296732][ T6837] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 125.378787][ T6799] dccp_close: ABORT with 17 bytes unread [ 125.403543][ T6842] IPv6: sit1: Disabled Multicast RS [ 125.478159][ T6844] netlink: 'syz.1.478': attribute type 30 has an invalid length. [ 125.497252][ T6844] bridge0: port 2(bridge_slave_1) entered listening state [ 126.237355][ T6877] netlink: 'syz.4.490': attribute type 11 has an invalid length. [ 126.614990][ T6899] tunl0: entered promiscuous mode [ 126.653474][ T6902] xt_l2tp: missing protocol rule (udp|l2tpip) [ 126.699325][ T6899] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 127.256042][ T6937] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 127.294957][ T6937] netlink: 'syz.0.510': attribute type 2 has an invalid length. [ 127.594915][ T6951] Bluetooth: MGMT ver 1.23 [ 127.658768][ T6953] unsupported nlmsg_type 40 [ 127.719765][ T6953] pim6reg1: entered promiscuous mode [ 127.725225][ T6953] pim6reg1: entered allmulticast mode [ 128.153290][ T6979] __nla_validate_parse: 30 callbacks suppressed [ 128.153312][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 128.593657][ T6998] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 128.647094][ T7002] x_tables: unsorted entry at hook 1 [ 129.185858][ T7028] validate_nla: 5 callbacks suppressed [ 129.185880][ T7028] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 129.232686][ T7028] netlink: 9380 bytes leftover after parsing attributes in process `syz.1.538'. [ 129.596684][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.667669][ T7049] netlink: 64 bytes leftover after parsing attributes in process `syz.3.544'. [ 129.700316][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 129.717245][ T7050] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.722754][ T7058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.544'. [ 129.986726][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 130.213082][ T7085] netlink: 'syz.1.556': attribute type 2 has an invalid length. [ 130.269028][ T7085] ieee802154 phy0 wpan0: encryption failed: -90 [ 130.375067][ T7089] netlink: 'syz.3.557': attribute type 11 has an invalid length. [ 130.508605][ T7098] dvmrp0: entered allmulticast mode [ 130.569313][ T7100] netlink: 'syz.3.563': attribute type 9 has an invalid length. [ 130.578246][ T7100] netlink: 'syz.3.563': attribute type 7 has an invalid length. [ 130.601023][ T7100] netlink: 'syz.3.563': attribute type 8 has an invalid length. [ 130.693542][ T7100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 130.736668][ T7100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 130.820980][ T7110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.869004][ T7110] workqueue: name exceeds WQ_NAME_LEN. Truncating to: < )2U7䋡;&!i [ 131.298737][ T7132] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 131.438253][ T7132] macsec0: entered promiscuous mode [ 131.465769][ T7132] macsec0: left promiscuous mode [ 131.638084][ T7148] sctp: [Deprecated]: syz.3.575 (pid 7148) Use of int in maxseg socket option. [ 131.638084][ T7148] Use struct sctp_assoc_value instead [ 131.840610][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 132.048781][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.107566][ T7165] netlink: 134652 bytes leftover after parsing attributes in process `syz.3.584'. [ 132.119865][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 132.237661][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.274255][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 132.316570][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 132.578215][ T7189] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.587101][ T7189] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.595893][ T7189] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.604740][ T7189] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.646618][ T7189] vxlan0: entered promiscuous mode [ 132.652035][ T7189] vxlan0: entered allmulticast mode [ 132.732463][ T7189] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.742623][ T7189] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.751749][ T7189] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.760768][ T7189] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.930896][ T7203] lo speed is unknown, defaulting to 1000 [ 132.931555][ T7202] tipc: Started in network mode [ 132.942621][ T7202] tipc: Node identity 068fd52f3165, cluster identity 4711 [ 132.951393][ T7202] tipc: Enabled bearer , priority 0 [ 133.035427][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039889][ T7201] tipc: Disabling bearer [ 133.042139][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.102409][ T7215] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 133.351020][ T7223] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 133.506881][ T7231] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 133.578679][ T7231] bond1: entered promiscuous mode [ 133.584147][ T7231] bond1: entered allmulticast mode [ 133.592544][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.805534][ T7242] pim6reg: entered allmulticast mode [ 133.830800][ T7243] pim6reg: left allmulticast mode [ 133.892859][ T7237] lo speed is unknown, defaulting to 1000 [ 134.402203][ T7261] xt_hashlimit: size too large, truncated to 1048576 [ 134.630008][ T7269] netlink: 'syz.4.614': attribute type 9 has an invalid length. [ 134.649385][ T7269] __nla_validate_parse: 1 callbacks suppressed [ 134.649406][ T7269] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.614'. [ 134.681634][ T7269] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 135.230676][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 135.358264][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 135.804744][ T7304] netlink: 80 bytes leftover after parsing attributes in process `syz.2.622'. [ 136.006720][ T7311] netlink: 'syz.1.625': attribute type 9 has an invalid length. [ 136.025322][ T7311] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.625'. [ 136.105661][ T7311] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 136.284429][ T7316] netlink: 104 bytes leftover after parsing attributes in process `syz.3.627'. [ 137.052810][ T7329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.630'. [ 137.102103][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 137.132120][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.157865][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.180944][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.196757][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.312014][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 137.759400][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 137.788913][ T7359] netlink: 'syz.2.638': attribute type 9 has an invalid length. [ 137.807299][ T7359] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 138.491262][ T7389] netlink: 'syz.4.645': attribute type 32 has an invalid length. [ 138.845265][ T7400] lo speed is unknown, defaulting to 1000 [ 138.893794][ T7405] netlink: 'syz.0.650': attribute type 9 has an invalid length. [ 138.937187][ T7405] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 139.082557][ T7411] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 139.119672][ T7412] x_tables: duplicate underflow at hook 1 [ 139.138848][ T7411] ip6gretap0: entered promiscuous mode [ 139.682425][ T7436] __nla_validate_parse: 9 callbacks suppressed [ 139.682449][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 139.788060][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 139.899541][ T7442] netlink: 76 bytes leftover after parsing attributes in process `syz.3.661'. [ 139.931793][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 139.986028][ T7452] netlink: 830 bytes leftover after parsing attributes in process `syz.1.663'. [ 140.203710][ T7461] netlink: 'syz.0.665': attribute type 9 has an invalid length. [ 140.236569][ T7461] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.665'. [ 140.278132][ T7461] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 140.557937][ T7472] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 140.574443][ T7472] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.670'. [ 140.607167][ T7472] netlink: 5 bytes leftover after parsing attributes in process `syz.3.670'. [ 140.834659][ T7482] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 141.287516][ T7502] netlink: 'syz.2.679': attribute type 9 has an invalid length. [ 141.295235][ T7502] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.679'. [ 141.367067][ T7502] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 142.566875][ T7545] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 142.574591][ T7545] netlink: 512 bytes leftover after parsing attributes in process `syz.3.691'. [ 142.590545][ T7547] netlink: 'syz.0.692': attribute type 9 has an invalid length. [ 142.616694][ T7547] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 142.812365][ T7552] vxcan3: entered allmulticast mode [ 142.892777][ T7559] netlink: 'syz.0.697': attribute type 3 has an invalid length. [ 142.938798][ T7559] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 143.100618][ T7568] netlink: 'syz.2.701': attribute type 9 has an invalid length. [ 143.217105][ T7571] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 143.897828][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.916767][ T7594] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 144.211844][ T7603] netlink: 'syz.0.715': attribute type 9 has an invalid length. [ 145.558662][ T7666] __nla_validate_parse: 7 callbacks suppressed [ 145.558683][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 145.679600][ T7670] netlink: 'syz.0.737': attribute type 9 has an invalid length. [ 145.727071][ T7670] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.737'. [ 145.765377][ T7670] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 146.125727][ T7693] netlink: 'syz.4.746': attribute type 14 has an invalid length. [ 146.237799][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 146.240405][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.745'. [ 146.254366][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.559710][ T7713] netlink: 'syz.1.752': attribute type 9 has an invalid length. [ 146.582085][ T7713] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.752'. [ 146.604098][ T7716] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.753'. [ 146.613745][ T7713] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 146.640698][ T7716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.824104][ T7724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.756'. [ 146.834950][ T7724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.756'. [ 146.870901][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 146.916868][ T7731] netlink: 56 bytes leftover after parsing attributes in process `syz.1.756'. [ 146.966645][ T7731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.756'. [ 146.993172][ T7739] netlink: 'syz.4.760': attribute type 9 has an invalid length. [ 147.262454][ T7750] xt_hashlimit: invalid rate [ 147.279381][ T7751] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 147.388586][ T7756] netlink: 'syz.1.766': attribute type 9 has an invalid length. [ 147.417400][ T7756] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 147.593436][ T7767] nft_compat: unsupported protocol 0 [ 147.640657][ T7767] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.640911][ T7766] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 147.707667][ T7767] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 147.857971][ T7774] ip6t_rpfilter: unknown options [ 147.881475][ T7777] sctp: [Deprecated]: syz.0.773 (pid 7777) Use of int in maxseg socket option. [ 147.881475][ T7777] Use struct sctp_assoc_value instead [ 148.212596][ T7796] netlink: 'syz.3.780': attribute type 9 has an invalid length. [ 148.241123][ T7796] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 148.834506][ T7835] Unsupported ieee802154 address type: 0 [ 148.846923][ T7834] netlink: 'syz.4.792': attribute type 9 has an invalid length. [ 149.096083][ T7847] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 149.209124][ T7852] bond2: entered promiscuous mode [ 149.214516][ T7852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.255715][ T7854] netlink: 'syz.2.795': attribute type 7 has an invalid length. [ 149.274917][ T7854] netlink: 'syz.2.795': attribute type 8 has an invalid length. [ 149.299500][ T7854] erspan0: entered promiscuous mode [ 149.379383][ T7854] batadv_slave_1: entered promiscuous mode [ 149.878075][ T7888] x_tables: unsorted entry at hook 2 [ 149.899428][ T7887] x_tables: unsorted entry at hook 2 [ 151.705873][ T7922] bridge1: entered promiscuous mode [ 151.726744][ T7922] bridge1: entered allmulticast mode [ 151.748739][ T7923] bridge2: entered promiscuous mode [ 151.754020][ T7923] bridge2: entered allmulticast mode [ 152.055717][ T5287] IPVS: starting estimator thread 0... [ 152.096831][ T7947] validate_nla: 4 callbacks suppressed [ 152.096853][ T7947] netlink: 'syz.0.822': attribute type 9 has an invalid length. [ 152.099566][ T7945] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.102363][ T7947] __nla_validate_parse: 11 callbacks suppressed [ 152.102377][ T7947] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.822'. [ 152.196825][ T7943] IPVS: using max 15 ests per chain, 36000 per kthread [ 152.235684][ T7949] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 152.260572][ T7955] netlink: zone id is out of range [ 152.265985][ T7955] netlink: zone id is out of range [ 152.271486][ T7955] netlink: zone id is out of range [ 152.277268][ T7955] netlink: zone id is out of range [ 152.282653][ T7955] netlink: zone id is out of range [ 152.288041][ T7955] netlink: zone id is out of range [ 152.293522][ T7955] netlink: zone id is out of range [ 152.294060][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.306619][ T7955] netlink: zone id is out of range [ 152.307259][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.311921][ T7955] netlink: zone id is out of range [ 152.340416][ T7949] bridge0: entered allmulticast mode [ 152.580096][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 152.846996][ T7979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.940614][ T7985] netlink: 256 bytes leftover after parsing attributes in process `syz.2.833'. [ 153.077984][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 153.204116][ T7997] vxcan1: tx address claim with different name [ 153.295304][ T8000] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.840'. [ 153.680429][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.847'. [ 153.786103][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.847'. [ 153.897860][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 155.082322][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 155.288620][ T8087] delete_channel: no stack [ 155.315573][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 155.353076][ T8084] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 155.378593][ T8083] delete_channel: no stack [ 155.383380][ T8083] delete_channel: no stack [ 155.406681][ T8083] delete_channel: no stack [ 155.411330][ T8083] delete_channel: no stack [ 155.415924][ T8083] delete_channel: no stack [ 155.439070][ T8083] delete_channel: no stack [ 155.452373][ T8083] delete_channel: no stack [ 155.457695][ T8083] delete_channel: no stack [ 155.462570][ T8083] delete_channel: no stack [ 155.468167][ T8083] delete_channel: no stack [ 155.480455][ T8083] delete_channel: no stack [ 155.494673][ T8083] delete_channel: no stack [ 155.499988][ T8083] delete_channel: no stack [ 155.505040][ T8083] delete_channel: no stack [ 155.521445][ T8083] delete_channel: no stack [ 155.585327][ T8084] delete_channel: no stack [ 155.591136][ T8084] delete_channel: no stack [ 155.595941][ T8084] delete_channel: no stack [ 155.600680][ T8084] delete_channel: no stack [ 155.605415][ T8084] delete_channel: no stack [ 155.610494][ T8084] delete_channel: no stack [ 155.615164][ T8084] delete_channel: no stack [ 155.619901][ T8084] delete_channel: no stack [ 155.624616][ T8084] delete_channel: no stack [ 155.632020][ T8084] delete_channel: no stack [ 155.639701][ T8084] delete_channel: no stack [ 155.644372][ T8084] delete_channel: no stack [ 155.651658][ T8084] delete_channel: no stack [ 155.656477][ T8084] delete_channel: no stack [ 155.661329][ T8084] delete_channel: no stack [ 155.689337][ T8084] delete_channel: no stack [ 155.704737][ T8084] delete_channel: no stack [ 156.523192][ T8142] : entered promiscuous mode [ 156.603838][ T8154] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 156.843074][ T8160] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 156.857190][ T8164] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 156.877266][ T8164] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 156.881096][ T8158] lo speed is unknown, defaulting to 1000 [ 157.348831][ T8181] netlink: 'syz.3.888': attribute type 11 has an invalid length. [ 157.361425][ T8179] __nla_validate_parse: 4 callbacks suppressed [ 157.361447][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 157.587889][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 158.020772][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 158.169515][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.896'. [ 158.253328][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 158.488920][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 158.954437][ T8241] syzkaller1: entered promiscuous mode [ 158.976626][ T8241] syzkaller1: entered allmulticast mode [ 159.100137][ T8248] netlink: 192 bytes leftover after parsing attributes in process `syz.4.909'. [ 159.117765][ T8247] IPv6: sit1: Disabled Multicast RS [ 159.137999][ T8249] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 159.593002][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 159.601837][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.914'. [ 159.650601][ T8264] netlink: 596 bytes leftover after parsing attributes in process `syz.0.913'. [ 160.078830][ T8280] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 160.111948][ T8276] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 160.174052][ T8276] vlan2: entered promiscuous mode [ 160.421980][ T8298] net_ratelimit: 5 callbacks suppressed [ 160.422000][ T8298] netlink: zone id is out of range [ 160.435901][ T8298] netlink: zone id is out of range [ 160.472949][ T8298] netlink: zone id is out of range [ 160.482750][ T8298] netlink: zone id is out of range [ 160.502684][ T8298] netlink: zone id is out of range [ 160.513305][ T8298] netlink: zone id is out of range [ 160.535669][ T8298] netlink: zone id is out of range [ 160.542249][ T8298] netlink: zone id is out of range [ 160.603154][ T8298] netlink: set zone limit has 4 unknown bytes [ 161.067305][ T8330] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.090948][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.188133][ T54] Bluetooth: hci3: command 0x0401 tx timeout [ 161.211018][ T8341] netlink: 'syz.0.938': attribute type 2 has an invalid length. [ 161.233137][ T8341] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 161.464152][ T8349] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.716792][ T8362] netlink: 'syz.4.948': attribute type 9 has an invalid length. [ 162.050325][ T8381] netlink: 'syz.4.952': attribute type 3 has an invalid length. [ 162.395741][ T8395] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 162.455548][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.481470][ T8395] __nla_validate_parse: 6 callbacks suppressed [ 162.481493][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 162.561074][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.760100][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.791000][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 162.794655][ T8408] netlink: 'syz.2.960': attribute type 9 has an invalid length. [ 162.816871][ T8402] netlink: 92 bytes leftover after parsing attributes in process `syz.3.958'. [ 162.943760][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.254959][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 163.364349][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.374883][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.385436][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.405801][ T8424] tipc: Enabling of bearer rejected, failed to enable media [ 163.419035][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.437341][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.445015][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.452401][ T62] bridge_slave_1: left allmulticast mode [ 163.485505][ T62] bridge_slave_1: left promiscuous mode [ 163.493768][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.533231][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 163.560527][ T62] bridge_slave_0: left allmulticast mode [ 163.577873][ T62] bridge_slave_0: left promiscuous mode [ 163.585476][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.710523][ T8439] block nbd3: not configured, cannot reconfigure [ 164.195657][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.212660][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.224706][ T62] bond0 (unregistering): Released all slaves [ 164.356802][ T62] bond1 (unregistering): Released all slaves [ 164.371583][ T62] bond2 (unregistering): Released all slaves [ 164.388458][ T8450] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 164.404902][ T8451] netlink: 'syz.4.970': attribute type 5 has an invalid length. [ 164.416210][ T8451] netlink: 140 bytes leftover after parsing attributes in process `syz.4.970'. [ 164.520585][ T62] : left promiscuous mode [ 164.626210][ T8464] netlink: 'syz.4.973': attribute type 9 has an invalid length. [ 164.633765][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.971'. [ 164.681410][ T62] tipc: Left network mode [ 164.691682][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.971'. [ 164.717082][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.971'. [ 164.726114][ T8435] lo speed is unknown, defaulting to 1000 [ 164.914644][ T8478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.977'. [ 165.223419][ T8487] lo speed is unknown, defaulting to 1000 [ 165.345338][ T8494] team0: No ports can be present during mode change [ 165.358123][ T8494] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 165.510529][ T5242] Bluetooth: hci2: command tx timeout [ 165.667758][ T8505] netlink: 'syz.3.985': attribute type 9 has an invalid length. [ 165.702311][ T8486] lo speed is unknown, defaulting to 1000 [ 166.082049][ T8435] chnl_net:caif_netlink_parms(): no params data found [ 166.320512][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.349226][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.367394][ T8435] bridge_slave_0: entered allmulticast mode [ 166.392624][ T8435] bridge_slave_0: entered promiscuous mode [ 166.412083][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.423143][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.436215][ T8435] bridge_slave_1: entered allmulticast mode [ 166.463726][ T8435] bridge_slave_1: entered promiscuous mode [ 166.600725][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.743989][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.868139][ T8546] x_tables: duplicate underflow at hook 1 [ 167.026856][ T8555] netlink: 'syz.1.997': attribute type 9 has an invalid length. [ 167.091411][ T8435] team0: Port device team_slave_0 added [ 167.125412][ T8557] IPVS: Unknown mcast interface: rose0 [ 167.146844][ T8435] team0: Port device team_slave_1 added [ 167.198995][ T8560] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 167.253215][ T8560] team0: Device veth0_macvtap failed to register rx_handler [ 167.604590][ T5242] Bluetooth: hci2: command tx timeout [ 167.711937][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.756859][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.822615][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.859361][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.873193][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.904494][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.978575][ T62] hsr_slave_0: left promiscuous mode [ 167.986420][ T62] hsr_slave_1: left promiscuous mode [ 167.993733][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.002470][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.011566][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.021365][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.053825][ T62] veth1_macvtap: left promiscuous mode [ 168.066971][ T62] veth0_macvtap: left promiscuous mode [ 168.072678][ T62] veth1_vlan: left promiscuous mode [ 168.078528][ T62] veth0_vlan: left promiscuous mode [ 168.703829][ T62] team0 (unregistering): Port device team_slave_1 removed [ 168.760764][ T62] team0 (unregistering): Port device team_slave_0 removed [ 169.669937][ T5242] Bluetooth: hci2: command tx timeout [ 169.734853][ T8435] hsr_slave_0: entered promiscuous mode [ 169.754145][ T8435] hsr_slave_1: entered promiscuous mode [ 169.836237][ T8600] netlink: 'syz.3.1010': attribute type 9 has an invalid length. [ 170.957139][ T8630] __nla_validate_parse: 1 callbacks suppressed [ 170.957160][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 171.270967][ T8642] netlink: 'syz.3.1021': attribute type 9 has an invalid length. [ 171.291825][ T8644] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 171.317688][ T8644] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 171.345986][ T8644] syz_tun: entered promiscuous mode [ 171.387509][ T8644] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 171.406005][ T8646] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 171.625977][ T8435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.688867][ T8667] net_ratelimit: 3 callbacks suppressed [ 171.688889][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.694161][ T8435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.704854][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.716116][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.723224][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.739305][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.745911][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.755464][ T8435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.766839][ T5242] Bluetooth: hci2: command tx timeout [ 171.773603][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.787920][ T8663] netlink: 'syz.3.1028': attribute type 11 has an invalid length. [ 171.788480][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.799694][ T8435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.806317][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.815759][ T8667] dccp_invalid_packet: P.Data Offset(0) too small [ 171.997527][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.063586][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.104462][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.111707][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.130401][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.137648][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.258929][ T8435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.375588][ T8693] dvmrp0: entered allmulticast mode [ 172.446266][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 172.660493][ T8712] xt_bpf: check failed: parse error [ 172.701111][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.761623][ T8718] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 172.774345][ T8718] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 172.830064][ T8725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1045'. [ 172.888096][ T8435] veth0_vlan: entered promiscuous mode [ 172.907179][ T8435] veth1_vlan: entered promiscuous mode [ 172.929577][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 173.012116][ T8435] veth0_macvtap: entered promiscuous mode [ 173.024186][ T8435] veth1_macvtap: entered promiscuous mode [ 173.054065][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.065013][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.075564][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.088170][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.099437][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.119875][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.133503][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.144423][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 173.155615][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 173.198401][ T8734] can: request_module (can-proto-0) failed. [ 173.207130][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 173.219129][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.231207][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.242131][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.252847][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.262857][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.274863][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.287072][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.301360][ T8733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1049'. [ 173.313725][ T8435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.322857][ T8435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.331848][ T8435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.342293][ T8435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.608923][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.648195][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.747535][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.755416][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.778472][ T8745] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1053'. [ 173.928300][ T8761] x_tables: duplicate underflow at hook 2 [ 174.424423][ T8775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1060'. [ 174.638642][ T8788] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 174.667534][ T8788] bond0: (slave ): Enslaving as an active interface with an up link [ 174.679469][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.712719][ T8790] vlan4: entered promiscuous mode [ 175.143120][ T8816] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 175.229888][ T8822] xt_socket: unknown flags 0x2 [ 175.695396][ T8852] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.705287][ T8852] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.714652][ T8852] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.723774][ T8852] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.733105][ T8852] geneve2: entered promiscuous mode [ 175.740304][ T8852] geneve2: entered allmulticast mode [ 175.749776][ T8852] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.759495][ T8852] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.768553][ T8852] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.777809][ T8852] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.046286][ T8860] xt_l2tp: wrong L2TP version: 0 [ 176.212909][ T8872] __nla_validate_parse: 3 callbacks suppressed [ 176.213044][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 176.351015][ T8877] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.424060][ T8882] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1092'. [ 176.438888][ T8883] tipc: Started in network mode [ 176.450386][ T8883] tipc: Node identity 36cb8568ead4, cluster identity 4711 [ 176.462709][ T8883] tipc: Enabled bearer , priority 0 [ 176.592781][ T8883] tipc: Resetting bearer [ 176.668273][ T1053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.923105][ T62] tipc: Resetting bearer [ 176.941891][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.985821][ T8883] tipc: Resetting bearer [ 177.298133][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.307902][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.327187][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.351474][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.361739][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.370493][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.581052][ T46] tipc: Node number set to 3693053288 [ 179.289008][ T8883] tipc: Disabling bearer [ 179.306287][ T8913] netlink: 'syz.1.1100': attribute type 21 has an invalid length. [ 179.428086][ T5242] Bluetooth: hci2: command tx timeout [ 179.450580][ T1053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.500713][ T8914] lo speed is unknown, defaulting to 1000 [ 179.693090][ T1053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.791740][ T8937] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1106'. [ 179.816755][ T8928] bridge: RTM_NEWNEIGH with invalid ether address [ 179.829068][ T8936] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1106'. [ 179.839712][ T8937] net_ratelimit: 23 callbacks suppressed [ 179.839729][ T8937] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 179.886243][ T8936] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 179.981487][ T1053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.990615][ T8942] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 180.035749][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.043045][ T8940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.281853][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.342504][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.364825][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.434059][ T1053] bridge_slave_1: left allmulticast mode [ 180.450498][ T1053] bridge_slave_1: left promiscuous mode [ 180.477005][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.522785][ T1053] bridge_slave_0: left allmulticast mode [ 180.539944][ T1053] bridge_slave_0: left promiscuous mode [ 180.567517][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.690793][ T8963] hsr0: VLAN not yet supported [ 181.018970][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1114'. [ 181.390385][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.410764][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.428455][ T1053] bond0 (unregistering): Released all slaves [ 181.508941][ T5242] Bluetooth: hci2: command tx timeout [ 181.977565][ T9004] raw_sendmsg: syz.4.1120 forgot to set AF_INET. Fix it! [ 182.369533][ T9015] netlink: 'syz.2.1124': attribute type 30 has an invalid length. [ 182.499670][ T9017] netlink: 'syz.4.1126': attribute type 21 has an invalid length. [ 182.518121][ T9017] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1126'. [ 182.722564][ T1053] hsr_slave_0: left promiscuous mode [ 182.744818][ T1053] hsr_slave_1: left promiscuous mode [ 182.753807][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.766511][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.776004][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.783759][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.814747][ T1053] veth1_macvtap: left promiscuous mode [ 182.821146][ T1053] veth0_macvtap: left promiscuous mode [ 182.828191][ T1053] veth1_vlan: left promiscuous mode [ 182.833592][ T1053] veth0_vlan: left promiscuous mode [ 182.881901][ T9034] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.401218][ T9047] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 183.409802][ T9047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1134'. [ 183.587324][ T5242] Bluetooth: hci2: command tx timeout [ 183.694490][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 183.745048][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 184.282152][ T9031] infiniband syz0: set active [ 184.385660][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 184.436869][ T8914] chnl_net:caif_netlink_parms(): no params data found [ 184.437872][ T46] lo speed is unknown, defaulting to 1000 [ 184.651071][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'. [ 184.874407][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.890186][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.901139][ T8914] bridge_slave_0: entered allmulticast mode [ 184.909706][ T8914] bridge_slave_0: entered promiscuous mode [ 184.919556][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.927121][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.934391][ T8914] bridge_slave_1: entered allmulticast mode [ 184.941986][ T8914] bridge_slave_1: entered promiscuous mode [ 185.172414][ T8914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.223104][ T8914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.297718][ T9094] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 185.349172][ T8914] team0: Port device team_slave_0 added [ 185.381162][ T9100] bond2: (slave veth1_to_hsr): Enslaving as a backup interface with an up link [ 185.434197][ T8914] team0: Port device team_slave_1 added [ 185.559464][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.571469][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.605979][ T8914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.632725][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.647271][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.676885][ T5242] Bluetooth: hci2: command tx timeout [ 185.682318][ T8914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.704746][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 185.828361][ T8914] hsr_slave_0: entered promiscuous mode [ 185.846967][ T8914] hsr_slave_1: entered promiscuous mode [ 186.152663][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1155'. [ 186.398630][ T9134] x_tables: duplicate underflow at hook 1 [ 188.279204][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1156'. [ 188.384620][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 188.415331][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 188.448668][ T9137] netlink: 'syz.3.1159': attribute type 9 has an invalid length. [ 188.471840][ T9137] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1159'. [ 188.669019][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 188.714698][ T9161] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.724424][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 188.750989][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 188.835273][ T8914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.868378][ T8914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.913990][ T8914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.940763][ T8914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.156082][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.211943][ T8914] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.255180][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.262453][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.311401][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.318641][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.514776][ T9186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1175'. [ 189.833845][ T8914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.843358][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 189.977594][ T9203] Unsupported ieee802154 address type: 0 [ 190.098502][ T8914] veth0_vlan: entered promiscuous mode [ 190.149552][ T8914] veth1_vlan: entered promiscuous mode [ 190.252581][ T9218] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1184'. [ 190.277082][ T8914] veth0_macvtap: entered promiscuous mode [ 190.310631][ T8914] veth1_macvtap: entered promiscuous mode [ 190.409942][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.456834][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.488829][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.516454][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.527112][ T9232] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 190.546683][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.576468][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.597959][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.700327][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.713184][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.725165][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.737819][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.748039][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.762454][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.779292][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.794044][ T9240] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 190.810112][ T8914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.839711][ T8914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.851145][ T8914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.863645][ T8914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.140176][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.162326][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.172216][ T9267] netlink: 'syz.3.1197': attribute type 5 has an invalid length. [ 191.242741][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.253266][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.545120][ T9280] vlan0: entered promiscuous mode [ 191.855122][ T9299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.862978][ T9299] IPv6: NLM_F_CREATE should be set when creating new route [ 191.870321][ T9299] IPv6: NLM_F_CREATE should be set when creating new route [ 192.278111][ T9323] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 192.301231][ T9323] netlink: 'syz.2.1215': attribute type 3 has an invalid length. [ 192.319498][ T9320] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 192.639447][ T9341] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.664108][ T9341] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.684891][ T9341] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.701661][ T9341] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.726977][ T9341] geneve2: entered promiscuous mode [ 192.740743][ T9341] geneve2: entered allmulticast mode [ 192.797123][ T9341] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.814006][ T9341] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.824171][ T9341] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.834591][ T9341] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.898974][ T9349] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 192.929597][ T9349] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 192.938127][ T9352] nftables ruleset with unbound set [ 192.941852][ T9354] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 193.013347][ T9354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.134780][ T9355] bond4: (slave ip6gretap1): making interface the new active one [ 193.161978][ T9355] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 194.440440][ T1058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.471829][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.479041][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.913309][ T9433] netlink: 'syz.1.1251': attribute type 3 has an invalid length. [ 194.928226][ T9433] __nla_validate_parse: 10 callbacks suppressed [ 194.928245][ T9433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1251'. [ 195.028190][ T9429] vlan4: entered promiscuous mode [ 195.039374][ T9429] bond0: entered promiscuous mode [ 195.052638][ T9429] bond_slave_0: entered promiscuous mode [ 195.068992][ T9429] bond_slave_1: entered promiscuous mode [ 195.083248][ T9429] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.127392][ T9429] team0: Port device vlan4 added [ 195.168624][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.177300][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.185632][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.201449][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.210841][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 195.226667][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.351596][ T1058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.392844][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 195.473017][ T1058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.521776][ T9440] lo speed is unknown, defaulting to 1000 [ 195.618041][ T1058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.685892][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 195.729618][ T9457] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1259'. [ 195.764561][ T9457] netlink: 652 bytes leftover after parsing attributes in process `syz.2.1259'. [ 195.954045][ T1058] bridge_slave_1: left allmulticast mode [ 195.960254][ T1058] bridge_slave_1: left promiscuous mode [ 195.966081][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.019125][ T1058] bridge_slave_0: left allmulticast mode [ 196.024850][ T1058] bridge_slave_0: left promiscuous mode [ 196.043793][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.370138][ T9479] netlink: 'syz.3.1266': attribute type 7 has an invalid length. [ 196.452121][ T9482] netlink: 'syz.1.1265': attribute type 3 has an invalid length. [ 196.478960][ T9482] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1265'. [ 196.490162][ T9485] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1267'. [ 196.674961][ T9489] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 196.791286][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.804832][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.816376][ T1058] bond0 (unregistering): Released all slaves [ 197.037244][ T9494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1270'. [ 197.267673][ T5242] Bluetooth: hci0: command tx timeout [ 197.270342][ T54] Bluetooth: hci2: command tx timeout [ 197.383712][ T9518] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1278'. [ 197.821153][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 198.248507][ T9563] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1291'. [ 198.422001][ T9567] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 198.448176][ T9574] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 198.462523][ T9567] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 198.485656][ T9574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.536862][ T1058] hsr_slave_0: left promiscuous mode [ 198.544238][ T1058] hsr_slave_1: left promiscuous mode [ 198.569465][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.583158][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.594477][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.602296][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.628049][ T1058] veth1_macvtap: left promiscuous mode [ 198.635082][ T1058] veth0_macvtap: left promiscuous mode [ 198.641107][ T1058] veth1_vlan: left promiscuous mode [ 198.646991][ T1058] veth0_vlan: left promiscuous mode [ 199.271275][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 199.331125][ T1058] team0 (unregistering): Port device team_slave_0 removed [ 199.356640][ T54] Bluetooth: hci2: command tx timeout [ 199.883271][ T9574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.036226][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.063607][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.094653][ T9440] bridge_slave_0: entered allmulticast mode [ 200.104215][ T9440] bridge_slave_0: entered promiscuous mode [ 200.130041][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.150028][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.164268][ T9440] bridge_slave_1: entered allmulticast mode [ 200.186559][ T9440] bridge_slave_1: entered promiscuous mode [ 200.253582][ T9603] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 200.416002][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.424688][ T9614] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1303'. [ 200.474575][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.720305][ T9440] team0: Port device team_slave_0 added [ 200.729661][ T9627] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1308'. [ 200.739323][ T9627] nbd: illegal input index -8454144 [ 200.775460][ T9440] team0: Port device team_slave_1 added [ 200.893402][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 200.897264][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.924468][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.961669][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.044874][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.052240][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.078585][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.263809][ T9644] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1315'. [ 201.427003][ T5249] Bluetooth: hci2: command tx timeout [ 201.513398][ T9440] hsr_slave_0: entered promiscuous mode [ 201.547356][ T9440] hsr_slave_1: entered promiscuous mode [ 201.565682][ T9649] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.614718][ T9657] netlink: 'syz.3.1320': attribute type 13 has an invalid length. [ 201.625968][ T9657] veth0_macvtap: left promiscuous mode [ 201.639557][ T9657] macvtap0: entered allmulticast mode [ 201.659988][ T9657] macvtap0: refused to change device tx_queue_len [ 201.666943][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 201.673176][ T5249] Bluetooth: hci1: command 0x0406 tx timeout [ 201.678504][ T5245] Bluetooth: hci3: command 0x0401 tx timeout [ 201.754879][ T9662] netlink: 'syz.2.1321': attribute type 9 has an invalid length. [ 201.763605][ T9663] netlink: 'syz.2.1321': attribute type 9 has an invalid length. [ 201.771803][ T9662] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1321'. [ 201.781477][ T9663] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1321'. [ 202.159693][ T9683] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1326'. [ 202.456265][ T9440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.471692][ T9440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.490914][ T9440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.550251][ T9440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.704207][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 202.734577][ T9706] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 202.838640][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1336'. [ 202.862017][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1336'. [ 202.911164][ T9712] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 202.955028][ T9712] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 203.075521][ T9720] netlink: 'syz.4.1337': attribute type 9 has an invalid length. [ 203.082952][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.173955][ T9440] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.192211][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.200426][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.266108][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.273469][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.508197][ T54] Bluetooth: hci2: command tx timeout [ 203.804179][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.909885][ T9440] veth0_vlan: entered promiscuous mode [ 203.935550][ T9440] veth1_vlan: entered promiscuous mode [ 203.984489][ T9440] veth0_macvtap: entered promiscuous mode [ 203.995730][ T9759] xt_CT: No such helper "pptp" [ 204.016099][ T9440] veth1_macvtap: entered promiscuous mode [ 204.109640][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.124621][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.135719][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.155403][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.165822][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.176707][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.188597][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.203367][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.214499][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.224708][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.247058][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.263324][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.283579][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.302523][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.322392][ T9440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.340883][ T9440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.355023][ T9440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.364601][ T9440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.555756][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.570910][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.643488][ T9775] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 204.667147][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.695493][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.833673][ T9784] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 205.519061][ T9820] __nla_validate_parse: 4 callbacks suppressed [ 205.519116][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 205.715895][ T9831] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1373'. [ 205.718146][ T9828] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 205.784791][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1370'. [ 205.827475][ T5242] Bluetooth: hci2: command 0x0405 tx timeout [ 206.301185][ T9852] xt_CT: No such helper "pptp" [ 206.548509][ T9872] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 206.664391][ T5252] bond0: (slave syz_tun): Releasing backup interface [ 206.709490][ T9877] netlink: 'syz.4.1386': attribute type 4 has an invalid length. [ 206.866254][ T1058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.894206][ T1058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.077803][ T1058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.115810][ T1058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.148215][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1391'. [ 207.288799][ T1058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.323779][ T1058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.363580][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 207.444304][ T1058] bond0: (slave netdevsim0): Releasing backup interface [ 207.455753][ T1058] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 207.481244][ T1058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.507967][ T1058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.595692][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.608462][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.617341][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.626746][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.631061][ T9902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1393'. [ 207.658511][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.666050][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.768391][ T9909] lo speed is unknown, defaulting to 1000 [ 207.897995][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.934864][ T1058] bridge_slave_0: left allmulticast mode [ 207.940920][ T1058] bridge_slave_0: left promiscuous mode [ 207.952199][ T9922] netlink: 'syz.3.1398': attribute type 9 has an invalid length. [ 207.956079][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.976428][ T9922] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1398'. [ 208.122206][ T1058] bond0: left promiscuous mode [ 208.127938][ T1058] bond_slave_0: left promiscuous mode [ 208.133546][ T1058] bond_slave_1: left promiscuous mode [ 208.232319][ T1058] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 208.473864][ T1058] dvmrp0 (unregistering): left allmulticast mode [ 208.794926][ T1058] team0: Port device vlan4 removed [ 208.805725][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.822278][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.834039][ T1058] bond0 (unregistering): Released all slaves [ 208.978215][ T1058] bond1 (unregistering): Released all slaves [ 209.171378][ T1058] bond2 (unregistering): Released all slaves [ 209.189215][ T1058] bond3 (unregistering): Released all slaves [ 209.340960][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.360877][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.377039][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.400036][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.413093][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.421376][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.452903][ T1058] bond4 (unregistering): Released all slaves [ 209.504790][ T9926] netlink: 'syz.3.1398': attribute type 9 has an invalid length. [ 209.527209][ T9926] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1398'. [ 209.541329][ T9937] lo speed is unknown, defaulting to 1000 [ 209.627690][ T1058] IPVS: stopping backup sync thread 6359 ... [ 209.763580][ T5242] Bluetooth: hci2: command tx timeout [ 210.554924][ T9973] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 210.581120][ T9973] netlink: 'syz.2.1411': attribute type 2 has an invalid length. [ 210.674748][ T9973] netlink: 'syz.2.1411': attribute type 21 has an invalid length. [ 210.685562][ T9973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1411'. [ 210.715303][ T9973] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1411'. [ 210.868991][ T9981] openvswitch: netlink: Key type 4113 is out of range max 32 [ 210.931673][ T9909] chnl_net:caif_netlink_parms(): no params data found [ 211.135268][ T1058] hsr_slave_0: left promiscuous mode [ 211.142031][ T1058] hsr_slave_1: left promiscuous mode [ 211.183117][ T1058] veth1_macvtap: left promiscuous mode [ 211.196793][ T1058] veth1_vlan: left promiscuous mode [ 211.202385][ T1058] veth0_vlan: left promiscuous mode [ 211.514106][ T5242] Bluetooth: hci4: command tx timeout [ 211.826715][ T5242] Bluetooth: hci2: command tx timeout [ 211.924355][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 211.974695][ T1058] team0 (unregistering): Port device team_slave_0 removed [ 212.833424][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.850662][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.865565][ T9909] bridge_slave_0: entered allmulticast mode [ 212.882609][ T9909] bridge_slave_0: entered promiscuous mode [ 212.929618][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.957344][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.965756][ T9909] bridge_slave_1: entered allmulticast mode [ 212.987982][ T9909] bridge_slave_1: entered promiscuous mode [ 213.152915][ T9909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.171609][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 213.172844][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 213.238561][ T9909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.310509][T10038] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 213.318745][T10038] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1429'. [ 213.335872][T10038] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1429'. [ 213.341997][ T1058] IPVS: stop unused estimator thread 0... [ 213.390795][ T9909] team0: Port device team_slave_0 added [ 213.438779][ T9909] team0: Port device team_slave_1 added [ 213.576883][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.583983][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.614556][ T5242] Bluetooth: hci4: command tx timeout [ 213.623936][T10055] xt_hashlimit: invalid interval [ 213.643592][ T9909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.644996][T10050] xt_CT: No such helper "snmp" [ 213.695470][T10050] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1432'. [ 213.714437][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.728162][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.756754][ T9909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.775813][T10056] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 213.800266][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.807618][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.814988][ T9937] bridge_slave_0: entered allmulticast mode [ 213.822853][ T9937] bridge_slave_0: entered promiscuous mode [ 213.869281][ T1058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.906895][ T5242] Bluetooth: hci2: command tx timeout [ 213.940441][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.962939][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.976713][ T9937] bridge_slave_1: entered allmulticast mode [ 213.994305][ T9937] bridge_slave_1: entered promiscuous mode [ 214.022308][ T1058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.165429][T10070] Unsupported ieee802154 address type: 0 [ 214.223184][ T1058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.252531][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.269193][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 214.291539][ T9909] hsr_slave_0: entered promiscuous mode [ 214.316776][ T9909] hsr_slave_1: entered promiscuous mode [ 214.346187][ T9909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.387990][ T9909] Cannot create hsr debugfs directory [ 214.448724][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.510631][T10085] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1442'. [ 214.555477][ T1058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.585287][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1441'. [ 214.689031][ T9937] team0: Port device team_slave_0 added [ 214.721933][ T9937] team0: Port device team_slave_1 added [ 214.927538][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.934552][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.020558][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.160434][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.176585][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.242001][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.485468][ T9937] hsr_slave_0: entered promiscuous mode [ 215.491444][ T29] audit: type=1107 audit(1727148490.950:2): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Sg(2`rb>S;$nf6a1K?X' [ 215.519424][ T9937] hsr_slave_1: entered promiscuous mode [ 215.531454][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.548666][ T9937] Cannot create hsr debugfs directory [ 215.620598][ T1058] bridge_slave_1: left allmulticast mode [ 215.629360][ T1058] bridge_slave_1: left promiscuous mode [ 215.635232][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.666457][ T54] Bluetooth: hci4: command tx timeout [ 215.687157][ T1058] bridge_slave_0: left allmulticast mode [ 215.700634][ T1058] bridge_slave_0: left promiscuous mode [ 215.713863][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.994319][ T54] Bluetooth: hci2: command tx timeout [ 216.066033][T10133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1453'. [ 216.274329][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.291141][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.304287][ T1058] bond0 (unregistering): Released all slaves [ 216.331647][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1451'. [ 216.531218][T10135] netlink: 'syz.3.1454': attribute type 6 has an invalid length. [ 217.042390][T10149] veth1_macvtap: left promiscuous mode [ 217.073953][T10149] macsec0: entered promiscuous mode [ 217.086772][T10149] macsec0: entered allmulticast mode [ 217.497038][ T1058] hsr_slave_0: left promiscuous mode [ 217.503917][ T1058] hsr_slave_1: left promiscuous mode [ 217.523306][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.532522][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.547398][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.555117][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.628537][ T1058] veth1_macvtap: left promiscuous mode [ 217.645761][ T1058] veth0_macvtap: left promiscuous mode [ 217.651719][ T1058] veth1_vlan: left promiscuous mode [ 217.657553][ T1058] veth0_vlan: left promiscuous mode [ 217.766467][ T54] Bluetooth: hci4: command 0x0419 tx timeout [ 218.275569][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 218.332182][ T1058] team0 (unregistering): Port device team_slave_0 removed [ 218.868572][T10179] syzkaller1: entered promiscuous mode [ 218.874101][T10179] syzkaller1: entered allmulticast mode [ 219.067769][ T9909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.094905][ T9909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.155802][T10202] sctp: [Deprecated]: syz.2.1470 (pid 10202) Use of int in maxseg socket option. [ 219.155802][T10202] Use struct sctp_assoc_value instead [ 219.173340][ T1070] infiniband syz2: set down [ 219.248544][ T9909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.303004][ T9909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.698983][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1475'. [ 219.736119][ T9909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.782764][T10217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.805451][ T9909] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.836706][ T5242] Bluetooth: hci4: command 0x0419 tx timeout [ 219.849095][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.856271][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.911270][T10223] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.980264][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.987511][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.038089][ T9937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.072916][ T9937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.095319][ T9937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.120742][ T9937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.341107][T10234] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 220.427999][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.481383][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.531677][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.538943][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.640828][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.648086][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.702842][T10251] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1485'. [ 220.721216][T10251] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 220.774455][ T9909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.954232][ T9909] veth0_vlan: entered promiscuous mode [ 221.013071][ T9909] veth1_vlan: entered promiscuous mode [ 221.152136][ T9909] veth0_macvtap: entered promiscuous mode [ 221.165198][ T9909] veth1_macvtap: entered promiscuous mode [ 221.209139][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.220315][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.232149][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.246246][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.276803][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.296819][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.314716][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.342633][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.368077][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.384405][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.395840][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.405776][ T9909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.417043][ T9909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.428747][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.480251][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.498542][ T9909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.516974][ T9909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.525938][ T9909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.542700][ T9909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.720522][ T9937] veth0_vlan: entered promiscuous mode [ 221.748246][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 221.768748][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.784403][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.862409][ T9937] veth1_vlan: entered promiscuous mode [ 221.915011][ T5242] Bluetooth: hci4: command 0x0419 tx timeout [ 221.929783][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.971352][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.055361][T10293] dccp_v6_rcv: dropped packet with invalid checksum [ 222.063626][ T9937] veth0_macvtap: entered promiscuous mode [ 222.088430][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 222.119966][ T9937] veth1_macvtap: entered promiscuous mode [ 222.319578][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.336021][T10297] Unknown options in mask 1f4 [ 222.356928][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.386221][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.406582][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.424646][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.455604][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.468247][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.477991][T10306] SET target dimension over the limit! [ 222.481693][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.504977][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.521787][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 222.605830][T10309] netlink: 'syz.2.1499': attribute type 10 has an invalid length. [ 222.623247][T10309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1499'. [ 222.640176][T10309] batman_adv: batadv0: Adding interface: virt_wifi0 [ 222.655103][T10309] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.689203][T10309] batman_adv: batadv0: Interface activated: virt_wifi0 [ 222.714924][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.737175][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.756429][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.772760][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.796419][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.818214][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.847368][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.867273][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.888821][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.928299][ T9937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.955797][ T9937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.972275][ T9937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.982953][ T9937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.188973][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.206215][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.272941][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.297478][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.419900][ T9937] ================================================================== [ 223.428027][ T9937] BUG: KASAN: slab-use-after-free in sco_conn_del+0xa5/0x310 [ 223.435456][ T9937] Write of size 4 at addr ffff888022ee2080 by task syz-executor/9937 [ 223.443547][ T9937] [ 223.445916][ T9937] CPU: 1 UID: 0 PID: 9937 Comm: syz-executor Not tainted 6.11.0-syzkaller-01466-gc8770db2d544 #0 [ 223.456547][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 223.466665][ T9937] Call Trace: [ 223.469975][ T9937] [ 223.472931][ T9937] dump_stack_lvl+0x241/0x360 [ 223.477673][ T9937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.482907][ T9937] ? __pfx__printk+0x10/0x10 [ 223.487516][ T9937] ? _printk+0xd5/0x120 [ 223.491689][ T9937] ? __virt_addr_valid+0x183/0x530 [ 223.496809][ T9937] ? __virt_addr_valid+0x183/0x530 [ 223.501927][ T9937] print_report+0x169/0x550 [ 223.506458][ T9937] ? __virt_addr_valid+0x183/0x530 [ 223.511572][ T9937] ? __virt_addr_valid+0x183/0x530 [ 223.516692][ T9937] ? __virt_addr_valid+0x45f/0x530 [ 223.521814][ T9937] ? __phys_addr+0xba/0x170 [ 223.526338][ T9937] ? sco_conn_del+0xa5/0x310 [ 223.530947][ T9937] kasan_report+0x143/0x180 [ 223.535463][ T9937] ? sco_conn_del+0xa5/0x310 [ 223.540068][ T9937] kasan_check_range+0x282/0x290 [ 223.545106][ T9937] sco_conn_del+0xa5/0x310 [ 223.549535][ T9937] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 223.554856][ T9937] hci_conn_hash_flush+0xff/0x240 [ 223.559901][ T9937] hci_dev_close_sync+0x9ef/0x11a0 [ 223.565052][ T9937] hci_unregister_dev+0x20b/0x510 [ 223.570094][ T9937] vhci_release+0x83/0xd0 [ 223.574432][ T9937] ? __pfx_vhci_release+0x10/0x10 [ 223.579461][ T9937] __fput+0x24a/0x8a0 [ 223.583461][ T9937] task_work_run+0x24f/0x310 [ 223.588063][ T9937] ? __pfx_task_work_run+0x10/0x10 [ 223.593194][ T9937] ? do_exit+0xa2a/0x27f0 [ 223.597529][ T9937] ? kmem_cache_free+0x145/0x350 [ 223.602477][ T9937] do_exit+0xa2f/0x27f0 [ 223.606647][ T9937] ? __pfx_do_exit+0x10/0x10 [ 223.611248][ T9937] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.617259][ T9937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.623626][ T9937] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.628863][ T9937] ? lockdep_hardirqs_on+0x99/0x150 [ 223.634075][ T9937] do_group_exit+0x207/0x2c0 [ 223.638682][ T9937] __x64_sys_exit_group+0x3f/0x40 [ 223.643731][ T9937] x64_sys_call+0x2634/0x2640 [ 223.648419][ T9937] do_syscall_64+0xf3/0x230 [ 223.652936][ T9937] ? clear_bhb_loop+0x35/0x90 [ 223.657636][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.663548][ T9937] RIP: 0033:0x7fac36d7def9 [ 223.667976][ T9937] Code: Unable to access opcode bytes at 0x7fac36d7decf. [ 223.674991][ T9937] RSP: 002b:00007fff56fbbb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 223.683417][ T9937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac36d7def9 [ 223.691408][ T9937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 223.699377][ T9937] RBP: 00007fac36ddd508 R08: 00007fff56fb98a7 R09: 0000000000000003 [ 223.707361][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.715336][ T9937] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff56fbbcb0 [ 223.723322][ T9937] [ 223.726349][ T9937] [ 223.728679][ T9937] Allocated by task 10094: [ 223.733095][ T9937] kasan_save_track+0x3f/0x80 [ 223.737786][ T9937] __kasan_kmalloc+0x98/0xb0 [ 223.742385][ T9937] __kmalloc_noprof+0x1fc/0x400 [ 223.747242][ T9937] sk_prot_alloc+0xe0/0x210 [ 223.751751][ T9937] sk_alloc+0x38/0x370 [ 223.755818][ T9937] bt_sock_alloc+0x3c/0x340 [ 223.760329][ T9937] sco_sock_create+0xbb/0x390 [ 223.765023][ T9937] bt_sock_create+0x161/0x230 [ 223.769729][ T9937] __sock_create+0x490/0x920 [ 223.774326][ T9937] __sys_socket+0x150/0x3c0 [ 223.778842][ T9937] __x64_sys_socket+0x7a/0x90 [ 223.783531][ T9937] do_syscall_64+0xf3/0x230 [ 223.788051][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.793950][ T9937] [ 223.796270][ T9937] Freed by task 10092: [ 223.800449][ T9937] kasan_save_track+0x3f/0x80 [ 223.805135][ T9937] kasan_save_free_info+0x40/0x50 [ 223.810160][ T9937] poison_slab_object+0xe0/0x150 [ 223.815101][ T9937] __kasan_slab_free+0x37/0x60 [ 223.819896][ T9937] kfree+0x149/0x360 [ 223.823803][ T9937] __sk_destruct+0x479/0x5f0 [ 223.828395][ T9937] sco_sock_release+0x25e/0x320 [ 223.833250][ T9937] sock_close+0xbc/0x240 [ 223.837502][ T9937] __fput+0x24a/0x8a0 [ 223.841496][ T9937] task_work_run+0x24f/0x310 [ 223.846089][ T9937] do_exit+0xa2f/0x27f0 [ 223.850330][ T9937] do_group_exit+0x207/0x2c0 [ 223.854927][ T9937] __x64_sys_exit_group+0x3f/0x40 [ 223.859951][ T9937] x64_sys_call+0x2634/0x2640 [ 223.864635][ T9937] do_syscall_64+0xf3/0x230 [ 223.869148][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.875048][ T9937] [ 223.877373][ T9937] The buggy address belongs to the object at ffff888022ee2000 [ 223.877373][ T9937] which belongs to the cache kmalloc-2k of size 2048 [ 223.891514][ T9937] The buggy address is located 128 bytes inside of [ 223.891514][ T9937] freed 2048-byte region [ffff888022ee2000, ffff888022ee2800) [ 223.905397][ T9937] [ 223.907728][ T9937] The buggy address belongs to the physical page: [ 223.914169][ T9937] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22ee0 [ 223.922931][ T9937] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 223.931427][ T9937] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 223.939424][ T9937] page_type: 0xfdffffff(slab) [ 223.944100][ T9937] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 223.952682][ T9937] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 223.961274][ T9937] head: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 223.969945][ T9937] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 223.978622][ T9937] head: 00fff00000000003 ffffea00008bb801 ffffffffffffffff 0000000000000000 [ 223.987470][ T9937] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 223.996133][ T9937] page dumped because: kasan: bad access detected [ 224.002551][ T9937] page_owner tracks the page as allocated [ 224.008266][ T9937] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5233, tgid 5233 (syz-executor), ts 84599184041, free_ts 84591721256 [ 224.031018][ T9937] post_alloc_hook+0x1f3/0x230 [ 224.035791][ T9937] get_page_from_freelist+0x2e4c/0x2f10 [ 224.041348][ T9937] __alloc_pages_noprof+0x256/0x6c0 [ 224.046553][ T9937] alloc_slab_page+0x5f/0x120 [ 224.051236][ T9937] allocate_slab+0x5a/0x2f0 [ 224.055759][ T9937] ___slab_alloc+0xcd1/0x14b0 [ 224.060439][ T9937] __slab_alloc+0x58/0xa0 [ 224.064775][ T9937] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 224.070148][ T9937] psi_cgroup_alloc+0x56/0x210 [ 224.074913][ T9937] cgroup_mkdir+0x503/0xd30 [ 224.079423][ T9937] kernfs_iop_mkdir+0x253/0x3f0 [ 224.084279][ T9937] vfs_mkdir+0x2f9/0x4f0 [ 224.088521][ T9937] do_mkdirat+0x264/0x3a0 [ 224.092849][ T9937] __x64_sys_mkdirat+0x87/0xa0 [ 224.097615][ T9937] do_syscall_64+0xf3/0x230 [ 224.102127][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.108020][ T9937] page last free pid 5239 tgid 5239 stack trace: [ 224.114363][ T9937] free_unref_page+0xd22/0xea0 [ 224.119133][ T9937] __put_partials+0xeb/0x130 [ 224.123725][ T9937] put_cpu_partial+0x17c/0x250 [ 224.128487][ T9937] __slab_free+0x2ea/0x3d0 [ 224.132906][ T9937] qlist_free_all+0x9e/0x140 [ 224.137506][ T9937] kasan_quarantine_reduce+0x14f/0x170 [ 224.142975][ T9937] __kasan_slab_alloc+0x23/0x80 [ 224.147837][ T9937] __kmalloc_cache_noprof+0x132/0x2c0 [ 224.153212][ T9937] ref_tracker_alloc+0x14b/0x490 [ 224.158153][ T9937] netdev_get_by_index+0x7a/0xb0 [ 224.163090][ T9937] fib6_nh_init+0x1d8/0x2180 [ 224.167684][ T9937] ip6_route_info_create+0x999/0x12b0 [ 224.173064][ T9937] ip6_route_add+0x28/0x160 [ 224.177571][ T9937] addrconf_prefix_route+0x314/0x4e0 [ 224.182861][ T9937] inet6_addr_add+0x627/0xb00 [ 224.187549][ T9937] inet6_rtm_newaddr+0x8a3/0xc90 [ 224.192494][ T9937] [ 224.194812][ T9937] Memory state around the buggy address: [ 224.200437][ T9937] ffff888022ee1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.208495][ T9937] ffff888022ee2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.216555][ T9937] >ffff888022ee2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.224608][ T9937] ^ [ 224.228671][ T9937] ffff888022ee2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.236727][ T9937] ffff888022ee2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.244778][ T9937] ================================================================== [ 224.257067][ T9937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.264327][ T9937] CPU: 1 UID: 0 PID: 9937 Comm: syz-executor Not tainted 6.11.0-syzkaller-01466-gc8770db2d544 #0 [ 224.274857][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 224.284950][ T9937] Call Trace: [ 224.288266][ T9937] [ 224.291235][ T9937] dump_stack_lvl+0x241/0x360 [ 224.296048][ T9937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.301282][ T9937] ? __pfx__printk+0x10/0x10 [ 224.305921][ T9937] ? vscnprintf+0x5d/0x90 [ 224.310292][ T9937] panic+0x349/0x860 [ 224.314233][ T9937] ? check_panic_on_warn+0x21/0xb0 [ 224.319378][ T9937] ? __pfx_panic+0x10/0x10 [ 224.323848][ T9937] ? mark_lock+0x9a/0x350 [ 224.328213][ T9937] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 224.334147][ T9937] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 224.340081][ T9937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.346464][ T9937] ? print_report+0x502/0x550 [ 224.351185][ T9937] check_panic_on_warn+0x86/0xb0 [ 224.356134][ T9937] ? sco_conn_del+0xa5/0x310 [ 224.360737][ T9937] end_report+0x77/0x160 [ 224.364995][ T9937] kasan_report+0x154/0x180 [ 224.369524][ T9937] ? sco_conn_del+0xa5/0x310 [ 224.374131][ T9937] kasan_check_range+0x282/0x290 [ 224.379087][ T9937] sco_conn_del+0xa5/0x310 [ 224.383604][ T9937] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 224.388897][ T9937] hci_conn_hash_flush+0xff/0x240 [ 224.393937][ T9937] hci_dev_close_sync+0x9ef/0x11a0 [ 224.399061][ T9937] hci_unregister_dev+0x20b/0x510 [ 224.404097][ T9937] vhci_release+0x83/0xd0 [ 224.408432][ T9937] ? __pfx_vhci_release+0x10/0x10 [ 224.413577][ T9937] __fput+0x24a/0x8a0 [ 224.417667][ T9937] task_work_run+0x24f/0x310 [ 224.422264][ T9937] ? __pfx_task_work_run+0x10/0x10 [ 224.427381][ T9937] ? do_exit+0xa2a/0x27f0 [ 224.431709][ T9937] ? kmem_cache_free+0x145/0x350 [ 224.436652][ T9937] do_exit+0xa2f/0x27f0 [ 224.440826][ T9937] ? __pfx_do_exit+0x10/0x10 [ 224.445415][ T9937] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.451429][ T9937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.457776][ T9937] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.462992][ T9937] ? lockdep_hardirqs_on+0x99/0x150 [ 224.468203][ T9937] do_group_exit+0x207/0x2c0 [ 224.472800][ T9937] __x64_sys_exit_group+0x3f/0x40 [ 224.477827][ T9937] x64_sys_call+0x2634/0x2640 [ 224.482516][ T9937] do_syscall_64+0xf3/0x230 [ 224.487037][ T9937] ? clear_bhb_loop+0x35/0x90 [ 224.491724][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.497625][ T9937] RIP: 0033:0x7fac36d7def9 [ 224.502042][ T9937] Code: Unable to access opcode bytes at 0x7fac36d7decf. [ 224.509142][ T9937] RSP: 002b:00007fff56fbbb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 224.517564][ T9937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac36d7def9 [ 224.525537][ T9937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 224.533508][ T9937] RBP: 00007fac36ddd508 R08: 00007fff56fb98a7 R09: 0000000000000003 [ 224.541485][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.549720][ T9937] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff56fbbcb0 [ 224.557703][ T9937] [ 224.561043][ T9937] Kernel Offset: disabled [ 224.565370][ T9937] Rebooting in 86400 seconds..