last executing test programs: 1m0.98049848s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 50.157242321s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 39.770844848s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 28.56067932s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 17.69646925s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 8.020870974s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4000890) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000015) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7ead5765839143be}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7cce}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "c37d"}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) 1.674658363s ago: executing program 2 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x40) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r4, 0x0, 0x20, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x3, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000001000000001400000014000000030000000100000001000006040000000600000100000000002e00"], &(0x7f0000000080)=""/10, 0x2f, 0xa, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001ec0)="040f2997", 0x4}], 0x1}}], 0x2, 0x4000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, 0x0, 0x800) sendmsg$inet(r6, &(0x7f0000000d00)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000780)=[{&(0x7f00000000c0)="6b0800f7", 0x4}], 0x1}, 0xc8dac08f3e7a2a52) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x9}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x188, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x140, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x12c, 0x6, [@m_nat={0x78, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3ddd"}, {0xc}, {0xc}}}, @m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4}, {0x81, 0x6, "a707b36aaa9f7af7d3b4438eb81ccd8c40a11da73586f8e91ba98cf4b06aea06a75b1413c78cca3c419f9095aafa256bce3950c25943fca70489b3f03d378675d9c2515fcb79f523793a6f8477ff7f8e1546cfdfba51e1529bdfcf9ee8ae90bcb04ef45ca81ebd80db96f6ad88ea4314ba6ed68624e8a9cfca306226cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x600400c5}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000c40)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000000c80)="0690eb903d28e9824717695eba37a1e5f2905d38ac56d0387d28395263bccbe91791979d8260ba0eb8fc68486fe865b800bb84e04ead6b5191c93f302c428a3a94ad1d", 0x43}, {&(0x7f0000003140)="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", 0x125}, {&(0x7f0000000d80)="8619475fcbee6a130b4bde3fb9e40aef87239cf899c77a45e6ddcdfd1e926e1e9a44", 0x22}, {&(0x7f0000000dc0)="d90819d5b135cc9a4362c5b05259b17bd6f49773966c5098a0b92a4d9f100a6365e0a4b6c5d43ac452ef94c8e6c0f97fe5d52308a39a5260e866b21da36a326f52ee376b3442ee5d8af80c337931766763d36d38f4bb9171ed23138b7e9caf4c7cfbff55a24b28bb1e3777ecc91e84b9a652a967d2358e9178301330f68e494855c748258190fb6802373b16c54f3c580a99b508a4282b55", 0x98}, {&(0x7f0000000e80)="a383616db407d0a1953e33383ae6396ae502e1e09da457bc50002a36d99946d6a8cf4365bcd0ef4a4150474cbd1249134b6bfd9166a240bbc26ac08185b7618234df614a28f929756388ba86fe2bceead213bbb8eb83511449fa34e79fdc0c9d95b1782ce4fe1a08c9042b62041eb22b1ea68e79efbd832a30b0fb9bad9279c9573e2c2f87cc5fed409d5886c18b3d2048cce2b5536648b62502f5b2ae1d0896b2dd3ca24d89f927ee3b66031e8eb77b1ca8da63e3df9fdc35cef2b36630489999f8abff504159d286760655d05bd51be9bf52987f3fd766797df931c277440ff86308b6", 0xe4}], 0x6, &(0x7f0000003040)}, 0x80) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$FOU_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00ff07", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf2503000000040005000500030016000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007150000", @ANYRES32=0x0, @ANYBLOB="487000001972070008000a00", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="5fd1bab1471c28a8b312379044e7c3de5da1a8", 0x13, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc805) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000030c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000000801030000000000000000010000000900010073797a300000000006000240e855000014000480080004403e480ccadcd17ecc000000060500030021000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.607267871s ago: executing program 3 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf0, 0x3}, 0xfd}, 0x18, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000840) 1.469141621s ago: executing program 4 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.467812821s ago: executing program 2 (id=1276): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001009fc5d7d32342c852d74b62ccd949"], 0x2c}}, 0x40) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) sendto$l2tp(r4, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20004054) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000340)={'veth0\x00', 0x2000}) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x1298, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x1c}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "6f22d775374b9367c54f7ca8e30ae74e10edc1dd5d7b2f9b6d1076d44e2159149552b9d48dd3dd95e71b631740bb2a38d339bdca737c1f86f89db4cfe781b47db700650497a73c0b1e230cddfca0b163c9bc61b38760c5db9b98cbd6c4726a125790e1788cebdfa9f8e894e75a855be5286a8aee002f76b934e331753ad6056e81ff908de3ee81792b79d56475bf6b662eda37a3b288eefbba75561b2acf1df959458a0d95dd0bbca0943aaf837bd9b6aaf97ad8b9"}, @NL80211_ATTR_TESTDATA={0x18, 0x45, "18105a9d548f412c6be21298a56f1d74736dd5e5"}, @NL80211_ATTR_TESTDATA={0xac, 0x45, "ad2af9313f842fa49a5921e62fbeaabfdf7f240481bbda89e910f0fab6e985c79dcdf667178ad81a3ee566ca60c4b9e54514fd8cc19639c7686d2c31233b9f04cd202e971a5f52537ee06e835fa916f15bfe581891bdaa1933d3ae471e2fae3246009a51335746351fcd0a2cc2019a8416f9d045ad84a6fffde036839bb9ec4c0bb919719b59f87a74155c3753d2705d2f5a238275f4bc2447baeddbff3fed8dc73c2349fa043e1a"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "273662cbd27a65aa67422653e6b504c92c97cab2dba56f0f7099e353f8daf09f762e915cde73ed6288be93fd8a571fac65f44ed26c977b1e5c63226449ac4ab7a1d3bcb17e7c258fb5ad7c55c6088235188381fb1b05cc7cb17c5e0627eec4a15bd974f0ecd60fb3e9f1f766a9e6a9975fdc0c312ee0ed08a1d6636202fd199d2fabd680af97b53a45f8aad4b76a1a5503bd20c861b9f82bfc351db645cc347ef84ad17aa9719d3f3c134eb1e9dc199850de1a7d28848b76d68e7cf71c812a1b932614c2d19ff70fcb7463d8e4540189f7a5c8c86c3fef813cfbe5b350585b11f138e0737f68"}]}, 0x1298}}, 0x4004001) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 1.3492603s ago: executing program 4 (id=1277): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x6044095) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x22, 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xed50, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$key(0xf, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="e7fe8715e74b0ccf"], 0x8) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x1, 0x3, 0x4, 0x2}}, 0x26) sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0xa, 0x4e20, 0x760, @local, 0x4004}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000400)="f577ae6cfee995b93a601bd372d5576fec58806c322fe3561f1ad612a19ef0067109e85a291443efc938f8b13e065033a398c5093e12fcee4dc4b8918f197f16d3dca99186e42403a7fa4fefd521d3c78fb8a23933e2b74f1b8b48d9768130cbd149c53e7c174403f7cf71c402a74f5dc6b6a91a1238f9c3b9c7b363385a97daafa5e6b5ed44cbe8cdb90ab23716eb40819ae718dda0226159799d69d359aa823418b8fb84f17d41d53831da32f535b4b44b5947329257a6a448c36fad50d3dccb54dcf41de730f944387c59e3fdfa7177dcb5540b75f257f20871ecf0a788f61e599fa3fe246c7173c9fb749441178746", 0xf1}], 0x1, &(0x7f0000000580)}, 0x8810) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae9865", 0x15}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)}, 0x9}], 0x3, 0x2040, 0x0) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}], 0x3}, 0x5}], 0x1, 0x100, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/46, 0x2e}], 0x1}, 0x2140) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000001380)=0x5, 0x12) 1.346272151s ago: executing program 3 (id=1278): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40800, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x5b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x1, 0x2, 0x8, 0x9, 0xffffffffffffffff, 0x1}, @alu={0x7, 0x0, 0xc, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xe70, 0x88, &(0x7f0000000180)=""/136, 0x41100, 0x90, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x80000001, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x9, &(0x7f0000000640)=[r1, r0, r0, r1, r1, r1, r0, r1], &(0x7f0000000680)=[{0x2, 0x3, 0xd, 0x5}, {0x2, 0x1, 0x0, 0x4}, {0x4, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xb, 0x1}, {0x4, 0x5, 0x3, 0x7}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x1, 0x3, 0x2}, {0x1, 0x5, 0xb}, {0x4, 0x5, 0x0, 0x6}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.247623363s ago: executing program 3 (id=1279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1f, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xa, 0x3, 0x72ebfe3eb11f6e70, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @generic={0x5, 0xb, 0x8, 0xffb0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={r9, @in={{0x2, 0x4e22, @empty}}, 0x8000, 0x0, 0x0, 0x3, 0x90}, 0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r9, 0x1}, &(0x7f0000000240)=0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 960.860615ms ago: executing program 3 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000082}, 0x20004080) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f00000001c0)=0x28dc) accept4(r5, 0x0, 0x0, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x81, 0x8, 0x6, {{0x23, 0x4, 0x2, 0x13, 0x8c, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x13, 0x45, [@multicast1, @local, @multicast1, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x0, 0xd, "2bf5ae0fd8739dfd038cf0"}, {0x5, 0xd, "15ce252cbf065eab21fe03"}, {0x7, 0xf, "7120882deca2824ea1a83cd550"}, {0x2, 0x12, "ce17803965c1fe0c59eccf1d7b2f390a"}, {0x6, 0x12, "9b2007d6faafeb09ed3f7daa55600373"}]}, @timestamp={0x44, 0x10, 0x5a, 0x0, 0x5, [0x7fff, 0x9, 0x7]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8, 0x6000000, 0x4, 0x4, r4, 0x0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x5, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x5, 0x4ea7) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r9, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r3, 0x0) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x17}, 0xa) accept4(r2, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80, 0x800) 935.321521ms ago: executing program 1 (id=1281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010200000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000018000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 831.207604ms ago: executing program 3 (id=1282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd26, 0x100, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) sendmmsg$inet(r1, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xc) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) accept(r5, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300008ddc5071862885e9000a0000", @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) close(r8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) recvmsg$can_raw(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) 749.119135ms ago: executing program 1 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x0) 748.433345ms ago: executing program 3 (id=1284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c00000400000014000180d199a0a9334a708ea53ff30600060080d0eadf913f755cd89fd211e2fb164c2764a38e8784"], 0x2c}}, 0x8004) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pimreg\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) ppoll(&(0x7f0000000100)=[{r1, 0x1000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000580), 0x8) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x24022}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x1a0, 0x1403, 0x800, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040010}, 0xc800) 564.637796ms ago: executing program 2 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="050427a57000fedbdf250300000008000100", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 515.144795ms ago: executing program 2 (id=1286): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180021002c000f4600fffff7000000000400008004004d6c"], 0x18}], 0x1}, 0x0) 424.826194ms ago: executing program 2 (id=1287): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa86}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040845}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x20, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa86}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040845}, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x20, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x40090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 424.471407ms ago: executing program 1 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf0, 0x3}, 0xfd}, 0x18, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000840) 417.11601ms ago: executing program 4 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000003d00090000000800000000000100000004000000200001801c00108018000b8014001a00fc01000000000000000000000000000008000200", @ANYRES32, @ANYBLOB="5f309d553529c971f7c6e0ef635d1409d395a2bd0bed26c503a77eafef9e9eef1b2abcd9e019a80e4ce46e00dcbab8ce98b8b7df60dc5604aa052b76970b2eb48844f6140540a79f91c962c8541c20bb40d762e5d72f7444e8a0a6c389bcc28b0b80c921aa"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe6b}}], 0x1, 0x40) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180200181100009e481da2dd4e9aafb7c21c3f71d62cef33f93ec2223087e50a7128b758e49b8760907329937ee04f9ee7bb792a9c1e5e8e65b74791af693a05a6306a5dc7bdd6005d823aba1ba2b16d4c21000000000b826f35af48d47be1d6b63dfe4c230c3271c22089853458d357414f08be484d641f53dc5b5f6e9e94d8fc396bfa270899e96cb9976b160f3fcd06606cd6cadbdfe9efc149588ec1eed78c0ce55201eec6815cc001c26ba130b4da378ebf0b95c8dbeada327a38f48751d4243925a9ba08eb0e4e83ecdf7d3c6c63fcc70c3f272703378c23f7600000000070142fea27374f837001d6e0e92cce5aee0ad9496041ddb118f38dc4fe887c13a2289da93400d1f98228b4f97f87aef7257b8929ffaeadf20f56022da72168a405b2f4bc9e8dcd87286e8bec1023e2a360bc50b43c32fc8787c7b8180b3574796784ba8fea8959a98be15d770c9bbedf0d0c90ffa89d0db9d9f49d1ad9864e4e9f66edc1b089a03e3e3ed2f944eb21137ddccecc30856250e3349218fdc576516e95c498e1b5a238bbecd5f8aa22241a3032416d54a371127b296f5859aabd7aae97eac800000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x0, 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000000dc86"], 0x26}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x0, 0xfffffffd, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9d56}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffff9, 0x401}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}}, 0x0) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0xb, r7, 0x33, r8}, 0x10) 383.546697ms ago: executing program 2 (id=1290): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5f}], 0x1, 0x20000002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0), 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 280.832475ms ago: executing program 1 (id=1291): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xa, &(0x7f0000000080)=@raw=[@generic={0x1, 0xf, 0x8, 0x4, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xa}, @printk={@s}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) (async) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000540)=""/93, 0x5d}], 0x2}}, {{&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f00000009c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/78, 0x4e}, {&(0x7f0000000ac0)=""/229, 0xe5}], 0x4, &(0x7f0000000bc0)=""/189, 0xbd}, 0x100}, {{&(0x7f0000000c80)=@rc={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000d00)=""/206, 0xce}], 0x1, &(0x7f0000000e00)=""/194, 0xc2}, 0xe}], 0x3, 0x2000, 0x0) accept4(r3, 0x0, 0x0, 0x0) (async) shutdown(r3, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r4, 0x300, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x80) 278.9384ms ago: executing program 4 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x20, 0x0}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x10}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x90}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 221.677398ms ago: executing program 1 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2912}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xad0}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x200040c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) 199.925964ms ago: executing program 4 (id=1294): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x800}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) getpeername(r1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x8000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$inet6(r4, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @loopback, 0x6}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 84.735134ms ago: executing program 1 (id=1295): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000a00)) unshare(0x62040200) r2 = socket(0x9, 0x40000000002, 0xfffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) epoll_create1(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x200020000a84, 0xffffffffffffffff, 0x70000002, 0x200002b0, 0x200000200002e0, 0x3], 0x2, 0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r1, @ANYRES64=r4, @ANYBLOB="7e064b47af15a5cbdd4462a408023b2999022bd525f59335a95c7ad08c5d86a42a6a5b8ef6a1275e57ea8381eed4735d284cbb612346a93e46403f494b54f95acd3b91448758f5554c468550bef0e9bd5bff79da70da0ff08f5bc20d9d45844a983fddd7bceb55c4464409a3c10fee019d793acf336138da3ffbfac21dc25e4cfebe5bf3c1609af19aa9"]}, 0x11c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b8a5f3078e460389f77f5100"/112], 0xb8}}, 0x0) 0s ago: executing program 4 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): netlink: 1284 bytes leftover after parsing attributes in process `syz.4.410'. [ 121.918970][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 121.961225][ T7730] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.410'. [ 121.972058][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.013657][ T7730] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.410'. [ 122.023136][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.046483][ T7730] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.410'. [ 122.063959][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.077045][ T7730] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.410'. [ 122.094744][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.104348][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.112286][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.120849][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.132422][ T7730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.173855][ T5147] Bluetooth: hci3: command tx timeout [ 122.393466][ T7761] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 122.608078][ T7582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.638418][ T7582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.667242][ T7582] bond0 (unregistering): Released all slaves [ 122.864834][ T7749] __nla_validate_parse: 59 callbacks suppressed [ 122.864853][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 123.008812][ T7791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.417'. [ 123.121590][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 123.161992][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 123.210927][ T7805] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 123.480967][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 123.642525][ T7833] xt_nfacct: accounting object `syz1' does not exists [ 123.788614][ T7582] hsr_slave_0: left promiscuous mode [ 123.807919][ T7582] hsr_slave_1: left promiscuous mode [ 123.827115][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.844227][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.868323][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.876359][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.949166][ T7582] veth1_macvtap: left promiscuous mode [ 123.963238][ T7582] veth0_macvtap: left promiscuous mode [ 123.977749][ T7582] veth1_vlan: left promiscuous mode [ 123.994562][ T7582] veth0_vlan: left promiscuous mode [ 124.040212][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 124.249502][ T5147] Bluetooth: hci3: command tx timeout [ 124.536700][ T7582] team0 (unregistering): Port device team_slave_1 removed [ 124.578628][ T7582] team0 (unregistering): Port device team_slave_0 removed [ 125.083906][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.091171][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.113078][ T7652] bridge_slave_0: entered allmulticast mode [ 125.139368][ T7652] bridge_slave_0: entered promiscuous mode [ 125.236897][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.254012][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.271546][ T7652] bridge_slave_1: entered allmulticast mode [ 125.291987][ T7652] bridge_slave_1: entered promiscuous mode [ 125.383341][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.442300][ T7885] Cannot find del_set index 1 as target [ 125.454451][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.487392][ T7885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.436'. [ 125.617708][ T7652] team0: Port device team_slave_0 added [ 125.642735][ T7652] team0: Port device team_slave_1 added [ 125.714124][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.722364][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.758306][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.792389][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.818717][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.886464][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.915348][ T7898] netlink: 216 bytes leftover after parsing attributes in process `syz.3.440'. [ 125.993140][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 126.013100][ T7900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.442'. [ 126.187781][ T7652] hsr_slave_0: entered promiscuous mode [ 126.200399][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 126.210626][ T7652] hsr_slave_1: entered promiscuous mode [ 126.217366][ T7652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.225332][ T7652] Cannot create hsr debugfs directory [ 126.267077][ T7912] bond1: entered promiscuous mode [ 126.272262][ T7912] bond1: entered allmulticast mode [ 126.284627][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.333822][ T5147] Bluetooth: hci3: command tx timeout [ 126.518197][ T7934] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 126.588348][ T7912] bond1 (unregistering): Released all slaves [ 126.634670][ T7908] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 126.826358][ T7934] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.019516][ T7936] lo speed is unknown, defaulting to 1000 [ 127.903306][ T7945] team0 (unregistering): Port device team_slave_0 removed [ 127.921544][ T7945] team0 (unregistering): Port device team_slave_1 removed [ 128.398254][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.421165][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.456364][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.648762][ T7989] lo speed is unknown, defaulting to 1000 [ 129.246104][ T8011] lo speed is unknown, defaulting to 1000 [ 129.362455][ T7652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.407980][ T7652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.520035][ T7652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.551973][ T7652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.575705][ T8029] net_ratelimit: 55 callbacks suppressed [ 129.575726][ T8029] openvswitch: netlink: IP tunnel dst address not specified [ 129.590507][ T8028] openvswitch: netlink: IP tunnel dst address not specified [ 129.943167][ T8038] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 130.329800][ T8050] __nla_validate_parse: 4 callbacks suppressed [ 130.329817][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 130.349614][ T8038] veth0_vlan: left promiscuous mode [ 130.387492][ T8038] veth0_vlan: entered promiscuous mode [ 130.428645][ T8038] team0: Device veth0_vlan failed to register rx_handler [ 130.553634][ T8039] lo speed is unknown, defaulting to 1000 [ 130.693331][ T8066] netlink: 5 bytes leftover after parsing attributes in process `syz.1.470'. [ 131.016572][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.082569][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.148243][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.155463][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.244918][ T7583] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.252126][ T7583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.410822][ T7652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.868938][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 131.883271][ T8127] vlan3: entered promiscuous mode [ 132.021990][ T8131] x_tables: duplicate underflow at hook 1 [ 132.030488][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.133731][ T8137] netlink: 200 bytes leftover after parsing attributes in process `syz.1.482'. [ 132.166304][ T7652] veth0_vlan: entered promiscuous mode [ 132.222762][ T7652] veth1_vlan: entered promiscuous mode [ 132.307320][ T7652] veth0_macvtap: entered promiscuous mode [ 132.320923][ T7652] veth1_macvtap: entered promiscuous mode [ 132.341326][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.372387][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.389452][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.420011][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.450677][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.527292][ T8145] lo speed is unknown, defaulting to 1000 [ 132.528201][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.552646][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.564157][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.598606][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.628737][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.716138][ T7652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.738760][ T7652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.762175][ T7652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.811086][ T7652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.979003][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.000625][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.135785][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.173831][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.216249][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.334398][ T8175] netlink: 144 bytes leftover after parsing attributes in process `syz.1.491'. [ 133.401653][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 133.455155][ T8180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.491'. [ 133.490281][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 134.039194][ T8147] atomic_op ffff88802136e198 conn xmit_atomic 0000000000000000 [ 134.170359][ T7582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.321622][ T7582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.519763][ T7582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.029362][ T7582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.228335][ T7582] bridge_slave_1: left allmulticast mode [ 135.243732][ T7582] bridge_slave_1: left promiscuous mode [ 135.249657][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.266249][ T7582] bridge_slave_0: left allmulticast mode [ 135.271926][ T7582] bridge_slave_0: left promiscuous mode [ 135.279109][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.713752][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 135.972678][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.982648][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.003487][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.012416][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.024059][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.032670][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.174157][ T7582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.190475][ T7582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.201466][ T7582] bond0 (unregistering): Released all slaves [ 136.441143][ T8234] lo speed is unknown, defaulting to 1000 [ 136.686077][ T8243] lo speed is unknown, defaulting to 1000 [ 136.758968][ T7582] hsr_slave_0: left promiscuous mode [ 136.778582][ T7582] hsr_slave_1: left promiscuous mode [ 136.786183][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.813765][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.821857][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.845623][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.889728][ T7582] veth1_macvtap: left promiscuous mode [ 136.898041][ T7582] veth0_macvtap: left promiscuous mode [ 136.913802][ T7582] veth1_vlan: left promiscuous mode [ 136.919176][ T7582] veth0_vlan: left promiscuous mode [ 137.982516][ T7582] team0 (unregistering): Port device team_slave_1 removed [ 138.077521][ T7582] team0 (unregistering): Port device team_slave_0 removed [ 138.084902][ T5147] Bluetooth: hci3: command tx timeout [ 138.789179][ T8266] lo speed is unknown, defaulting to 1000 [ 138.858018][ T8269] lo speed is unknown, defaulting to 1000 [ 139.060218][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 139.431880][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.513'. [ 139.582430][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 139.790290][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.798773][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.806138][ T8234] bridge_slave_0: entered allmulticast mode [ 139.813251][ T8234] bridge_slave_0: entered promiscuous mode [ 139.821879][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.829523][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.859807][ T8234] bridge_slave_1: entered allmulticast mode [ 139.870814][ T8234] bridge_slave_1: entered promiscuous mode [ 140.007096][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.041109][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.163814][ T5147] Bluetooth: hci3: command tx timeout [ 140.187625][ T8234] team0: Port device team_slave_0 added [ 140.199291][ T8234] team0: Port device team_slave_1 added [ 140.306083][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.358112][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.425186][ T8234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.454593][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.468427][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.497789][ T8234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.515562][ T8327] lo speed is unknown, defaulting to 1000 [ 140.820606][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 140.847139][ T8234] hsr_slave_0: entered promiscuous mode [ 140.853231][ T8234] hsr_slave_1: entered promiscuous mode [ 140.892711][ T8234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.915127][ T8234] Cannot create hsr debugfs directory [ 141.097084][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.668584][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'. [ 142.244820][ T5147] Bluetooth: hci3: command tx timeout [ 142.266338][ T8415] netlink: 96 bytes leftover after parsing attributes in process `syz.4.541'. [ 142.282675][ T8234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.362626][ T8234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.432823][ T8234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.500067][ T8234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.618663][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 142.644566][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 142.654104][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 142.711728][ T8435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.858698][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.899979][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.948495][ T7583] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.955708][ T7583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.997958][ T8457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.015599][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.022725][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.044872][ T8460] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 143.055640][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 143.226512][ T8467] netlink: 'syz.2.552': attribute type 5 has an invalid length. [ 143.268432][ T8467] ip6erspan0: entered promiscuous mode [ 143.311679][ T8473] Cannot find add_set index 0 as target [ 143.363020][ T8474] syzkaller1: entered promiscuous mode [ 143.389070][ T8474] syzkaller1: entered allmulticast mode [ 143.558888][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.586151][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 143.749557][ T8234] veth0_vlan: entered promiscuous mode [ 143.776502][ T8484] lo speed is unknown, defaulting to 1000 [ 143.789244][ T8234] veth1_vlan: entered promiscuous mode [ 143.988672][ T8234] veth0_macvtap: entered promiscuous mode [ 144.248293][ T8234] veth1_macvtap: entered promiscuous mode [ 144.328984][ T5147] Bluetooth: hci3: command tx timeout [ 144.340618][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.373121][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.377696][ T8518] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 144.393679][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.413604][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.444805][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.496534][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.533648][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.564996][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.599322][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.664053][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.698720][ T8531] x_tables: duplicate underflow at hook 3 [ 144.751342][ T8537] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 144.801672][ T8534] bridge3: entered promiscuous mode [ 144.827848][ T8534] bridge3: entered allmulticast mode [ 144.916212][ T8534] team0: Port device bridge3 added [ 144.980131][ T8537] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 145.028134][ T8537] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 145.071422][ T8550] bridge0: port 1(ip6gretap0) entered blocking state [ 145.095575][ T8550] bridge0: port 1(ip6gretap0) entered disabled state [ 145.116257][ T8550] ip6gretap0: entered allmulticast mode [ 145.149068][ T8550] ip6gretap0: entered promiscuous mode [ 145.173442][ T8550] bridge0: port 1(ip6gretap0) entered blocking state [ 145.182228][ T8550] bridge0: port 1(ip6gretap0) entered forwarding state [ 145.236092][ T8234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.247968][ T8234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.263178][ T8234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.276850][ T8234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.632257][ T7583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.669352][ T7583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.767912][ T7583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.828325][ T7583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.858741][ T8594] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 145.894603][ T8594] netlink: 'syz.2.577': attribute type 3 has an invalid length. [ 145.953732][ T8594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.577'. [ 146.271778][ T8612] lo speed is unknown, defaulting to 1000 [ 146.367671][ T8619] xt_bpf: check failed: parse error [ 146.392031][ T8589] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 146.626881][ T3027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.796171][ T3027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.020587][ T3027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.112707][ T3027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.290193][ T3027] bridge_slave_1: left allmulticast mode [ 147.300183][ T3027] bridge_slave_1: left promiscuous mode [ 147.306936][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.321758][ T3027] bridge_slave_0: left allmulticast mode [ 147.329358][ T3027] bridge_slave_0: left promiscuous mode [ 147.339593][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.770806][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.793043][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.807513][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.821345][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.831419][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.839967][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.972647][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.983211][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.994128][ T3027] bond0 (unregistering): Released all slaves [ 148.004019][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 148.013084][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 148.117058][ T8674] lo speed is unknown, defaulting to 1000 [ 148.585227][ T8691] netlink: 156 bytes leftover after parsing attributes in process `syz.4.593'. [ 148.766824][ T8698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.832432][ T8714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.598'. [ 148.927975][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 149.009979][ T8698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.074455][ T3027] hsr_slave_0: left promiscuous mode [ 149.088198][ T3027] hsr_slave_1: left promiscuous mode [ 149.104329][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.116840][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.131471][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.139434][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.160537][ T3027] veth1_macvtap: left promiscuous mode [ 149.166302][ T3027] veth0_macvtap: left promiscuous mode [ 149.172001][ T3027] veth1_vlan: left promiscuous mode [ 149.178227][ T3027] veth0_vlan: left promiscuous mode [ 149.772888][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 149.855695][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 149.899522][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 149.933715][ T5147] Bluetooth: hci3: command tx timeout [ 150.292057][ T8698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.322087][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 150.498617][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 150.525365][ T8698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.712761][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 150.764590][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.784183][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.791937][ T8674] bridge_slave_0: entered allmulticast mode [ 150.835505][ T8674] bridge_slave_0: entered promiscuous mode [ 151.142379][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.158993][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.186265][ T8674] bridge_slave_1: entered allmulticast mode [ 151.207711][ T8674] bridge_slave_1: entered promiscuous mode [ 151.265568][ T8698] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.330692][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.358805][ T8698] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.397468][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.412634][ T8698] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.489502][ T8698] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.492744][ T8787] netlink: 112 bytes leftover after parsing attributes in process `syz.3.611'. [ 151.557844][ T8674] team0: Port device team_slave_0 added [ 151.591649][ T8674] team0: Port device team_slave_1 added [ 151.643742][ T8794] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 151.698616][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.708679][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.747386][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880341d2400: rx timeout, send abort [ 151.757865][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880341d2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.804203][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.821478][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.829228][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.857921][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.919320][ T8798] xt_bpf: check failed: parse error [ 151.941264][ T8800] Bluetooth: MGMT ver 1.23 [ 151.947846][ T8674] hsr_slave_0: entered promiscuous mode [ 151.964433][ T8674] hsr_slave_1: entered promiscuous mode [ 151.974325][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.990860][ T8674] Cannot create hsr debugfs directory [ 152.003965][ T5147] Bluetooth: hci3: command 0x041b tx timeout [ 152.342509][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.350039][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.524160][ T8806] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.545816][ T8806] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.573398][ T8806] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.584140][ T8806] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.595100][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 152.605508][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 152.617693][ T8806] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 152.648391][ T8806] veth3: left promiscuous mode [ 152.655750][ T8806] veth5: left promiscuous mode [ 152.661460][ T8806] veth7: left promiscuous mode [ 152.667534][ T8806] veth9: left promiscuous mode [ 152.673346][ T8806] veth11: left promiscuous mode [ 152.680091][ T8806] veth13: left promiscuous mode [ 152.686884][ T8806] veth15: left promiscuous mode [ 152.692838][ T8806] veth17: left promiscuous mode [ 152.699137][ T8806] veth19: left promiscuous mode [ 152.707292][ T5925] lo speed is unknown, defaulting to 1000 [ 152.749069][ T8819] bond0: option resend_igmp: invalid value (7540) [ 152.755723][ T3511] bond0: (slave bond_slave_1): interface is now down [ 152.755783][ T3511] bond0: (slave wlan1): interface is now down [ 152.775539][ T8819] bond0: option resend_igmp: allowed values 0 - 255 [ 152.797378][ T8820] team_slave_0: entered promiscuous mode [ 152.803406][ T8820] team_slave_1: entered promiscuous mode [ 152.836349][ T8827] x_tables: unsorted underflow at hook 3 [ 152.848203][ T8820] vlan3: entered promiscuous mode [ 152.853931][ T8820] team0: entered promiscuous mode [ 152.866742][ T8820] team0: left promiscuous mode [ 152.871910][ T8820] team_slave_0: left promiscuous mode [ 152.877405][ T8820] team_slave_1: left promiscuous mode [ 152.895224][ T7582] bond0: (slave bond_slave_1): interface is now down [ 152.909391][ T7582] bond0: (slave wlan1): interface is now down [ 152.946062][ T8823] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 153.056407][ T3027] bond0: (slave bond_slave_1): interface is now down [ 153.079144][ T3027] bond0: (slave wlan1): interface is now down [ 153.103140][ T3027] bond0: now running without any active interface! [ 153.486189][ T8674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.501333][ T8674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.514041][ T8674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.527189][ T8674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.631985][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.656442][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.669171][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.677134][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.699926][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.708576][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.971657][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.040654][ T8871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.048514][ T8871] IPv6: NLM_F_CREATE should be set when creating new route [ 154.056026][ T8871] IPv6: NLM_F_CREATE should be set when creating new route [ 154.063297][ T8871] IPv6: NLM_F_CREATE should be set when creating new route [ 154.085084][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 154.099423][ T8674] veth0_vlan: entered promiscuous mode [ 154.122334][ T8674] veth1_vlan: entered promiscuous mode [ 154.179714][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 154.194965][ T8674] veth0_macvtap: entered promiscuous mode [ 154.216683][ T8674] veth1_macvtap: entered promiscuous mode [ 154.255112][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.277538][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.290339][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.328520][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.352242][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.363863][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.381493][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.392633][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.421722][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.437435][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.462912][ T8879] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 154.482494][ T8674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.498511][ T8885] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.644'. [ 154.520863][ T8674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.531853][ T8674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.541713][ T8674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.776237][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.809355][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.840793][ T8899] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 154.901729][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.927418][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.086505][ T8907] lo speed is unknown, defaulting to 1000 [ 155.290131][ T8916] netlink: 48 bytes leftover after parsing attributes in process `syz.4.655'. [ 155.877022][ T8934] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 156.298537][ T8957] x_tables: duplicate underflow at hook 1 [ 156.544124][ T179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.416797][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 157.434417][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 157.471775][ T8980] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 157.493819][ T8980] netlink: 224 bytes leftover after parsing attributes in process `syz.4.674'. [ 158.020971][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.032009][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.040641][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.050030][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.065807][ T5147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.083394][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.221421][ T9002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.233380][ T9002] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 158.246121][ T9002] bond0 (unregistering): Released all slaves [ 158.297301][ T179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.445800][ T179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.481605][ T9026] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 158.720499][ T179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.948264][ T179] bridge_slave_1: left allmulticast mode [ 158.958736][ T9050] FAULT_INJECTION: forcing a failure. [ 158.958736][ T9050] name failslab, interval 1, probability 0, space 0, times 1 [ 158.973323][ T179] bridge_slave_1: left promiscuous mode [ 158.979484][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.018937][ T9050] CPU: 0 UID: 0 PID: 9050 Comm: syz.3.692 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 159.018964][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.018978][ T9050] Call Trace: [ 159.018987][ T9050] [ 159.018994][ T9050] dump_stack_lvl+0x241/0x360 [ 159.019023][ T9050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.019040][ T9050] ? __pfx__printk+0x10/0x10 [ 159.019070][ T9050] should_fail_ex+0x40a/0x550 [ 159.019097][ T9050] should_failslab+0xac/0x100 [ 159.019117][ T9050] ? skb_clone+0x20c/0x390 [ 159.019131][ T9050] kmem_cache_alloc_noprof+0x70/0x380 [ 159.019155][ T9050] skb_clone+0x20c/0x390 [ 159.019171][ T9050] __netlink_deliver_tap+0x3c4/0x7f0 [ 159.019198][ T9050] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.019213][ T9050] netlink_deliver_tap+0x19d/0x1b0 [ 159.019231][ T9050] netlink_unicast+0x7c4/0x990 [ 159.019260][ T9050] ? __pfx_netlink_unicast+0x10/0x10 [ 159.019280][ T9050] ? __virt_addr_valid+0x45f/0x530 [ 159.019297][ T9050] ? __phys_addr_symbol+0x2f/0x70 [ 159.019318][ T9050] ? __check_object_size+0x47a/0x730 [ 159.019343][ T9050] netlink_sendmsg+0x8de/0xcb0 [ 159.019372][ T9050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.019393][ T9050] ? aa_sock_msg_perm+0x91/0x160 [ 159.019419][ T9050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.019433][ T9050] __sock_sendmsg+0x221/0x270 [ 159.019453][ T9050] ____sys_sendmsg+0x53a/0x860 [ 159.019483][ T9050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.019501][ T9050] ? __fget_files+0x2a/0x410 [ 159.019523][ T9050] ? __fget_files+0x2a/0x410 [ 159.019551][ T9050] __sys_sendmsg+0x269/0x350 [ 159.019575][ T9050] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.019608][ T9050] ? do_sys_openat2+0x17a/0x1d0 [ 159.019659][ T9050] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.019690][ T9050] ? do_syscall_64+0x100/0x230 [ 159.019713][ T9050] ? do_syscall_64+0xb6/0x230 [ 159.019733][ T9050] do_syscall_64+0xf3/0x230 [ 159.019751][ T9050] ? clear_bhb_loop+0x35/0x90 [ 159.019774][ T9050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.019793][ T9050] RIP: 0033:0x7f7c1978d169 [ 159.019807][ T9050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.019819][ T9050] RSP: 002b:00007f7c1a584038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.019835][ T9050] RAX: ffffffffffffffda RBX: 00007f7c199a5fa0 RCX: 00007f7c1978d169 [ 159.019845][ T9050] RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000004 [ 159.019854][ T9050] RBP: 00007f7c1a584090 R08: 0000000000000000 R09: 0000000000000000 [ 159.019863][ T9050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.019872][ T9050] R13: 0000000000000000 R14: 00007f7c199a5fa0 R15: 00007ffcc0d775a8 [ 159.019894][ T9050] [ 159.298465][ T179] bridge_slave_0: left allmulticast mode [ 159.304225][ T179] bridge_slave_0: left promiscuous mode [ 159.310081][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.018827][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 160.030971][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.046000][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.058709][ T179] bond0 (unregistering): Released all slaves [ 160.068738][ T9009] chnl_net:caif_netlink_parms(): no params data found [ 160.163795][ T5846] Bluetooth: hci3: command tx timeout [ 160.552549][ T9097] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 160.640892][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.651827][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.659962][ T9009] bridge_slave_0: entered allmulticast mode [ 160.668168][ T9009] bridge_slave_0: entered promiscuous mode [ 160.671802][ T9100] netlink: 'syz.2.703': attribute type 62 has an invalid length. [ 160.702613][ T9009] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.710190][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.718051][ T9009] bridge_slave_1: entered allmulticast mode [ 160.728932][ T9009] bridge_slave_1: entered promiscuous mode [ 160.785622][ T179] hsr_slave_0: left promiscuous mode [ 160.805206][ T179] hsr_slave_1: left promiscuous mode [ 160.827618][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.844908][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.864916][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.872531][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.915522][ T179] veth1_macvtap: left promiscuous mode [ 160.921109][ T179] veth0_macvtap: left promiscuous mode [ 160.935553][ T179] veth1_vlan: left promiscuous mode [ 160.942373][ T179] veth0_vlan: left promiscuous mode [ 161.752345][ T179] team0 (unregistering): Port device team_slave_1 removed [ 161.806708][ T179] team0 (unregistering): Port device team_slave_0 removed [ 162.243787][ T5846] Bluetooth: hci3: command tx timeout [ 162.279040][ T9112] netlink: 'syz.3.706': attribute type 21 has an invalid length. [ 162.289768][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.706'. [ 162.341849][ T9009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.401808][ T9009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.461339][ T9009] team0: Port device team_slave_0 added [ 162.471136][ T9009] team0: Port device team_slave_1 added [ 162.582116][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.599350][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.628409][ T9009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.655429][ T9121] netlink: 6 bytes leftover after parsing attributes in process `syz.2.708'. [ 162.675693][ T9121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.699093][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.707480][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.740271][ T9009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.840606][ T9009] hsr_slave_0: entered promiscuous mode [ 162.866191][ T9009] hsr_slave_1: entered promiscuous mode [ 162.882721][ T9009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.892227][ T9009] Cannot create hsr debugfs directory [ 162.961755][ T9130] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 163.107129][ T9140] xt_ipcomp: unknown flags F7 [ 163.119025][ T9137] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.134053][ T9137] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.146397][ T9137] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.156532][ T9137] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.168549][ T9137] bond3: (slave geneve2): making interface the new active one [ 163.178680][ T9137] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 163.195466][ T9140] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 163.339153][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.716'. [ 163.373255][ T9147] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 163.383014][ T9147] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 163.394401][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 163.403207][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 163.420083][ T9147] netlink: 'syz.1.716': attribute type 19 has an invalid length. [ 163.430306][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 163.860156][ T9161] dvmrp0: left allmulticast mode [ 163.877967][ T9143] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 163.933674][ T9143] tun0: tun_chr_ioctl cmd 2148553947 [ 164.101427][ T9164] syzkaller1: entered promiscuous mode [ 164.113461][ T9164] syzkaller1: entered allmulticast mode [ 164.161546][ T9009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.188869][ T9009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.191703][ T9174] netlink: 124 bytes leftover after parsing attributes in process `syz.4.726'. [ 164.230792][ T9009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.284659][ T9009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.327134][ T5147] Bluetooth: hci3: command tx timeout [ 164.835409][ T9009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.946073][ T9009] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.988126][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.995358][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.032669][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.039856][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.105181][ T9009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.214906][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 165.247206][ T9208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.736'. [ 165.462726][ T9009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.583492][ T9224] netlink: 'syz.4.741': attribute type 10 has an invalid length. [ 165.586403][ T9009] veth0_vlan: entered promiscuous mode [ 165.635813][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 165.649306][ T9224] syz_tun: entered promiscuous mode [ 165.686947][ T9009] veth1_vlan: entered promiscuous mode [ 165.693138][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 165.785442][ T9009] veth0_macvtap: entered promiscuous mode [ 165.804819][ T9009] veth1_macvtap: entered promiscuous mode [ 165.850212][ T9235] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 165.858710][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.909491][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.926117][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.947609][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.972563][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.056481][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.067374][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.078518][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.093282][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.106923][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.124864][ T9009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.134425][ T9009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.143152][ T9009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.152045][ T9009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.226566][ T9251] pimreg: entered allmulticast mode [ 166.282193][ T9255] vxcan1: entered allmulticast mode [ 166.316759][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.336379][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.365187][ T9261] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 166.399862][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.409210][ T5147] Bluetooth: hci3: command 0x0419 tx timeout [ 166.437654][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.711983][ T9273] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 166.750884][ T9273] Tq€: entered promiscuous mode [ 166.860714][ T9283] netlink: 'syz.4.762': attribute type 9 has an invalid length. [ 166.873966][ T9281] erspan0: entered promiscuous mode [ 166.881574][ T9281] erspan0: left promiscuous mode [ 166.889079][ T9283] netlink: 'syz.4.762': attribute type 7 has an invalid length. [ 166.898867][ T9283] netlink: 'syz.4.762': attribute type 8 has an invalid length. [ 167.020093][ T9293] x_tables: duplicate underflow at hook 2 [ 167.496330][ T7583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.218586][ T7583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.581357][ T9326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 168.706301][ T9334] netlink: 'syz.2.777': attribute type 3 has an invalid length. [ 168.759155][ T9334] __nla_validate_parse: 4 callbacks suppressed [ 168.759173][ T9334] netlink: 92 bytes leftover after parsing attributes in process `syz.2.777'. [ 168.790221][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 168.809242][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 168.810143][ T7583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.946454][ T7583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.045651][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.062868][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.071444][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.082290][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.092563][ T5147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.100373][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.151975][ T7583] bridge_slave_1: left allmulticast mode [ 169.161613][ T7583] bridge_slave_1: left promiscuous mode [ 169.170295][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.180489][ T7583] bridge_slave_0: left allmulticast mode [ 169.186760][ T7583] bridge_slave_0: left promiscuous mode [ 169.192606][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.547681][ T7583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.559863][ T7583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.570998][ T7583] bond0 (unregistering): Released all slaves [ 169.771373][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.784'. [ 170.093325][ T9374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.790'. [ 170.177141][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'. [ 170.252940][ T9390] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 170.282296][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.362248][ T7583] hsr_slave_0: left promiscuous mode [ 170.372948][ T7583] hsr_slave_1: left promiscuous mode [ 170.379439][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.387582][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.396545][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.404453][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.426750][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 170.431707][ T7583] veth1_macvtap: left promiscuous mode [ 170.441994][ T7583] veth0_macvtap: left promiscuous mode [ 170.448435][ T7583] veth1_vlan: left promiscuous mode [ 170.452540][ T9399] netlink: 80 bytes leftover after parsing attributes in process `syz.1.794'. [ 170.454318][ T7583] veth0_vlan: left promiscuous mode [ 170.980277][ T7583] team0 (unregistering): Port device team_slave_1 removed [ 171.052589][ T7583] team0 (unregistering): Port device team_slave_0 removed [ 171.125825][ T5846] Bluetooth: hci3: command tx timeout [ 171.460023][ T9390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.471788][ T9390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 171.582800][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 171.654709][ T9412] netlink: 84 bytes leftover after parsing attributes in process `syz.1.798'. [ 171.675216][ T9416] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.870523][ T9426] bond0: option resend_igmp: invalid value (7540) [ 171.877456][ T9426] bond0: option resend_igmp: allowed values 0 - 255 [ 171.905739][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.912942][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.965622][ T9347] bridge_slave_0: entered allmulticast mode [ 171.977798][ T9347] bridge_slave_0: entered promiscuous mode [ 172.012279][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.047253][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.058274][ T9347] bridge_slave_1: entered allmulticast mode [ 172.065398][ T9347] bridge_slave_1: entered promiscuous mode [ 172.116476][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.191934][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.262337][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 172.293458][ T9347] team0: Port device team_slave_0 added [ 172.468368][ T9347] team0: Port device team_slave_1 added [ 172.576784][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.606701][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.643245][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.655257][ T9451] tipc: Enabling of bearer rejected, failed to enable media [ 172.704654][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.711742][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.843729][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.088122][ T9478] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 173.104799][ T9347] hsr_slave_0: entered promiscuous mode [ 173.111198][ T9347] hsr_slave_1: entered promiscuous mode [ 173.137995][ T9347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.155055][ T9347] Cannot create hsr debugfs directory [ 173.203728][ T5846] Bluetooth: hci3: command tx timeout [ 173.243971][ T9483] macvlan2: entered promiscuous mode [ 173.284226][ T9483] bond0: entered promiscuous mode [ 173.300416][ T9483] bond_slave_0: entered promiscuous mode [ 173.315475][ T9483] bond_slave_1: entered promiscuous mode [ 173.336332][ T9483] dummy0: entered promiscuous mode [ 173.347069][ T9483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.403346][ T9472] netlink: 'syz.2.815': attribute type 2 has an invalid length. [ 174.165996][ T9347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.178706][ T9347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.188982][ T9347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.199743][ T9347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.297480][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.339754][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.366968][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.374194][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.408276][ T7583] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.415510][ T7583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.868658][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.930759][ T9347] veth0_vlan: entered promiscuous mode [ 174.966582][ T9347] veth1_vlan: entered promiscuous mode [ 175.030753][ T9347] veth0_macvtap: entered promiscuous mode [ 175.042785][ T9347] veth1_macvtap: entered promiscuous mode [ 175.077250][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.100502][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.117428][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.151749][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.166692][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.183673][ T9552] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 175.185358][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.219248][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.233134][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.247319][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.259626][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.286483][ T9347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.286948][ T5147] Bluetooth: hci3: command tx timeout [ 175.296835][ T9347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.310952][ T9347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.351320][ T9347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.431789][ T9563] __nla_validate_parse: 4 callbacks suppressed [ 175.431807][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 175.715597][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.759698][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.857013][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.880500][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.160030][ T9594] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 176.176389][ T9594] netlink: 'syz.3.844': attribute type 4 has an invalid length. [ 176.194822][ T9594] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.844'. [ 176.971733][ T9611] netlink: 2348 bytes leftover after parsing attributes in process `syz.2.850'. [ 177.363810][ T5147] Bluetooth: hci3: command 0x0419 tx timeout [ 177.487659][ T9635] netlink: 'syz.1.857': attribute type 16 has an invalid length. [ 177.496376][ T9635] netlink: 'syz.1.857': attribute type 17 has an invalid length. [ 177.589396][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.608798][ T9635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.231970][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 178.322335][ T3511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.491038][ T3511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.612057][ T3511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.760972][ T3511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.933839][ T3511] bridge_slave_1: left allmulticast mode [ 178.943780][ T3511] bridge_slave_1: left promiscuous mode [ 178.949587][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.981813][ T3511] bridge_slave_0: left allmulticast mode [ 178.987799][ T3511] bridge_slave_0: left promiscuous mode [ 179.004278][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.581056][ T3511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.610693][ T3511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.654467][ T3511] bond0 (unregistering): Released all slaves [ 179.874453][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 179.962982][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.981482][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 179.982539][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.000958][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.025993][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.041292][ T5147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.066393][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.141938][ T9678] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 180.231324][ T3511] hsr_slave_0: left promiscuous mode [ 180.243228][ T3511] hsr_slave_1: left promiscuous mode [ 180.256654][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.273763][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.287396][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.302953][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.389273][ T3511] veth1_macvtap: left promiscuous mode [ 180.401880][ T3511] veth0_macvtap: left promiscuous mode [ 180.419454][ T3511] veth1_vlan: left promiscuous mode [ 180.438675][ T3511] veth0_vlan: left promiscuous mode [ 181.201356][ T9695] netlink: 80 bytes leftover after parsing attributes in process `syz.1.874'. [ 181.215053][ T3511] team0 (unregistering): Port device team_slave_1 removed [ 181.277175][ T3511] team0 (unregistering): Port device team_slave_0 removed [ 182.163818][ T5846] Bluetooth: hci3: command tx timeout [ 182.200465][ T9707] netlink: 472 bytes leftover after parsing attributes in process `syz.2.878'. [ 182.459435][ T9679] chnl_net:caif_netlink_parms(): no params data found [ 182.506252][ T9718] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 182.709793][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 182.720288][ T9726] netlink: 128 bytes leftover after parsing attributes in process `syz.1.882'. [ 182.740660][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.748376][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.751181][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.882'. [ 182.756175][ T9679] bridge_slave_0: entered allmulticast mode [ 182.771945][ T9679] bridge_slave_0: entered promiscuous mode [ 182.797718][ T9679] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.805064][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.812360][ T9679] bridge_slave_1: entered allmulticast mode [ 182.819553][ T9679] bridge_slave_1: entered promiscuous mode [ 182.895871][ T9679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.937692][ T9679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.058842][ T9679] team0: Port device team_slave_0 added [ 183.096421][ T9679] team0: Port device team_slave_1 added [ 183.135638][ T9733] syz.1.885: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.185024][ T9733] CPU: 1 UID: 0 PID: 9733 Comm: syz.1.885 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 183.185049][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.185059][ T9733] Call Trace: [ 183.185065][ T9733] [ 183.185071][ T9733] dump_stack_lvl+0x241/0x360 [ 183.185097][ T9733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.185115][ T9733] ? __pfx__printk+0x10/0x10 [ 183.185137][ T9733] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 183.185158][ T9733] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 183.185180][ T9733] warn_alloc+0x278/0x410 [ 183.185200][ T9733] ? __pfx_warn_alloc+0x10/0x10 [ 183.185223][ T9733] ? xskq_create+0xb6/0x170 [ 183.185239][ T9733] ? __get_vm_area_node+0x1c8/0x2d0 [ 183.185261][ T9733] ? __get_vm_area_node+0x25c/0x2d0 [ 183.185289][ T9733] __vmalloc_node_range_noprof+0x62f/0x1380 [ 183.185336][ T9733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.185363][ T9733] ? __kasan_kmalloc+0x98/0xb0 [ 183.185385][ T9733] vmalloc_user_noprof+0x74/0x80 [ 183.185401][ T9733] ? xskq_create+0xb6/0x170 [ 183.185417][ T9733] xskq_create+0xb6/0x170 [ 183.185436][ T9733] xsk_init_queue+0xa1/0x100 [ 183.185454][ T9733] xsk_setsockopt+0x560/0x810 [ 183.185486][ T9733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.185500][ T9733] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.185522][ T9733] ? __pfx_lock_acquire+0x10/0x10 [ 183.185542][ T9733] ? aa_sock_opt_perm+0x79/0x120 [ 183.185566][ T9733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.185581][ T9733] do_sock_setsockopt+0x3af/0x720 [ 183.185608][ T9733] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.185633][ T9733] ? __fget_files+0x395/0x410 [ 183.185652][ T9733] ? __fget_files+0x2a/0x410 [ 183.185679][ T9733] __x64_sys_setsockopt+0x1ee/0x280 [ 183.185705][ T9733] do_syscall_64+0xf3/0x230 [ 183.185723][ T9733] ? clear_bhb_loop+0x35/0x90 [ 183.185747][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.185766][ T9733] RIP: 0033:0x7f4778f8d169 [ 183.185781][ T9733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.185794][ T9733] RSP: 002b:00007f4779ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.185813][ T9733] RAX: ffffffffffffffda RBX: 00007f47791a6080 RCX: 00007f4778f8d169 [ 183.185824][ T9733] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 183.185834][ T9733] RBP: 00007f477900e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 183.185844][ T9733] R10: 00004000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 183.185855][ T9733] R13: 0000000000000001 R14: 00007f47791a6080 R15: 00007ffcfef94318 [ 183.185879][ T9733] [ 183.185884][ T9733] Mem-Info: [ 183.459757][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.472716][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.493668][ T9733] active_anon:9359 inactive_anon:0 isolated_anon:0 [ 183.493668][ T9733] active_file:1573 inactive_file:38365 isolated_file:0 [ 183.493668][ T9733] unevictable:768 dirty:158 writeback:0 [ 183.493668][ T9733] slab_reclaimable:10361 slab_unreclaimable:100646 [ 183.493668][ T9733] mapped:28879 shmem:1428 pagetables:905 [ 183.493668][ T9733] sec_pagetables:0 bounce:0 [ 183.493668][ T9733] kernel_misc_reclaimable:0 [ 183.493668][ T9733] free:1327985 free_pcp:1361 free_cma:0 [ 183.531805][ T9679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.555359][ T9733] Node 0 active_anon:37436kB inactive_anon:0kB active_file:6292kB inactive_file:153388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115516kB dirty:632kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11204kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no [ 183.592774][ T9733] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.638826][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.653339][ T9733] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.659803][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.682625][ T9733] lowmem_reserve[]: [ 183.707814][ T9679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.722537][ T9733] 0 2490 2490 0 0 [ 183.726515][ T9733] Node 0 DMA32 free:1393540kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:37596kB inactive_anon:0kB active_file:6292kB inactive_file:153064kB unevictable:1536kB writepending:628kB present:3129332kB managed:2549840kB mlocked:0kB bounce:0kB free_pcp:5140kB local_pcp:468kB free_cma:0kB [ 183.762499][ T9747] netlink: 'syz.2.889': attribute type 21 has an invalid length. [ 183.763028][ T9733] lowmem_reserve[]: 0 0 0 0 0 [ 183.777076][ T9747] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.777158][ T9747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.785468][ T9733] Node 0 [ 183.792289][ T9747] IPv6: NLM_F_CREATE should be set when creating new route [ 183.792281][ T9733] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.795308][ T9747] IPv6: NLM_F_CREATE should be set when creating new route [ 183.795329][ T9747] IPv6: NLM_F_CREATE should be set when creating new route [ 183.853775][ T9733] lowmem_reserve[]: 0 0 0 0 0 [ 183.858735][ T9733] Node 1 Normal free:3903524kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.923860][ T9679] hsr_slave_0: entered promiscuous mode [ 183.928699][ T9733] lowmem_reserve[]: 0 0 0 0 0 [ 183.930343][ T9679] hsr_slave_1: entered promiscuous mode [ 183.954585][ T9679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.955769][ T9733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.964541][ T9679] Cannot create hsr debugfs directory [ 183.980845][ T9733] Node 0 DMA32: 4*4kB (UE) 8*8kB (UME) 16*16kB (ME) 29*32kB (UE) 72*64kB (UME) 95*128kB (UM) 48*256kB (UME) 48*512kB (UME) 26*1024kB (UM) 8*2048kB (UME) 316*4096kB (UM) = 1392240kB [ 184.003104][ T9733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.022780][ T9733] Node 1 Normal: 227*4kB (UE) 63*8kB (UME) 40*16kB (UME) 199*32kB (UME) 97*64kB (UME) 28*128kB (UME) 15*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3903524kB [ 184.042173][ T9733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.056915][ T9733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.098710][ T9733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.125509][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 184.144020][ T9733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.157313][ T9733] 41366 total pagecache pages [ 184.162039][ T9733] 0 pages in swap cache [ 184.166531][ T9752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 184.181325][ T9733] Free swap = 124996kB [ 184.186097][ T9733] Total swap = 124996kB [ 184.190687][ T9733] 2097051 pages RAM [ 184.205878][ T9733] 0 pages HighMem/MovableOnly [ 184.210604][ T9733] 427869 pages reserved [ 184.230334][ T9733] 0 pages cma reserved [ 184.246301][ T5846] Bluetooth: hci3: command tx timeout [ 184.527446][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 184.557311][ T9764] caif0: Master is either lo or non-ether device [ 184.781040][ T9679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.804965][ T9679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.830956][ T9679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.851615][ T9679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.967677][ T9679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.013924][ T9679] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.039476][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.046756][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.088786][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.095994][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.197865][ T9679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.259646][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 185.282729][ T9790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 185.618755][ T9679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.732103][ T9679] veth0_vlan: entered promiscuous mode [ 185.852607][ T9679] veth1_vlan: entered promiscuous mode [ 186.093075][ T9679] veth0_macvtap: entered promiscuous mode [ 186.158416][ T9679] veth1_macvtap: entered promiscuous mode [ 186.231548][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.244825][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.255417][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.266619][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.279389][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.323782][ T5846] Bluetooth: hci3: command tx timeout [ 186.350221][ T9838] __nla_validate_parse: 22 callbacks suppressed [ 186.350241][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.916'. [ 186.368624][ T9829] sch_fq: defrate 2048 ignored. [ 186.384582][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.912'. [ 186.414570][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.428265][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.441872][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.453861][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.469340][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.525439][ T9844] netlink: 52 bytes leftover after parsing attributes in process `syz.4.918'. [ 186.553382][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 186.577075][ T9679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.604726][ T9679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.613462][ T9679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.674017][ T9679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.024259][ T9868] trusted_key: syz.4.925 sent an empty control message without MSG_MORE. [ 187.033317][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.052550][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.123384][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.145903][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.530440][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'. [ 187.558996][ T9883] xt_CT: No such helper "pptp" [ 187.565021][ T9883] netlink: 25 bytes leftover after parsing attributes in process `syz.1.930'. [ 187.574706][ T9883] gretap0: entered promiscuous mode [ 187.582397][ T9883] netlink: 5 bytes leftover after parsing attributes in process `syz.1.930'. [ 187.592671][ T9883] 0ªX¹¦Dö»: renamed from gretap0 [ 187.602918][ T9883] 0ªX¹¦Dö»: left promiscuous mode [ 187.622552][ T9883] 0ªX¹¦Dö»: entered allmulticast mode [ 187.748584][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 187.814376][ T9896] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 188.338303][ T9921] netlink: 45 bytes leftover after parsing attributes in process `syz.1.939'. [ 188.405924][ T9927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.420138][ T9922] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.831479][ T9939] team0 (unregistering): Port device bridge3 removed [ 188.896225][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.181284][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.249964][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.331819][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.445364][ T11] bridge_slave_1: left allmulticast mode [ 189.451283][ T11] bridge_slave_1: left promiscuous mode [ 189.460157][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.468912][ T11] bridge_slave_0: left allmulticast mode [ 189.475366][ T11] bridge_slave_0: left promiscuous mode [ 189.481614][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.958603][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.034211][ T9951] netlink: 276 bytes leftover after parsing attributes in process `syz.1.947'. [ 190.057436][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.121863][ T11] bond0 (unregistering): Released all slaves [ 190.491260][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.502496][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.521678][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.538819][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.548345][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.558251][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.170457][ T9999] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 191.182199][T10000] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 191.605785][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 191.605811][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 191.611893][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.439354][ T9999] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 192.441018][T10000] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 192.584710][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 192.656953][ T5147] Bluetooth: hci3: command tx timeout [ 192.690002][ T11] hsr_slave_0: left promiscuous mode [ 192.696422][ T11] hsr_slave_1: left promiscuous mode [ 192.702451][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.710812][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.721713][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.733848][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.769570][ T11] veth1_macvtap: left promiscuous mode [ 192.775722][ T11] veth0_macvtap: left promiscuous mode [ 192.781948][ T11] veth1_vlan: left promiscuous mode [ 192.788297][ T11] veth0_vlan: left promiscuous mode [ 193.321071][ T11] team0 (unregistering): Port device team_slave_1 removed [ 193.392347][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.682292][T10035] netlink: 'syz.4.969': attribute type 2 has an invalid length. [ 194.149300][T10024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.173596][T10024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.233207][T10035] : entered promiscuous mode [ 194.307295][T10024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.357245][T10024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.535377][T10024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.562589][T10024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.602440][T10048] gretap0: entered promiscuous mode [ 194.653473][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.724918][ T5147] Bluetooth: hci3: command tx timeout [ 194.725540][T10024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.744413][T10024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.898522][ T9979] chnl_net:caif_netlink_parms(): no params data found [ 194.946331][T10024] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.958297][T10024] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.990870][T10024] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.017191][T10024] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.034759][T10024] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.043402][T10024] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.060471][T10024] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.069113][T10024] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.102971][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.111603][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.122921][ T9979] bridge_slave_0: entered allmulticast mode [ 195.141677][ T9979] bridge_slave_0: entered promiscuous mode [ 195.151997][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.163339][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.172670][ T9979] bridge_slave_1: entered allmulticast mode [ 195.186196][ T9979] bridge_slave_1: entered promiscuous mode [ 195.246420][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.259913][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.343384][ T9979] team0: Port device team_slave_0 added [ 195.354621][ T9979] team0: Port device team_slave_1 added [ 195.400688][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.413789][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.444888][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.463923][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.470990][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.528874][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.602235][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 195.617483][ T9979] hsr_slave_0: entered promiscuous mode [ 195.633228][ T9979] hsr_slave_1: entered promiscuous mode [ 195.648415][ T9979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.672330][ T9979] Cannot create hsr debugfs directory [ 196.091334][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 196.311123][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.990'. [ 196.364364][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 196.625548][ T9979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.662830][ T9979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.677137][ T9979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.697740][ T9979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.803840][ T5147] Bluetooth: hci3: command tx timeout [ 196.868787][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.936721][ T9979] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.973030][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.980217][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.006764][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.013938][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.300360][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.369577][ T9979] veth0_vlan: entered promiscuous mode [ 197.414274][ T9979] veth1_vlan: entered promiscuous mode [ 197.491909][T10163] pim6reg: entered allmulticast mode [ 197.521933][ T9979] veth0_macvtap: entered promiscuous mode [ 197.547950][T10163] pim6reg: left allmulticast mode [ 197.665981][ T9979] veth1_macvtap: entered promiscuous mode [ 197.711418][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.742365][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.779071][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.805535][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.821688][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.868633][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.888124][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.913578][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.958671][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.004662][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.048105][ T9979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.073768][ T9979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.087164][ T9979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.110326][ T9979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.212889][T10202] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.269250][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1020'. [ 198.329994][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.361271][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.445484][ T7586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.462396][ T7586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.970349][T10218] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 199.319303][T10235] netlink: 'syz.2.1033': attribute type 5 has an invalid length. [ 199.336705][T10233] pim6reg9: entered allmulticast mode [ 199.917895][T10246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 201.298839][T10260] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 201.320739][T10260] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 201.380953][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 201.403401][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 201.491389][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.510185][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.519505][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.528427][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.537475][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.545571][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.737034][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.905680][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.116016][T10290] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1049'. [ 202.131303][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.214228][T10264] chnl_net:caif_netlink_parms(): no params data found [ 202.268096][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.436756][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.446277][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.453939][T10264] bridge_slave_0: entered allmulticast mode [ 202.460647][T10264] bridge_slave_0: entered promiscuous mode [ 202.505109][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.518613][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.528280][T10264] bridge_slave_1: entered allmulticast mode [ 202.538273][T10264] bridge_slave_1: entered promiscuous mode [ 202.627510][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.637459][ T35] bridge_slave_1: left allmulticast mode [ 202.653826][ T35] bridge_slave_1: left promiscuous mode [ 202.659611][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.675730][ T35] bridge_slave_0: left allmulticast mode [ 202.681588][ T35] bridge_slave_0: left promiscuous mode [ 202.687922][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.735478][T10305] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 202.852724][T10307] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 202.863471][T10307] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1053'. [ 202.879350][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 203.010763][T10315] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1052'. [ 203.189877][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.201284][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.215249][ T35] bond0 (unregistering): Released all slaves [ 203.230554][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.249761][T10307] ip6gre1: entered promiscuous mode [ 203.259644][T10309] netlink: 'syz.2.1052': attribute type 29 has an invalid length. [ 203.272093][T10313] netlink: 'syz.2.1052': attribute type 29 has an invalid length. [ 203.598087][T10264] team0: Port device team_slave_0 added [ 203.614430][ T5147] Bluetooth: hci3: command tx timeout [ 203.637635][T10264] team0: Port device team_slave_1 added [ 203.847078][T10340] bridge5: entered promiscuous mode [ 203.863389][T10340] bridge5: entered allmulticast mode [ 203.937137][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.944356][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.971553][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.985137][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.992111][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.018534][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.054883][ T35] hsr_slave_0: left promiscuous mode [ 204.061452][ T35] hsr_slave_1: left promiscuous mode [ 204.088817][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.103768][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.119245][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.141855][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.223245][ T35] veth1_macvtap: left promiscuous mode [ 204.230001][ T35] veth0_macvtap: left promiscuous mode [ 204.236123][ T35] veth1_vlan: left promiscuous mode [ 204.246230][ T35] veth0_vlan: left promiscuous mode [ 204.479808][T10363] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1069'. [ 204.776164][ T35] team0 (unregistering): Port device team_slave_1 removed [ 204.832354][ T35] team0 (unregistering): Port device team_slave_0 removed [ 205.036176][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 205.191704][T10376] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 205.686079][ T5147] Bluetooth: hci3: command tx timeout [ 205.802704][T10363] dummy0: entered promiscuous mode [ 205.812170][T10382] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 205.820790][T10382] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 205.842125][T10382] netlink: 'syz.2.1076': attribute type 10 has an invalid length. [ 205.861886][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 205.946991][T10264] hsr_slave_0: entered promiscuous mode [ 205.965276][T10264] hsr_slave_1: entered promiscuous mode [ 205.998338][T10264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.011900][T10264] Cannot create hsr debugfs directory [ 206.026730][T10382] bond0: entered promiscuous mode [ 206.041910][T10382] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 206.063869][T10382] bond0: entered allmulticast mode [ 206.069048][T10382] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 206.108136][T10382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 206.503113][T10413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1087'. [ 206.592854][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 207.062961][T10264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.096681][T10264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.121267][T10264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.158783][T10264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.204495][T10436] gretap0: entered promiscuous mode [ 207.218426][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 207.287387][T10436] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 56686 - 0 [ 207.322609][T10436] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 56686 - 0 [ 207.331646][T10436] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 56686 - 0 [ 207.341065][T10436] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 56686 - 0 [ 207.350347][T10436] geneve3: entered promiscuous mode [ 207.360205][T10436] geneve3: entered allmulticast mode [ 207.442992][T10264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.475752][T10264] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.512926][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.520136][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.561106][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.568336][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.768753][ T5147] Bluetooth: hci3: command tx timeout [ 207.848724][T10476] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 207.933904][T10476] netlink: 'syz.1.1105': attribute type 11 has an invalid length. [ 207.941771][T10476] netlink: 'syz.1.1105': attribute type 5 has an invalid length. [ 207.962772][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 208.003052][T10264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.037170][T10491] netlink: 'syz.4.1110': attribute type 12 has an invalid length. [ 208.074947][T10491] netlink: 'syz.4.1110': attribute type 9 has an invalid length. [ 208.250551][T10499] 0ªX¹¦Dö»: left allmulticast mode [ 208.297703][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 208.310043][T10509] netlink: 'syz.1.1112': attribute type 27 has an invalid length. [ 208.311550][T10506] openvswitch: netlink: Geneve option length err (len 5032, max 255). [ 208.355531][T10499] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 208.474777][T10512] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1115'. [ 208.491206][T10512] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 208.556184][T10264] veth0_vlan: entered promiscuous mode [ 208.575414][T10264] veth1_vlan: entered promiscuous mode [ 208.629745][T10264] veth0_macvtap: entered promiscuous mode [ 208.652371][T10264] veth1_macvtap: entered promiscuous mode [ 208.698476][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.709361][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.739735][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.755492][T10525] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 208.762508][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.788402][T10264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.830902][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1117'. [ 208.870429][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.881366][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.891746][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.902754][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.915015][T10264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.989112][T10264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.998962][T10264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.008535][T10264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.018323][T10264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.235927][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.264835][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.322369][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.344719][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.637836][T10551] __nla_validate_parse: 2 callbacks suppressed [ 209.637856][T10551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1126'. [ 210.182963][T10568] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1132'. [ 210.862280][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.940854][T10599] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1139'. [ 211.398643][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.579358][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.640255][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.716199][ T11] bridge_slave_1: left allmulticast mode [ 211.722046][ T11] bridge_slave_1: left promiscuous mode [ 211.727901][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.738617][ T11] bridge_slave_0: left allmulticast mode [ 211.744400][ T11] bridge_slave_0: left promiscuous mode [ 211.750115][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.097946][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 212.185074][T10611] validate_nla: 2 callbacks suppressed [ 212.185091][T10611] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 212.208739][T10611] netlink: 'syz.2.1141': attribute type 3 has an invalid length. [ 212.250608][T10611] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1141'. [ 212.265357][T10611] NCSI netlink: No device for ifindex 0 [ 212.279371][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.294678][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.314719][ T11] bond0 (unregistering): Released all slaves [ 212.562030][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.581717][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.591613][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.601325][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.609310][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.616991][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.931877][ T11] hsr_slave_0: left promiscuous mode [ 212.947329][ T11] hsr_slave_1: left promiscuous mode [ 212.960732][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.009438][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 213.014891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.044927][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.063039][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.126969][ T11] veth1_macvtap: left promiscuous mode [ 213.132555][ T11] veth0_macvtap: left promiscuous mode [ 213.139310][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 213.142371][ T11] veth1_vlan: left promiscuous mode [ 213.160125][ T11] veth0_vlan: left promiscuous mode [ 213.851787][ T11] team0 (unregistering): Port device team_slave_1 removed [ 213.893445][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.479181][T10660] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1153'. [ 214.497977][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 214.547993][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 214.561002][T10623] chnl_net:caif_netlink_parms(): no params data found [ 214.644592][ T5847] Bluetooth: hci3: command tx timeout [ 214.651151][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.661745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.734149][T10623] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.745388][T10675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.755392][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.773991][T10623] bridge_slave_0: entered allmulticast mode [ 214.781380][T10623] bridge_slave_0: entered promiscuous mode [ 214.855089][T10623] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.862850][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.877655][T10623] bridge_slave_1: entered allmulticast mode [ 214.889453][T10623] bridge_slave_1: entered promiscuous mode [ 214.924182][T10680] __nla_validate_parse: 1 callbacks suppressed [ 214.924200][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 214.964740][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.973324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.020848][T10623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.042342][T10623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.098004][T10623] team0: Port device team_slave_0 added [ 215.257528][T10693] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 215.290870][T10623] team0: Port device team_slave_1 added [ 215.389379][T10623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.393185][T10688] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 215.399955][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.430702][ T5925] IPVS: starting estimator thread 0... [ 215.503667][T10623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.524393][T10701] IPVS: using max 22 ests per chain, 52800 per kthread [ 215.637502][T10623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.649568][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.711648][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.720142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.722786][T10623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.001750][T10623] hsr_slave_0: entered promiscuous mode [ 216.050191][T10623] hsr_slave_1: entered promiscuous mode [ 216.057101][T10623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.079607][T10623] Cannot create hsr debugfs directory [ 216.098320][T10722] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 216.206763][T10722] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1164'. [ 216.731771][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.734713][ T5847] Bluetooth: hci3: command 0x041b tx timeout [ 216.740316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.399561][T10623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.426195][T10623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.456602][T10623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.471555][T10623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.506628][T10791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1183'. [ 217.533495][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1183'. [ 217.663138][T10623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.719613][T10623] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.741343][T10796] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1185'. [ 217.749937][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.757608][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.776642][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.783845][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.020890][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 218.082789][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 218.118661][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 218.147647][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 218.185022][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 218.241981][T10623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.345186][T10623] veth0_vlan: entered promiscuous mode [ 218.380983][T10623] veth1_vlan: entered promiscuous mode [ 218.455540][T10623] veth0_macvtap: entered promiscuous mode [ 218.475384][T10623] veth1_macvtap: entered promiscuous mode [ 218.541093][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.568354][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.588935][T10841] xt_limit: Overflow, try lower: 0/0 [ 218.608603][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.651287][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.672434][T10623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.691499][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.707296][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.720730][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.742781][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.760494][T10623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.785716][T10623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.797304][T10623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.813851][ T5147] Bluetooth: hci3: command 0x041b tx timeout [ 218.856641][T10623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.867241][T10623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.882171][T10854] batadv_slave_1: entered promiscuous mode [ 218.922199][T10853] batadv_slave_1: left promiscuous mode [ 219.046126][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.060640][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.134851][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.152568][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.468498][T10883] netlink: 'syz.3.1213': attribute type 2 has an invalid length. [ 219.827841][T10905] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 219.852064][ T46] net_ratelimit: 22 callbacks suppressed [ 219.852083][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.866321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.203745][T10930] __nla_validate_parse: 32 callbacks suppressed [ 220.203763][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 220.266958][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 220.293775][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 220.411318][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.724076][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.732464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.890788][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.899138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.201766][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.318394][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.562365][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.623042][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.733838][ T11] bridge_slave_1: left allmulticast mode [ 221.739611][ T11] bridge_slave_1: left promiscuous mode [ 221.745904][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.755325][ T11] bridge_slave_0: left allmulticast mode [ 221.760987][ T11] bridge_slave_0: left promiscuous mode [ 221.766989][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.932692][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.941486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.970893][T10960] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 222.116736][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 222.468277][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.488150][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.498365][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.509443][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.518962][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.526753][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.590422][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.601889][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.617842][ T11] bond0 (unregistering): Released all slaves [ 222.853720][T10980] Cannot find add_set index 0 as target [ 222.863128][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 222.908862][T10985] vlan0: entered promiscuous mode [ 222.946988][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 222.964351][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.194017][ T11] hsr_slave_0: left promiscuous mode [ 223.207551][ T11] hsr_slave_1: left promiscuous mode [ 223.230321][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.239068][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.259851][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.269896][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.400697][ T11] veth1_macvtap: left promiscuous mode [ 223.413150][ T11] veth0_macvtap: left promiscuous mode [ 223.428961][ T11] veth1_vlan: left promiscuous mode [ 223.443908][ T11] veth0_vlan: left promiscuous mode [ 224.144452][ T11] team0 (unregistering): Port device team_slave_1 removed [ 224.187068][ T11] team0 (unregistering): Port device team_slave_0 removed [ 224.567631][ T5147] Bluetooth: hci3: command tx timeout [ 224.595089][T11018] batadv_slave_1: entered promiscuous mode [ 224.607531][T10976] chnl_net:caif_netlink_parms(): no params data found [ 224.770022][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888066d62000: rx timeout, send abort [ 224.779035][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888066d62000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.842426][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.851091][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.859094][T10976] bridge_slave_0: entered allmulticast mode [ 224.869622][T10976] bridge_slave_0: entered promiscuous mode [ 224.879755][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.887285][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.894936][T10976] bridge_slave_1: entered allmulticast mode [ 224.902102][T10976] bridge_slave_1: entered promiscuous mode [ 224.968679][T10976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.011672][T10976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.055533][ T5925] net_ratelimit: 6 callbacks suppressed [ 225.055553][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.070090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.109030][T10976] team0: Port device team_slave_0 added [ 225.137461][T10976] team0: Port device team_slave_1 added [ 225.222442][T10976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.241044][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.270838][T10976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.288071][T10976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.296713][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.326041][T10976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.363934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.397305][T10976] hsr_slave_0: entered promiscuous mode [ 225.408898][T10976] hsr_slave_1: entered promiscuous mode [ 225.415366][T10976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.422991][T10976] Cannot create hsr debugfs directory [ 225.450825][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1260'. [ 225.463014][T11056] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 225.573902][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 225.609865][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 225.932647][T10976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.957681][T10976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.988798][T10976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.021584][T10976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.120627][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.129101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.186928][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.229215][T11082] x_tables: unsorted entry at hook 2 [ 226.242598][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.268803][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.276016][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.309500][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.316699][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.427787][T10976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.485771][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.494208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.622820][T11095] bridge0: port 1(veth0_to_bridge) entered blocking state [ 226.638295][T11099] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 226.643799][ T5147] Bluetooth: hci3: command tx timeout [ 226.650611][T11095] bridge0: port 1(veth0_to_bridge) entered disabled state [ 226.674952][T11096] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 226.682804][T11096] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1271'. [ 226.695362][T11095] veth0_to_bridge: entered allmulticast mode [ 226.708141][T11095] veth0_to_bridge: entered promiscuous mode [ 226.721949][T11099] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1271'. [ 226.738836][T11096] team0: entered promiscuous mode [ 226.754518][T11096] team_slave_0: entered promiscuous mode [ 226.760506][T11096] team_slave_1: entered promiscuous mode [ 226.780404][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 226.895180][T10976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.972638][T10976] veth0_vlan: entered promiscuous mode [ 226.995672][T10976] veth1_vlan: entered promiscuous mode [ 227.066936][T10976] veth0_macvtap: entered promiscuous mode [ 227.083374][T10976] veth1_macvtap: entered promiscuous mode [ 227.101085][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.112267][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.133019][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.141884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.151290][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.161930][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.177040][T10976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.193897][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.206330][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.217541][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.230609][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.243391][T10976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.255496][T10976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.264625][T10976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.273449][T10976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.282735][T10976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.356552][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.371588][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.402862][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.424383][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.012426][T11150] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 228.075964][T11153] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 228.193428][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 228.212619][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 228.222327][T11162] netlink: 'syz.1.1293': attribute type 18 has an invalid length. [ 228.723851][ T5847] Bluetooth: hci3: command tx timeout [ 229.167322][T11167] ================================================================== [ 229.175437][T11167] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 229.182832][T11167] Write of size 8 at addr ffff888027e845a0 by task syz.1.1295/11167 [ 229.190792][T11167] [ 229.193110][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.1.1295 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 229.193125][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.193133][T11167] Call Trace: [ 229.193139][T11167] [ 229.193144][T11167] dump_stack_lvl+0x241/0x360 [ 229.193162][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.193176][T11167] ? __pfx__printk+0x10/0x10 [ 229.193188][T11167] ? _printk+0xd5/0x120 [ 229.193199][T11167] ? __virt_addr_valid+0x183/0x530 [ 229.193211][T11167] ? __virt_addr_valid+0x183/0x530 [ 229.193223][T11167] print_report+0x16e/0x5b0 [ 229.193238][T11167] ? __virt_addr_valid+0x183/0x530 [ 229.193249][T11167] ? __virt_addr_valid+0x183/0x530 [ 229.193259][T11167] ? __virt_addr_valid+0x45f/0x530 [ 229.193270][T11167] ? __phys_addr+0xba/0x170 [ 229.193287][T11167] ? sco_conn_put+0xad/0x210 [ 229.193301][T11167] kasan_report+0x143/0x180 [ 229.193316][T11167] ? sco_conn_put+0xad/0x210 [ 229.193331][T11167] sco_conn_put+0xad/0x210 [ 229.193344][T11167] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 229.193358][T11167] hci_conn_hash_flush+0x1be/0x350 [ 229.193378][T11167] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 229.193395][T11167] ? drain_workqueue+0x2d3/0x3a0 [ 229.193412][T11167] ? hci_discovery_set_state+0x57/0x180 [ 229.193434][T11167] hci_dev_close_sync+0xa8b/0x1260 [ 229.193452][T11167] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 229.193466][T11167] ? rcu_is_watching+0x15/0xb0 [ 229.193481][T11167] hci_unregister_dev+0x20b/0x510 [ 229.193496][T11167] vhci_release+0x80/0xd0 [ 229.193510][T11167] ? __pfx_vhci_release+0x10/0x10 [ 229.193527][T11167] __fput+0x3e9/0x9f0 [ 229.193549][T11167] task_work_run+0x24f/0x310 [ 229.193567][T11167] ? __pfx_task_work_run+0x10/0x10 [ 229.193580][T11167] ? do_exit+0xa25/0x28e0 [ 229.193600][T11167] ? do_exit+0xa25/0x28e0 [ 229.193621][T11167] do_exit+0xa2a/0x28e0 [ 229.193642][T11167] ? __pfx_do_exit+0x10/0x10 [ 229.193661][T11167] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 229.193681][T11167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.193700][T11167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.193716][T11167] ? _raw_spin_lock_irq+0xdf/0x120 [ 229.193731][T11167] do_group_exit+0x207/0x2c0 [ 229.193747][T11167] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.193759][T11167] ? lockdep_hardirqs_on+0x99/0x150 [ 229.193775][T11167] get_signal+0x168c/0x1720 [ 229.193793][T11167] ? __pfx_get_signal+0x10/0x10 [ 229.193809][T11167] arch_do_signal_or_restart+0x96/0x860 [ 229.193825][T11167] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 229.193839][T11167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.193859][T11167] ? syscall_exit_to_user_mode+0xa3/0x340 [ 229.193875][T11167] syscall_exit_to_user_mode+0xce/0x340 [ 229.193891][T11167] do_syscall_64+0x100/0x230 [ 229.193906][T11167] ? clear_bhb_loop+0x35/0x90 [ 229.193924][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.193940][T11167] RIP: 0033:0x7f4778f8d169 [ 229.193951][T11167] Code: Unable to access opcode bytes at 0x7f4778f8d13f. [ 229.193958][T11167] RSP: 002b:00007f4779ece0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.193972][T11167] RAX: fffffffffffffe00 RBX: 00007f47791a5fa8 RCX: 00007f4778f8d169 [ 229.193981][T11167] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47791a5fa8 [ 229.193990][T11167] RBP: 00007f47791a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 229.193998][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47791a5fac [ 229.194006][T11167] R13: 0000000000000000 R14: 00007ffcfef94230 R15: 00007ffcfef94318 [ 229.194019][T11167] [ 229.194023][T11167] [ 229.535562][T11167] Allocated by task 10920: [ 229.539963][T11167] kasan_save_track+0x3f/0x80 [ 229.544631][T11167] __kasan_kmalloc+0x98/0xb0 [ 229.549205][T11167] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 229.555606][T11167] kmalloc_reserve+0x111/0x2a0 [ 229.560369][T11167] pskb_expand_head+0x1ee/0x1440 [ 229.565299][T11167] netlink_trim+0x1d6/0x2e0 [ 229.569792][T11167] netlink_broadcast_filtered+0x76/0x12a0 [ 229.575500][T11167] nlmsg_notify+0xfb/0x1c0 [ 229.579901][T11167] __dev_notify_flags+0xf7/0x400 [ 229.584827][T11167] dev_change_flags+0xf0/0x1a0 [ 229.589576][T11167] do_setlink+0xcca/0x4300 [ 229.593978][T11167] rtnl_newlink+0x1425/0x1da0 [ 229.598811][T11167] rtnetlink_rcv_msg+0x791/0xcf0 [ 229.603736][T11167] netlink_rcv_skb+0x206/0x480 [ 229.608482][T11167] netlink_unicast+0x7f6/0x990 [ 229.613233][T11167] netlink_sendmsg+0x8de/0xcb0 [ 229.617980][T11167] __sock_sendmsg+0x221/0x270 [ 229.622643][T11167] ____sys_sendmsg+0x53a/0x860 [ 229.627396][T11167] __sys_sendmsg+0x269/0x350 [ 229.631973][T11167] do_syscall_64+0xf3/0x230 [ 229.636464][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.642348][T11167] [ 229.644656][T11167] Freed by task 10920: [ 229.648713][T11167] kasan_save_track+0x3f/0x80 [ 229.653376][T11167] kasan_save_free_info+0x40/0x50 [ 229.658399][T11167] __kasan_slab_free+0x59/0x70 [ 229.663149][T11167] kfree+0x196/0x430 [ 229.667031][T11167] skb_release_data+0x6a0/0x8a0 [ 229.671869][T11167] consume_skb+0x9f/0xf0 [ 229.676098][T11167] netlink_broadcast_filtered+0x116d/0x12a0 [ 229.681982][T11167] nlmsg_notify+0xfb/0x1c0 [ 229.686384][T11167] __dev_notify_flags+0xf7/0x400 [ 229.691342][T11167] dev_change_flags+0xf0/0x1a0 [ 229.696188][T11167] do_setlink+0xcca/0x4300 [ 229.700588][T11167] rtnl_newlink+0x1425/0x1da0 [ 229.705248][T11167] rtnetlink_rcv_msg+0x791/0xcf0 [ 229.710179][T11167] netlink_rcv_skb+0x206/0x480 [ 229.714924][T11167] netlink_unicast+0x7f6/0x990 [ 229.719694][T11167] netlink_sendmsg+0x8de/0xcb0 [ 229.724440][T11167] __sock_sendmsg+0x221/0x270 [ 229.729382][T11167] ____sys_sendmsg+0x53a/0x860 [ 229.734178][T11167] __sys_sendmsg+0x269/0x350 [ 229.738789][T11167] do_syscall_64+0xf3/0x230 [ 229.743313][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.749207][T11167] [ 229.751527][T11167] The buggy address belongs to the object at ffff888027e84000 [ 229.751527][T11167] which belongs to the cache kmalloc-2k of size 2048 [ 229.765571][T11167] The buggy address is located 1440 bytes inside of [ 229.765571][T11167] freed 2048-byte region [ffff888027e84000, ffff888027e84800) [ 229.779716][T11167] [ 229.782031][T11167] The buggy address belongs to the physical page: [ 229.788429][T11167] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27e80 [ 229.797194][T11167] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.805765][T11167] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.813302][T11167] page_type: f5(slab) [ 229.817267][T11167] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 229.825831][T11167] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 229.834397][T11167] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 229.843054][T11167] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 229.851719][T11167] head: 00fff00000000003 ffffea00009fa001 ffffffffffffffff 0000000000000000 [ 229.860384][T11167] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 229.869045][T11167] page dumped because: kasan: bad access detected [ 229.875450][T11167] page_owner tracks the page as allocated [ 229.881155][T11167] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25, tgid 25 (kworker/1:0), ts 70897782995, free_ts 70778255453 [ 229.902101][T11167] post_alloc_hook+0x1f4/0x240 [ 229.906860][T11167] get_page_from_freelist+0x365c/0x37a0 [ 229.912391][T11167] __alloc_frozen_pages_noprof+0x292/0x710 [ 229.918190][T11167] alloc_pages_mpol+0x311/0x660 [ 229.923024][T11167] allocate_slab+0x8f/0x3a0 [ 229.927599][T11167] ___slab_alloc+0xc27/0x14a0 [ 229.932262][T11167] __slab_alloc+0x58/0xa0 [ 229.936577][T11167] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 229.942975][T11167] kmalloc_reserve+0x111/0x2a0 [ 229.947726][T11167] __alloc_skb+0x1f3/0x440 [ 229.952129][T11167] mld_newpack+0x17c/0xc70 [ 229.956535][T11167] add_grec+0x1492/0x19a0 [ 229.960848][T11167] mld_ifc_work+0x691/0xd90 [ 229.965338][T11167] process_scheduled_works+0xabe/0x18e0 [ 229.970867][T11167] worker_thread+0x870/0xd30 [ 229.975453][T11167] kthread+0x7a9/0x920 [ 229.979519][T11167] page last free pid 5838 tgid 5838 stack trace: [ 229.985823][T11167] free_frozen_pages+0xe0d/0x10e0 [ 229.990839][T11167] __slab_free+0x2c2/0x380 [ 229.995238][T11167] qlist_free_all+0x9a/0x140 [ 229.999814][T11167] kasan_quarantine_reduce+0x14f/0x170 [ 230.005254][T11167] __kasan_slab_alloc+0x23/0x80 [ 230.010089][T11167] __kmalloc_noprof+0x236/0x4c0 [ 230.014977][T11167] tomoyo_realpath_from_path+0xcf/0x5e0 [ 230.020518][T11167] tomoyo_path_number_perm+0x239/0x770 [ 230.025961][T11167] security_file_ioctl+0xc6/0x2a0 [ 230.030970][T11167] __se_sys_ioctl+0x46/0x170 [ 230.035540][T11167] do_syscall_64+0xf3/0x230 [ 230.040031][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.045929][T11167] [ 230.048239][T11167] Memory state around the buggy address: [ 230.053847][T11167] ffff888027e84480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.061888][T11167] ffff888027e84500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.069936][T11167] >ffff888027e84580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.077974][T11167] ^ [ 230.083063][T11167] ffff888027e84600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.091108][T11167] ffff888027e84680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.099153][T11167] ================================================================== [ 230.120480][ T46] net_ratelimit: 7 callbacks suppressed [ 230.120495][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.120959][T11167] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.120973][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.1.1295 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 230.120992][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.121002][T11167] Call Trace: [ 230.121008][T11167] [ 230.121015][T11167] dump_stack_lvl+0x241/0x360 [ 230.121038][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.121055][T11167] ? __pfx__printk+0x10/0x10 [ 230.121069][T11167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.121094][T11167] ? vscnprintf+0x5d/0x90 [ 230.121112][T11167] panic+0x349/0x880 [ 230.121127][T11167] ? check_panic_on_warn+0x21/0xb0 [ 230.121148][T11167] ? __pfx_panic+0x10/0x10 [ 230.121167][T11167] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 230.121186][T11167] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.121206][T11167] check_panic_on_warn+0x86/0xb0 [ 230.121227][T11167] ? sco_conn_put+0xad/0x210 [ 230.121244][T11167] end_report+0x77/0x160 [ 230.121262][T11167] kasan_report+0x154/0x180 [ 230.121282][T11167] ? sco_conn_put+0xad/0x210 [ 230.121302][T11167] sco_conn_put+0xad/0x210 [ 230.121318][T11167] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 230.121336][T11167] hci_conn_hash_flush+0x1be/0x350 [ 230.121361][T11167] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 230.121389][T11167] ? drain_workqueue+0x2d3/0x3a0 [ 230.121410][T11167] ? hci_discovery_set_state+0x57/0x180 [ 230.121431][T11167] hci_dev_close_sync+0xa8b/0x1260 [ 230.121454][T11167] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 230.121473][T11167] ? rcu_is_watching+0x15/0xb0 [ 230.121494][T11167] hci_unregister_dev+0x20b/0x510 [ 230.121512][T11167] vhci_release+0x80/0xd0 [ 230.121530][T11167] ? __pfx_vhci_release+0x10/0x10 [ 230.121549][T11167] __fput+0x3e9/0x9f0 [ 230.121574][T11167] task_work_run+0x24f/0x310 [ 230.121593][T11167] ? __pfx_task_work_run+0x10/0x10 [ 230.121608][T11167] ? do_exit+0xa25/0x28e0 [ 230.121629][T11167] ? do_exit+0xa25/0x28e0 [ 230.121654][T11167] do_exit+0xa2a/0x28e0 [ 230.121677][T11167] ? __pfx_do_exit+0x10/0x10 [ 230.121696][T11167] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.121716][T11167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.121735][T11167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.121754][T11167] ? _raw_spin_lock_irq+0xdf/0x120 [ 230.121773][T11167] do_group_exit+0x207/0x2c0 [ 230.121793][T11167] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.121809][T11167] ? lockdep_hardirqs_on+0x99/0x150 [ 230.121830][T11167] get_signal+0x168c/0x1720 [ 230.121853][T11167] ? __pfx_get_signal+0x10/0x10 [ 230.121873][T11167] arch_do_signal_or_restart+0x96/0x860 [ 230.121894][T11167] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 230.121912][T11167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.121938][T11167] ? syscall_exit_to_user_mode+0xa3/0x340 [ 230.121959][T11167] syscall_exit_to_user_mode+0xce/0x340 [ 230.121979][T11167] do_syscall_64+0x100/0x230 [ 230.121999][T11167] ? clear_bhb_loop+0x35/0x90 [ 230.122021][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.122041][T11167] RIP: 0033:0x7f4778f8d169 [ 230.122055][T11167] Code: Unable to access opcode bytes at 0x7f4778f8d13f. [ 230.122064][T11167] RSP: 002b:00007f4779ece0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.122083][T11167] RAX: fffffffffffffe00 RBX: 00007f47791a5fa8 RCX: 00007f4778f8d169 [ 230.122095][T11167] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47791a5fa8 [ 230.122106][T11167] RBP: 00007f47791a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.122116][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47791a5fac [ 230.122126][T11167] R13: 0000000000000000 R14: 00007ffcfef94230 R15: 00007ffcfef94318 [ 230.122144][T11167] [ 230.126317][T11167] Kernel Offset: disabled