last executing test programs: 1m16.099652382s ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.17452589s ago: executing program 1 (id=1371): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000ffffffff03540e000000000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1607ef4fec6db28a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x8001, 0xfffffdd5, r3}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x2, 0x4, 0x8, r1}, &(0x7f0000000240)=0x10) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4100000000000000faff1b0000000a0004007770616e33000000080001"], 0x28}}, 0x0) 1m11.719906028s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000280)="9a23f60fa1a7927ca46653d30c465822faf84e5c940e2db1bd189bd494f99da12a39736d5ce1fa7d75d6a3c6c8933a95b442a536af274b5a960dd0086d4d81fec2df8632e5f3f8b95d2ec4427b759fdf590fbfab6bc887af8e10c7fc0d205e5a2643d49fe7aae948ae2200745fa2d4aa3c783e3e4dd9a4b88ac36ec1914234bc503f8e63e804b088b50a757cb653515c28126db7eff282589d71b4853d0e1112d202a38100733f222faea698e324abac876e3cb0f38b8c4ac93b1f4c8be07d6d0154c717d3b17f6a558fc6155c01ce0411d5180b661535f410486f2331a787c4df7aaabaff016d1ad0b84afaa8b3c2fd384f7498", 0xf4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) close(r3) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="55a3aff83b8d93cbb4a2479b30a2d9cf2b643b871a73060d0c3b16cebb6e173eb53a831214caea955e19d023579b807b9c23f4c26579436bfd42960ef8e41a6e6c43f83839c5add01bdf1b32aedb09af9d555863bcdac0bab53582546ffa5d9edbbdfd0a5cc8566c56407f947ed2bae608152f78706bb48c47", 0x79}, {&(0x7f0000000140)="ee2efb3576c495101771a3d8321e9087aa8a5325293f9543f632eb31750c4928c606dc4b32c9d7c3c2e89ec3fbf4e70665", 0x31}, {&(0x7f0000000180)="a61001b94c5895a71df1516e9c695403db4ba822d47a3e6790e4a987057b1b852e17b12a93c1379fa49d145cb4fdc53bdc16b39095dcca0bdb503074529fa6b2fa29e5342db8b0ba013118aacea1fad569efdde820f27ab411a100552963", 0x5e}], 0x3}}], 0x1, 0x0) 1m4.733076103s ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m3.345210229s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000280)="9a23f60fa1a7927ca46653d30c465822faf84e5c940e2db1bd189bd494f99da12a39736d5ce1fa7d75d6a3c6c8933a95b442a536af274b5a960dd0086d4d81fec2df8632e5f3f8b95d2ec4427b759fdf590fbfab6bc887af8e10c7fc0d205e5a2643d49fe7aae948ae2200745fa2d4aa3c783e3e4dd9a4b88ac36ec1914234bc503f8e63e804b088b50a757cb653515c28126db7eff282589d71b4853d0e1112d202a38100733f222faea698e324abac876e3cb0f38b8c4ac93b1f4c8be07d6d0154c717d3b17f6a558fc6155c01ce0411d5180b661535f410486f2331a787c4df7aaabaff016d1ad0b84afaa8b3c2fd384f7498", 0xf4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) close(r3) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="55a3aff83b8d93cbb4a2479b30a2d9cf2b643b871a73060d0c3b16cebb6e173eb53a831214caea955e19d023579b807b9c23f4c26579436bfd42960ef8e41a6e6c43f83839c5add01bdf1b32aedb09af9d555863bcdac0bab53582546ffa5d9edbbdfd0a5cc8566c56407f947ed2bae608152f78706bb48c47", 0x79}, {&(0x7f0000000140)="ee2efb3576c495101771a3d8321e9087aa8a5325293f9543f632eb31750c4928c606dc4b32c9d7c3c2e89ec3fbf4e70665", 0x31}, {&(0x7f0000000180)="a61001b94c5895a71df1516e9c695403db4ba822d47a3e6790e4a987057b1b852e17b12a93c1379fa49d145cb4fdc53bdc16b39095dcca0bdb503074529fa6b2fa29e5342db8b0ba013118aacea1fad569efdde820f27ab411a100552963", 0x5e}], 0x3}}], 0x1, 0x0) 49.112241444s ago: executing program 0 (id=1535): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0900000010003b664a38030000000000000000002ffa73b046172839e8ef6cfea4de564eef48537a69f4ec2ee38e37461fd08682635767b9542f4642a0a4c37fc39d4b5c979ebf007353e48c5e328498aecd714eac580e2151159b9e0304f1ee1f422c76e5688f22ef045a3ae7", @ANYRESOCT=r0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000200000005002a4c0002000004001200f816cc10a529958358bd192c4e76d386292c799ee2802bba854f099ab41d59fc"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) sendmsg$tipc(r5, &(0x7f0000000480)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x4010) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f24, 0x0) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r9], 0x50}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r11, r12, 0x2, 0x0, 0x0, @void, @value}, 0x10) r13 = socket$l2tp(0x2, 0x2, 0x73) vmsplice(r7, &(0x7f0000000940)=[{&(0x7f0000000240)="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", 0x2}], 0x5b, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000040), 0x6) write(r14, &(0x7f0000000380)="55401f33", 0x4) splice(r14, &(0x7f0000000200)=0x7, r13, &(0x7f00000004c0)=0x1, 0x8, 0x4) 48.965073184s ago: executing program 0 (id=1537): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x78, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 48.602614498s ago: executing program 0 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 45.358526465s ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.314474252s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000280)="9a23f60fa1a7927ca46653d30c465822faf84e5c940e2db1bd189bd494f99da12a39736d5ce1fa7d75d6a3c6c8933a95b442a536af274b5a960dd0086d4d81fec2df8632e5f3f8b95d2ec4427b759fdf590fbfab6bc887af8e10c7fc0d205e5a2643d49fe7aae948ae2200745fa2d4aa3c783e3e4dd9a4b88ac36ec1914234bc503f8e63e804b088b50a757cb653515c28126db7eff282589d71b4853d0e1112d202a38100733f222faea698e324abac876e3cb0f38b8c4ac93b1f4c8be07d6d0154c717d3b17f6a558fc6155c01ce0411d5180b661535f410486f2331a787c4df7aaabaff016d1ad0b84afaa8b3c2fd384f7498", 0xf4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) close(r3) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="55a3aff83b8d93cbb4a2479b30a2d9cf2b643b871a73060d0c3b16cebb6e173eb53a831214caea955e19d023579b807b9c23f4c26579436bfd42960ef8e41a6e6c43f83839c5add01bdf1b32aedb09af9d555863bcdac0bab53582546ffa5d9edbbdfd0a5cc8566c56407f947ed2bae608152f78706bb48c47", 0x79}, {&(0x7f0000000140)="ee2efb3576c495101771a3d8321e9087aa8a5325293f9543f632eb31750c4928c606dc4b32c9d7c3c2e89ec3fbf4e70665", 0x31}, {&(0x7f0000000180)="a61001b94c5895a71df1516e9c695403db4ba822d47a3e6790e4a987057b1b852e17b12a93c1379fa49d145cb4fdc53bdc16b39095dcca0bdb503074529fa6b2fa29e5342db8b0ba013118aacea1fad569efdde820f27ab411a100552963", 0x5e}], 0x3}}], 0x1, 0x0) 33.599169711s ago: executing program 0 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 31.08431159s ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.105507737s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000280)="9a23f60fa1a7927ca46653d30c465822faf84e5c940e2db1bd189bd494f99da12a39736d5ce1fa7d75d6a3c6c8933a95b442a536af274b5a960dd0086d4d81fec2df8632e5f3f8b95d2ec4427b759fdf590fbfab6bc887af8e10c7fc0d205e5a2643d49fe7aae948ae2200745fa2d4aa3c783e3e4dd9a4b88ac36ec1914234bc503f8e63e804b088b50a757cb653515c28126db7eff282589d71b4853d0e1112d202a38100733f222faea698e324abac876e3cb0f38b8c4ac93b1f4c8be07d6d0154c717d3b17f6a558fc6155c01ce0411d5180b661535f410486f2331a787c4df7aaabaff016d1ad0b84afaa8b3c2fd384f7498", 0xf4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) close(r3) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="55a3aff83b8d93cbb4a2479b30a2d9cf2b643b871a73060d0c3b16cebb6e173eb53a831214caea955e19d023579b807b9c23f4c26579436bfd42960ef8e41a6e6c43f83839c5add01bdf1b32aedb09af9d555863bcdac0bab53582546ffa5d9edbbdfd0a5cc8566c56407f947ed2bae608152f78706bb48c47", 0x79}, {&(0x7f0000000140)="ee2efb3576c495101771a3d8321e9087aa8a5325293f9543f632eb31750c4928c606dc4b32c9d7c3c2e89ec3fbf4e70665", 0x31}, {&(0x7f0000000180)="a61001b94c5895a71df1516e9c695403db4ba822d47a3e6790e4a987057b1b852e17b12a93c1379fa49d145cb4fdc53bdc16b39095dcca0bdb503074529fa6b2fa29e5342db8b0ba013118aacea1fad569efdde820f27ab411a100552963", 0x5e}], 0x3}}], 0x1, 0x0) 18.569036272s ago: executing program 0 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 16.606196248s ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.163789039s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000280)="9a23f60fa1a7927ca46653d30c465822faf84e5c940e2db1bd189bd494f99da12a39736d5ce1fa7d75d6a3c6c8933a95b442a536af274b5a960dd0086d4d81fec2df8632e5f3f8b95d2ec4427b759fdf590fbfab6bc887af8e10c7fc0d205e5a2643d49fe7aae948ae2200745fa2d4aa3c783e3e4dd9a4b88ac36ec1914234bc503f8e63e804b088b50a757cb653515c28126db7eff282589d71b4853d0e1112d202a38100733f222faea698e324abac876e3cb0f38b8c4ac93b1f4c8be07d6d0154c717d3b17f6a558fc6155c01ce0411d5180b661535f410486f2331a787c4df7aaabaff016d1ad0b84afaa8b3c2fd384f7498", 0xf4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) close(r3) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="55a3aff83b8d93cbb4a2479b30a2d9cf2b643b871a73060d0c3b16cebb6e173eb53a831214caea955e19d023579b807b9c23f4c26579436bfd42960ef8e41a6e6c43f83839c5add01bdf1b32aedb09af9d555863bcdac0bab53582546ffa5d9edbbdfd0a5cc8566c56407f947ed2bae608152f78706bb48c47", 0x79}, {&(0x7f0000000140)="ee2efb3576c495101771a3d8321e9087aa8a5325293f9543f632eb31750c4928c606dc4b32c9d7c3c2e89ec3fbf4e70665", 0x31}, {&(0x7f0000000180)="a61001b94c5895a71df1516e9c695403db4ba822d47a3e6790e4a987057b1b852e17b12a93c1379fa49d145cb4fdc53bdc16b39095dcca0bdb503074529fa6b2fa29e5342db8b0ba013118aacea1fad569efdde820f27ab411a100552963", 0x5e}], 0x3}}], 0x1, 0x0) 1.984616423s ago: executing program 4 (id=1764): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.850900528s ago: executing program 3 (id=1765): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="0100000000000000000002020200050003000000000500040000000000"], 0x30}, 0x1, 0x40030000000000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x20000010) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0xfffffffffffffd42, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x88}}, 0x2004c800) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x6}, &(0x7f0000000240)=0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) (rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async, rerun: 32) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (rerun: 32) sendto$packet(r6, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) (rerun: 32) 1.788915617s ago: executing program 4 (id=1766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x114, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0xf2, 0x5b, "c9bbb23c2bd46f9eeb05ed418979cfc200eefb5d2155fa3768ef311f9e600f0c654796d14136820348b8725e01e133d1a52974ba166bf7fe84750f3601ef080d9ecbfcb5ee63f241b1cd39f16ce45fe7dad12c4b1aef9c1dec40ff3b15e2a229f888949fd7bbf9c4b1091da077e620176118584c13d8f52ea6e29ba2b98c3ee79f620afd6284cf834aef07fce9643bf32575aef3a9d4d41eae988c6d5e44f2b6c1ccf9264b1de244374da0d4248e84381cf791c744df84475996b6f40fd52c8cb8de0f78e770649e85d4194076b59c2c680a2d19df6a599eb7852b1be351c2d42f2e953f982b1eba18cd9afb9a29"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4048840}, 0x4040080) sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x8, 0x8, 0x5]}, &(0x7f0000000000)=0x44) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) sendto$inet(r0, &(0x7f0000000680)='<', 0x1, 0x805, 0x0, 0x0) 1.650893362s ago: executing program 4 (id=1767): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000a0ab76d"], 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ea7a27740ac34da57f2edd6005ba3825b199768fc99bbe3f3b1a19bef12f22cbd0f0479195b9b1e49701f4086fe6334e8aab852c86f09039eeeb79a6e676242d72a3cf9392e5c08f8741311080efdaefd2891ef5672f8bc82bb676213d2fff8da7b31987f346f19bf695268e174495f990d1719443a9ccebad34b20d0216dc3f7634a2748907bb3010a20663a83fb278f382dab1f096a715ba9ae9db6b3440b3bfde19eefaef2f8f15b70ec1dc1b0bc1a191c70a4293"], 0x24}}, 0x44044) socket$nl_route(0x10, 0x3, 0x0) 1.647217059s ago: executing program 3 (id=1768): r0 = socket(0x6, 0x1, 0x5c) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000004d40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004d00)={&(0x7f0000002800)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0xe26002e7288c7886}, 0x875) r2 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8144fe1cace81ed0b7fece0b42a9ecbee5de6ccd40dd2e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162389a868a1e1fc60a", 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f0000004a80)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/67, 0x43}, {0xfffffffffffffffd}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000480)=""/108, 0x6c}], 0x6, &(0x7f0000000580)=""/33, 0x21}, 0x7}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/80, 0x50}], 0x6, &(0x7f0000000980)=""/203, 0xcb}, 0x6}, {{&(0x7f0000000a80)=@generic, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/9, 0x9}, {&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d00)=""/207, 0xcf}], 0x4, &(0x7f0000000e40)=""/74, 0x4a}, 0x7}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/238, 0xee}], 0x1, &(0x7f0000001000)=""/4096, 0x1000}, 0xd}, {{&(0x7f0000002000)=@ax25={{}, [@rose, @bcast, @remote, @rose, @default, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/38, 0x26}, {&(0x7f0000002140)=""/21, 0x15}, {&(0x7f0000002180)=""/148, 0x94}, {&(0x7f0000002240)=""/68, 0x44}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/156, 0x9c}, {&(0x7f0000002440)=""/119, 0x77}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/219, 0xdb}], 0xa}, 0x7fb5}, {{&(0x7f00000026c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002740)=""/145, 0x91}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/111, 0x6f}, {&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/92, 0x5c}, {&(0x7f0000002980)=""/10, 0xa}], 0x6, &(0x7f0000002a40)=""/63, 0x3f}, 0x2}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002a80)=""/128, 0x80}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/124, 0x7c}, {&(0x7f0000002bc0)=""/202, 0xca}, {&(0x7f0000002cc0)=""/61, 0x3d}, {&(0x7f0000002d00)=""/227, 0xe3}], 0x6, &(0x7f0000002e80)=""/133, 0x85}, 0x2e4}, {{&(0x7f0000002f40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002fc0)=""/202, 0xca}, {&(0x7f00000030c0)=""/65, 0x41}, {&(0x7f0000003140)=""/149, 0x95}, {&(0x7f0000003200)=""/114, 0x72}], 0x4, &(0x7f00000032c0)=""/180, 0xb4}, 0x8000}, {{&(0x7f0000003380), 0x80, &(0x7f00000048c0)=[{&(0x7f0000003400)=""/250, 0xfa}, {&(0x7f0000003500)=""/95, 0x5f}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/67, 0x43}, {&(0x7f00000036c0)=""/30, 0x1e}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/61, 0x3d}, {&(0x7f0000004740)=""/214, 0xd6}, {&(0x7f0000004840)=""/117, 0x75}], 0x9, &(0x7f0000004980)=""/246, 0xf6}, 0x2}], 0x9, 0x2, &(0x7f0000004cc0)) socket(0x6, 0x1, 0x5c) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000004d40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004d00)={&(0x7f0000002800)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0xe26002e7288c7886}, 0x875) (async) socket$kcm(0x10, 0x5, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8144fe1cace81ed0b7fece0b42a9ecbee5de6ccd40dd2e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162389a868a1e1fc60a", 0xd8}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmmsg(r3, &(0x7f0000004a80)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/67, 0x43}, {0xfffffffffffffffd}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000480)=""/108, 0x6c}], 0x6, &(0x7f0000000580)=""/33, 0x21}, 0x7}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/80, 0x50}], 0x6, &(0x7f0000000980)=""/203, 0xcb}, 0x6}, {{&(0x7f0000000a80)=@generic, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/9, 0x9}, {&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d00)=""/207, 0xcf}], 0x4, &(0x7f0000000e40)=""/74, 0x4a}, 0x7}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/238, 0xee}], 0x1, &(0x7f0000001000)=""/4096, 0x1000}, 0xd}, {{&(0x7f0000002000)=@ax25={{}, [@rose, @bcast, @remote, @rose, @default, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/38, 0x26}, {&(0x7f0000002140)=""/21, 0x15}, {&(0x7f0000002180)=""/148, 0x94}, {&(0x7f0000002240)=""/68, 0x44}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/156, 0x9c}, {&(0x7f0000002440)=""/119, 0x77}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/219, 0xdb}], 0xa}, 0x7fb5}, {{&(0x7f00000026c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002740)=""/145, 0x91}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/111, 0x6f}, {&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/92, 0x5c}, {&(0x7f0000002980)=""/10, 0xa}], 0x6, &(0x7f0000002a40)=""/63, 0x3f}, 0x2}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002a80)=""/128, 0x80}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/124, 0x7c}, {&(0x7f0000002bc0)=""/202, 0xca}, {&(0x7f0000002cc0)=""/61, 0x3d}, {&(0x7f0000002d00)=""/227, 0xe3}], 0x6, &(0x7f0000002e80)=""/133, 0x85}, 0x2e4}, {{&(0x7f0000002f40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002fc0)=""/202, 0xca}, {&(0x7f00000030c0)=""/65, 0x41}, {&(0x7f0000003140)=""/149, 0x95}, {&(0x7f0000003200)=""/114, 0x72}], 0x4, &(0x7f00000032c0)=""/180, 0xb4}, 0x8000}, {{&(0x7f0000003380), 0x80, &(0x7f00000048c0)=[{&(0x7f0000003400)=""/250, 0xfa}, {&(0x7f0000003500)=""/95, 0x5f}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/67, 0x43}, {&(0x7f00000036c0)=""/30, 0x1e}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/61, 0x3d}, {&(0x7f0000004740)=""/214, 0xd6}, {&(0x7f0000004840)=""/117, 0x75}], 0x9, &(0x7f0000004980)=""/246, 0xf6}, 0x2}], 0x9, 0x2, &(0x7f0000004cc0)) (async) 1.478512565s ago: executing program 3 (id=1769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001000000000000ffff0a"], 0xb8}, 0x1, 0x0, 0x0, 0x12}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet6(r3, &(0x7f0000000340)="f9376096f8dbe7a1e88deafd57b687a73cd244fca95a5a0ca90ab872767fea467cfb8983f68be76712750b519802eac5023a7e8e42889c1fec7b1c1ad0f9c2b9f5c51dcdc87002ecc8990ed1b0bb67f0323eabdfaf57c4b0df4d2c8f69e2ea1e6a86565558a77d10950f614774732ccb9e68cd0e568e527666bb3ed852917b97604259b5104a82380d3a6a28ff0dd6b40e5e384551b57fea1af4d71bf1173e8283ecce8b87455091488787771082515c8c5847ee6eac725ec126137216f6daefafdb", 0xc2, 0x8054, &(0x7f0000000140)={0xa, 0x4e22, 0x81, @mcast1, 0x3}, 0x1c) socket(0x10, 0x80002, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x870bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff31}, {0x5}}]}, 0x58}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0x107, 0x10, &(0x7f0000002440)="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", &(0x7f00000001c0)=""/16, 0x1, 0x0, 0xa9, 0x56, &(0x7f0000000540)="b9e2f7a62861fd112f12467f0941ff0b095f9928fa73744e613c0e4ecc847a87adccaa94ccbaf86b4cb0fd82cc5af634add05bb4013660e995e224faea1e3368f3078f5fa0fce7f380e66e520d063855faa67e02a7d4c5f1316819b9c7b6d287d4abbfa3461c42146be3370129a42b14a05c7540a578f0465508c7334588576f37fde2f616cc81b768ca9972f4f4f19fe21d38e069a69a9c66a48d73777369508e293db00ed9cb29c7", &(0x7f0000000600)="49ece3c6e3e4beb5da966019d7c33fd877d82ddd458d368a0204a08b9b61de2a0107602f25dbddd91d79f5816b316e9bc1ab3c251aafcb1851fa96d309e7568e3a6f199bc6fe6b955f27692bce713404b9d01fed6a7c", 0x7, 0x0, 0xfffffffe}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001d80)={'vxcan0\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000900)="8579f91614dbe4308b39bacdadfc37fcecd2a6d3a3f306ee74f945a71b3d28518339a18e184b6d4f21a636771938977196f05b8b0d1a608f9437e1b95ffe70ce7220c56e921202dc184a3295e1c84700e41cfe5973bba19b1f01a186829df6e0927cc536fc5c6be87126ddaed7fcc16a0c132254704cc9eda52ba2ace6175903c51a9ba950d419eab8df5ecbb90c3e25a50a99b18d6c0a8f855536f99ae043575199d5abe71544d58d0458d96cb524359cae5120a59582679e22615f71f08fc387b5af870a8788e6a6a0d29fb4aeb1abbe01512d8db6294c0e8cbe2d90a6ef54c7c0ea51c11074bfe2", 0xe9}, {&(0x7f0000000a00)="5fa388b49e53a84df5991ca055b1f2eaa88566ef28ef200f8796da80a57bb1064a466ee6a5fd9fb5ebbf5d4e751e497be954714601050c365f132e0d5cc6d9984c9fb6fb47fda17e49aeb9a4d7b212c6463a330e2819c76cf89fd6c66e3ada082b7c17bdc5fb093bc911a6a1c5c82c64dec3feba806879a85ba7a7971fb12b007f690707", 0x84}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="1a02228f1373ec7d3de1d091bcb72e03f266196862c66f9f4e1db0270c72fb334c99639ca907fac933db426242d4eec2b2227f67ce2bf725f8bf256a6af46d0c6064cfdd46456fe8ef6c4ff04e754c764933", 0x52}, {&(0x7f0000001ec0)="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", 0x102}, {&(0x7f0000000700)="83f1212360418d5f5a0be00da791f3669cb65fe70461a72f3d8c34ab57a8c564f9d5c351fcb1e1a7142ebe9c3d6dfc19e03d4ff4", 0x34}, {&(0x7f0000001c40)="38eeb27928ea611a035b872f17668cb54925b456786c876833d6f3", 0x1b}, {&(0x7f0000001c80)="4cfa38fc71980a6e76350fbb0b3fc413d0a9e027943f5ff7e911672e4e5cb534df04744b02c016ccc3eb6c0c3d477df7e1c3d01af15685f09f38ca429e3c3a8b1f781462579c00", 0x47}], 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b66ac1414aa7f000001000000000014000000000000000000000002000000000000000000000038000000000000000000000007000000072729ffffffff0a01010064010101ffffffff7f000001ac1e0001ac1414aae0000002ac1414aa001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="02ffb216ffffbc1414aa00000000"], 0x90}, 0x40001) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c0000000200000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde8f1d5e8d3fb22a1b5046778bd5fefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a48770b5f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd10000"], 0x118}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r10, 0x0) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket(0x10, 0x3, 0x0) 1.388553148s ago: executing program 4 (id=1770): syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000a00)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3}, {0x2}, @device_a, @initial, @initial, {0xf, 0x4}}, @a_msdu}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd5}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xd8}, 0x1, 0x7a00}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x3, 0x8000000, 0x1}, 0x10) 1.323571585s ago: executing program 3 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)="83c840e42fc104b26d6a93528dc5c4db68f8bf8d0ab5fd330a26f983316651a5fa2032ce0eb614e53f17f241586b0bfb174c2cac752818aca63d19f35d56ed66a0484870c32ed2e885261bc46357f9cc9f7862e9dd29c4794d4573c48024a3da4f6c99edeef23d06f36406afbc6513eae6a57b1ee2aaaa119c53b25db422ea97c03d32b78f897deee53222be005d35e3", 0x90}, {&(0x7f0000000540)="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", 0xaf9}], 0x2}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) r2 = socket(0xa, 0xa, 0x3) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000240)={0x2, 0x1, '\x00', [@enc_lim, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}]}, 0x18) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r4, 0xff}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x5, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) 1.076035674s ago: executing program 3 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x560, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4081, 0x1000, 0x200, 0xb7f, 0x6, 0x2, 0xffd, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x4}, {0x1}, {0x1, 0xa}, {0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0x1, 0x1, 0x81, 0x800, 0xe, 0x76d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x1, 0x5, 0xe3c3, 0x7, 0x80, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x1ff, 0x7, 0xfff9, 0x6, 0x9, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x5, 0x8, 0x6, 0xd977, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x5d, 0x5, 0x9210cfaeb953a4de, 0x1, 0x6c, 0x9, 0x24, 0x1, 0x5, 0xc, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x9}, {0x6, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x6, 0xe, 0x401, 0xb, 0x8, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x7}, {0x0, 0x7}, {0x6}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0xd836, 0xff82, 0x8, 0x9ec1, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x4, 0xc, 0x60, 0xb, 0xc, 0x36, 0x2]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x8}, {0x0, 0x5}, {0x1, 0x3}, {}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x2}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x7f, 0x7f, 0xf, 0x0, 0x3, 0x8]}}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xfff, 0x7fff, 0x2, 0x9, 0x9, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1c, 0x85, 0x2, 0x8, 0x4, 0xfff9, 0x401, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x7, 0x400, 0x52f4, 0x0, 0xffff, 0x2000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x5}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x1c}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffa, 0x5, 0x7, 0x0, 0x2, 0xff29, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc37f, 0x5, 0x401, 0x0, 0x9, 0xff, 0xd, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x7, 0x4}, {0x2, 0xa}, {0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x2}, {0x4, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x7}, {0x5, 0x1}, {0x7, 0x8}, {0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x18, 0x6c, 0x24, 0x36, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf, 0xe, 0x8, 0x200, 0xab9, 0x2e, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xffff, 0x400, 0x101, 0x5, 0xaa8, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x12, 0x0, 0x1, 0x2, 0x4, 0x0, 0x36, 0x24, 0x2d, 0x0, 0x2, 0x24, 0x3, 0x3, 0x2, 0x5, 0x4, 0xb, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe2, 0x3, 0x7, 0x28b, 0x9, 0x8001, 0x8, 0x81]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x9, 0x3, 0x3, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x48, 0x16, 0x2, 0x30, 0x18, 0x12, 0x6c, 0x5, 0x24, 0xb, 0x1b, 0x4, 0xd5d1d9b2d5404e8f, 0x6c, 0x30, 0x6c, 0x4, 0x60, 0x3, 0x24, 0xb]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0xa}, {0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x6}, {}, {0x4}, {0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x1}, {0x6, 0x1b}, {0x2, 0xa}, {0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x5}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x5}, {0x1}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x7}, {0x0, 0x7}, {0x5, 0x5}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x12, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59b2, 0x96c8, 0x100, 0x7fff, 0x600, 0xfffe, 0x7f, 0x800]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x1}, {0x2, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0xa}, {0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0xa}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x7}, {}, {0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0xa}, {0x2}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x6, 0x7}, {0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0xa}, {}, {0x0, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x2}, {0x7, 0x3}, {0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x4}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x5, 0x8}, {0x3, 0x7}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xafdf, 0xb97, 0x7, 0x7, 0x1, 0x1000, 0x8, 0x9c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x6b93, 0x7f, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x5, 0x7, 0x5, 0x2, 0x7ff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x48, 0x9, 0x48, 0x1b, 0x12, 0x6c, 0x16, 0x0, 0x9, 0x24, 0x30, 0x4, 0x9, 0x18, 0x18, 0x1, 0x5, 0x18]}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xac, 0x0, 0xf5e7, 0x2, 0xa92, 0x5, 0x76c9]}}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00}}}], 0x20}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000c70c00001a00000000000000", @ANYRES64=0x77359400, @ANYRES32=r8, @ANYRES64=r9, @ANYRES16=r7, @ANYRESDEC=r9], 0x80}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0xeffd, &(0x7f0000000580)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) 940.170412ms ago: executing program 0 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "c3bdc76e613cd88a5d8e0c9302da83aa8ae0000921009f15ba27bbe91778146efca3335cb00b1cc015c6c9d33acd3632a58fca10535bdbc0c2d5bcb51986868cfa22ec8edf2d324dfa29510c71530a781548534a72e4a80c5455c077f0ab69309220fe2c4bcba06f"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 193.167386ms ago: executing program 3 (id=1773): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 192.4298ms ago: executing program 4 (id=1774): socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) (async) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10f241c00f08eb8c4d6decff000030098cdd1c03da68a20000"], 0x10}}], 0x2, 0x0) 59.358016ms ago: executing program 2 (id=939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="b6a85c96302268ed1321ada19a79b12f301233c197391cc1e1f68b2e0d7381a4cde81272d91d88dd2a557652bc15eb6623a792c4926d6d7b8ab35421626a751164aad4fb45380eed4dd8e498f8bf7ee266baa78f1ea0497c8618ae373369e265c2db8a8008642bc73e3cb46dff41e2e9ffdf44112b51fa81a1e5ce957b0d70b942e62380f48bf9c46a681f44c47981f601544b1995e7653c548887be48077fce2cc985bb938bb80dc5390ad789fc8f2aa319bb05a25e55b66f6195ab38b4fc81ba7836efe90ac9c0255920123e1b9388dd2fec8caa11d656ffcdfb27115e361405", 0xe1}, {&(0x7f0000000540)="14eeec8d7038293f968fa2e8b45f2acc437507e3fde294a8573ce6f5f2a17052066ba3987246d31a2f6830ae655baef91af329d13c85c7cb2f3d84b5fb41317b141c6b2dc499189fc67ef46ff619219ceb25dc74bde2bc89c5ec232268bdc34aea0a71a71bf3b2791286b67a13ed750998d7b12916307bfff992445c", 0x7c}, {&(0x7f0000000680)="3593293ee38dcc9deda9dc36285d308e1b442e9d2731e86d194e9c1efbcee762a5459970fdfca13c9c87cbef1f", 0x2d}, {&(0x7f00000006c0)="fff429c4d2d3fd766c528d2fa6d655eb9de6e8f2d9c6dc1e84617198b15ca092c2941ac2d2b23bdea4749ead64801e6c3d58fe7aafca76ea4e632f0904995ffc2fe208da1d42865e34a87c2447129ff722865735f006be93f6e2395f5f70263ef684702ad6996bff08bfbe838285a802826bf1ab86d954948ebcfd33bdbb72b9c70b324f5c914431b6b3763e21af88e541218c275f68d12c2aed283007571752b35ce6409b78e9ab00a74a00e5d3a1ac8a2472f3e43eab361b05849b18ba8e8ee27947a561d88a54e2bf41", 0xcb}, {&(0x7f00000007c0)="6f83a62c00c4c54ac4d11679abc1756f01e3c46eb0ea1fda19fbab612b80041070a368", 0x23}, {&(0x7f0000000800)="c87ca83a292e3a0341a360ab", 0xc}], 0x6, &(0x7f00000008c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x7fffffff, 0x0]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="010e66a9dee65788ad44c52f988f53801c95980b665cd3e94bebbddff0badccd458562cb23ae2a73269c5db88c09eb948a788e7ddcfd61088b28f5e1d2823c7ef010a34388044ee8279c40ada4e1c0a71ae76effcd42b97eed35f161a2d1d5f275b5b1566fd146ff1b509b158f53f7e3272c63f93e89233c35f4089367a14974b0d4a228418f4a32b544fd6def002c56f0c6d3538e58eb798db92ae0944e1ddf18a8aca5844af0efcdc8d2699d9a55d1014a12900053fd60bcb6a17df8e1dadeafb9f2b8c12a569a771d310d8e8d1442c9aa3931ff16525d6bff66aa96fe845a2f", 0xe1}], 0x1}}], 0x2, 0x2404c001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2008}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeca, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) socket(0x14, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=1775): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd700085b500000000000014000208776731000000000000000000000000002c0008802800008024000100d17328715011cd89034d7f413dc957630e54c8be85aca40065cb6311be696b00"], 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) getsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): .114801][T11128] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 170.122420][T11128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.133338][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.174456][T10427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.183833][T11128] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1340'. [ 170.197706][T10427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.210634][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 170.500279][T11142] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 170.535017][T11142] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 170.556961][T11142] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 170.624956][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 170.679639][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1347'. [ 170.698769][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1347'. [ 170.780940][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1349'. [ 170.902634][T10422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.062459][T10422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.106065][ T11] wlan1: Trigger new scan to find an IBSS to join [ 171.247144][T10422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.351988][T10422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.548935][T10422] bridge_slave_1: left allmulticast mode [ 171.575154][T10422] bridge_slave_1: left promiscuous mode [ 171.580924][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.675690][T10422] bridge_slave_0: left allmulticast mode [ 171.686639][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1351'. [ 171.691624][T10422] bridge_slave_0: left promiscuous mode [ 171.721347][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.163319][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.172648][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.181737][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.190896][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.202382][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.211502][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.404258][T10422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.417660][T10422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.428076][T10422] bond0 (unregistering): Released all slaves [ 172.445210][T11210] syzkaller1: entered promiscuous mode [ 172.451617][T11210] syzkaller1: entered allmulticast mode [ 172.483049][T11223] lo speed is unknown, defaulting to 1000 [ 172.601386][T11227] .: renamed from bond0 (while UP) [ 172.853094][T11230] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 172.863985][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'. [ 172.883080][T11238] xt_hashlimit: max too large, truncated to 1048576 [ 172.900222][T11230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.915109][T11238] xt_hashlimit: max too large, truncated to 1048576 [ 172.945532][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1360'. [ 173.000039][T11243] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 173.743440][T10422] hsr_slave_0: left promiscuous mode [ 173.761334][T10422] hsr_slave_1: left promiscuous mode [ 173.779644][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.795838][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.812178][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.826592][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.886277][T10422] veth1_macvtap: left promiscuous mode [ 173.902107][T10422] veth0_macvtap: left promiscuous mode [ 173.921062][T10422] veth1_vlan: left promiscuous mode [ 173.930069][T10422] veth0_vlan: left promiscuous mode [ 174.153068][T10418] wlan1: Trigger new scan to find an IBSS to join [ 174.307207][ T5146] Bluetooth: hci2: command tx timeout [ 174.538953][T10422] team0 (unregistering): Port device team_slave_1 removed [ 174.576717][T10422] team0 (unregistering): Port device team_slave_0 removed [ 174.918636][T11223] chnl_net:caif_netlink_parms(): no params data found [ 175.056081][ T11] wlan1: Creating new IBSS network, BSSID 56:33:7c:e7:3a:61 [ 175.081130][T11331] lo speed is unknown, defaulting to 1000 [ 175.501279][T11223] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.526299][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.533554][T11223] bridge_slave_0: entered allmulticast mode [ 175.571568][T11223] bridge_slave_0: entered promiscuous mode [ 175.622209][T11223] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.645888][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.670804][T11223] bridge_slave_1: entered allmulticast mode [ 175.678596][T11351] __nla_validate_parse: 2 callbacks suppressed [ 175.678612][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1372'. [ 175.712398][T11223] bridge_slave_1: entered promiscuous mode [ 175.749756][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 175.797866][T11335] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1372'. [ 175.811297][T11223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.847980][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 175.870463][T11223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.075315][T11223] team0: Port device team_slave_0 added [ 176.167289][T11223] team0: Port device team_slave_1 added [ 176.345786][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.358376][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.368855][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.377860][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.384715][ T5832] Bluetooth: hci2: command tx timeout [ 176.391161][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.403604][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.405965][T11223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.441385][T11223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.467773][T11223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.486749][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 176.507752][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 176.578629][T11223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.586339][T11223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.613295][T11223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.639169][T11374] lo speed is unknown, defaulting to 1000 [ 176.738471][T11223] hsr_slave_0: entered promiscuous mode [ 176.755658][T11223] hsr_slave_1: entered promiscuous mode [ 176.767289][T11223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.794681][T11223] Cannot create hsr debugfs directory [ 177.320447][T11374] chnl_net:caif_netlink_parms(): no params data found [ 177.565397][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 177.616525][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 177.761295][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.768747][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.791217][T11374] bridge_slave_0: entered allmulticast mode [ 177.799883][T11374] bridge_slave_0: entered promiscuous mode [ 177.818962][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.826466][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.833672][T11374] bridge_slave_1: entered allmulticast mode [ 177.841012][T11374] bridge_slave_1: entered promiscuous mode [ 177.849081][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 178.010886][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.048369][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.147895][T11223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.203192][T11374] team0: Port device team_slave_0 added [ 178.213894][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 178.223529][T11223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.248021][T11374] team0: Port device team_slave_1 added [ 178.284191][T11223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.324887][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.333941][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.360393][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.372565][T11223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.401350][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.408883][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.451989][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.465198][ T5146] Bluetooth: hci3: command tx timeout [ 178.465239][ T5844] Bluetooth: hci2: command tx timeout [ 178.526932][T11374] hsr_slave_0: entered promiscuous mode [ 178.533082][T11374] hsr_slave_1: entered promiscuous mode [ 178.539548][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.550359][T11374] Cannot create hsr debugfs directory [ 178.561910][T11467] dvmrp0: entered allmulticast mode [ 178.933403][T11374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.967461][T11223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.993363][T11485] netlink: 'syz.4.1405': attribute type 2 has an invalid length. [ 178.994115][T11223] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.019725][T11485] netlink: 'syz.4.1405': attribute type 9 has an invalid length. [ 179.056992][T11485] netlink: 'syz.4.1405': attribute type 10 has an invalid length. [ 179.119087][T11374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.141854][T11492] openvswitch: netlink: Tunnel attr 1 has unexpected len 24 expected 4 [ 179.169581][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.176789][T10418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.216746][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.223941][T10418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.371371][T11374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.445689][T11223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.537213][T11374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.600160][T11517] TCP: TCP_TX_DELAY enabled [ 179.894175][T11374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.957095][T11223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.004194][T11374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.029988][T11374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.055935][T11374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.203134][T11223] veth0_vlan: entered promiscuous mode [ 180.261653][T11223] veth1_vlan: entered promiscuous mode [ 180.311682][T11555] netlink: 'syz.3.1422': attribute type 12 has an invalid length. [ 180.431557][T11223] veth0_macvtap: entered promiscuous mode [ 180.493909][T11223] veth1_macvtap: entered promiscuous mode [ 180.544833][ T5146] Bluetooth: hci3: command tx timeout [ 180.544851][ T5844] Bluetooth: hci2: command tx timeout [ 180.552032][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.621964][T11223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.629576][T11563] nbd: must specify a device to reconfigure [ 180.657774][T11223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.668480][T11223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.679260][T11223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.690608][T11223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.723807][T11223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.763464][T11223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.778519][T11223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.791426][T11223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.803389][T11223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.827124][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.842641][T11223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.862476][T11223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.889711][T11223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.914472][T11223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.959894][T11574] netlink: 'syz.0.1427': attribute type 20 has an invalid length. [ 180.994187][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.001452][T10427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.080811][T11578] x_tables: unsorted underflow at hook 4 [ 181.087132][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.094262][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.238092][T10427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.265253][T10427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.283498][T11589] netlink: 'syz.0.1431': attribute type 6 has an invalid length. [ 181.472333][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.499509][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.724225][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.783880][T11614] __nla_validate_parse: 6 callbacks suppressed [ 181.783898][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 181.831872][T11374] veth0_vlan: entered promiscuous mode [ 181.918069][T11614] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 181.934208][T11374] veth1_vlan: entered promiscuous mode [ 181.995699][T11374] veth0_macvtap: entered promiscuous mode [ 182.010328][T11374] veth1_macvtap: entered promiscuous mode [ 182.037283][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.049358][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.061934][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.074988][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.086227][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.097937][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.122098][T11630] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 182.134260][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.185353][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 182.216516][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 182.229126][T11630] netlink: 'syz.3.1438': attribute type 3 has an invalid length. [ 182.347269][T10424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.370916][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.382319][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.401191][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.413053][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.429594][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.440250][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.458154][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.523230][T11374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.539521][T11374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.552652][T11374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.571147][T11374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.613026][T10424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.625187][ T5146] Bluetooth: hci3: command tx timeout [ 182.673549][T10424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.755866][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.763742][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.804727][T10427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.812585][T10427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.862179][T10424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.445946][T10424] bridge_slave_1: left allmulticast mode [ 183.451648][T10424] bridge_slave_1: left promiscuous mode [ 183.474925][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.492883][T10424] bridge_slave_0: left allmulticast mode [ 183.504921][T10424] bridge_slave_0: left promiscuous mode [ 183.510677][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.510930][T11674] ax25_connect(): syz.4.1444 uses autobind, please contact jreuter@yaina.de [ 183.749335][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.766487][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.775812][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.783799][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.795436][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 183.802818][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.151550][ T5146] Bluetooth: hci0: command tx timeout [ 184.253417][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.269132][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.280818][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.290767][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.300323][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.318807][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.355380][T10424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.375701][T10424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.388658][T10424] bond0 (unregistering): Released all slaves [ 184.470177][T11682] lo speed is unknown, defaulting to 1000 [ 184.752535][T11690] lo speed is unknown, defaulting to 1000 [ 185.505396][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 185.514948][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 185.570856][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 185.587126][T10424] hsr_slave_0: left promiscuous mode [ 185.594115][T10424] hsr_slave_1: left promiscuous mode [ 185.600404][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.608354][T10424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.616600][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.624939][T10424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.648790][T10424] veth1_macvtap: left promiscuous mode [ 185.654427][T10424] veth0_macvtap: left promiscuous mode [ 185.660231][T10424] veth1_vlan: left promiscuous mode [ 185.670565][T10424] veth0_vlan: left promiscuous mode [ 185.908030][ T5832] Bluetooth: hci2: command tx timeout [ 185.966935][T11761] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004 [ 186.184733][T10424] team0 (unregistering): Port device team_slave_1 removed [ 186.222592][T10424] team0 (unregistering): Port device team_slave_0 removed [ 186.242272][T10427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 186.390292][ T5832] Bluetooth: hci3: command tx timeout [ 186.396914][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 186.637422][T11734] syzkaller1: entered promiscuous mode [ 186.644169][T11734] syzkaller1: entered allmulticast mode [ 186.678693][T11760] pimreg: left allmulticast mode [ 186.819880][T11682] chnl_net:caif_netlink_parms(): no params data found [ 187.096825][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 187.116345][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 187.331063][T11690] chnl_net:caif_netlink_parms(): no params data found [ 187.388743][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.422678][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.449044][T11682] bridge_slave_0: entered allmulticast mode [ 187.471175][T11682] bridge_slave_0: entered promiscuous mode [ 187.490029][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1473'. [ 187.518224][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.537812][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.553193][T11682] bridge_slave_1: entered allmulticast mode [ 187.569037][T11682] bridge_slave_1: entered promiscuous mode [ 187.695863][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1475'. [ 187.747704][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.803335][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.874292][T11824] netlink: 'syz.4.1478': attribute type 5 has an invalid length. [ 187.939466][T11682] team0: Port device team_slave_0 added [ 187.939901][T11828] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1478'. [ 187.957629][T11682] team0: Port device team_slave_1 added [ 187.970033][T11824] : entered promiscuous mode [ 187.978957][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.986170][ T5844] Bluetooth: hci2: command tx timeout [ 187.992529][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.001458][T11690] bridge_slave_0: entered allmulticast mode [ 188.031455][T11690] bridge_slave_0: entered promiscuous mode [ 188.043441][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.051617][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.059278][T11690] bridge_slave_1: entered allmulticast mode [ 188.068994][T11690] bridge_slave_1: entered promiscuous mode [ 188.193404][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 188.232669][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.257214][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.267546][T11682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.275480][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.303985][T11682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.326014][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.359459][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.395873][T11682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.406341][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.450724][T11682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.464700][ T5844] Bluetooth: hci3: command tx timeout [ 188.600561][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.657873][T11690] team0: Port device team_slave_0 added [ 188.751669][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.829018][T11690] team0: Port device team_slave_1 added [ 188.849205][T11682] hsr_slave_0: entered promiscuous mode [ 188.862098][T11682] hsr_slave_1: entered promiscuous mode [ 188.872144][T11682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.888471][T11682] Cannot create hsr debugfs directory [ 188.890343][T11859] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 189.031927][T11859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.033046][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 189.090745][T11690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.102250][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.136333][T11690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.200239][T11690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.222208][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.268479][T11690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.373342][ T11] bridge_slave_1: left allmulticast mode [ 189.385761][ T11] bridge_slave_1: left promiscuous mode [ 189.391544][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.438740][ T11] bridge_slave_0: left allmulticast mode [ 189.446945][ T11] bridge_slave_0: left promiscuous mode [ 189.454626][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.842473][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.853947][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.864259][ T11] bond0 (unregistering): Released all slaves [ 190.067603][ T5844] Bluetooth: hci2: command tx timeout [ 190.554586][ T5844] Bluetooth: hci3: command tx timeout [ 191.692797][T11690] hsr_slave_0: entered promiscuous mode [ 191.699401][T11690] hsr_slave_1: entered promiscuous mode [ 191.707041][T11690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.719530][T11690] Cannot create hsr debugfs directory [ 191.740964][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'. [ 191.921007][T11905] xt_addrtype: ipv6 does not support BROADCAST matching [ 192.164400][ T5844] Bluetooth: hci2: command tx timeout [ 192.353285][T11926] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 192.452370][ T11] hsr_slave_0: left promiscuous mode [ 192.462248][ T11] hsr_slave_1: left promiscuous mode [ 192.469381][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.477337][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.486582][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.494153][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.529251][ T11] veth1_macvtap: left promiscuous mode [ 192.537351][ T11] veth0_macvtap: left promiscuous mode [ 192.544987][ T11] veth1_vlan: left promiscuous mode [ 192.550437][ T11] veth0_vlan: left promiscuous mode [ 192.624460][ T5844] Bluetooth: hci3: command tx timeout [ 192.922811][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 193.069512][ T11] team0 (unregistering): Port device team_slave_1 removed [ 193.113481][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.593901][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'. [ 193.844092][T11949] team0: Device is already in use. [ 193.851484][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 193.874461][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 193.894933][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1505'. [ 193.936303][T11961] xt_policy: too many policy elements [ 194.449645][T11988] 8021q: VLANs not supported on ipvlan0 [ 194.555368][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589614][T11991] xt_CT: No such helper "pptp" [ 194.631138][T11994] syzkaller0: entered promiscuous mode [ 194.639715][T11994] syzkaller0: entered allmulticast mode [ 194.659758][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 194.699848][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 196.265027][T12007] sit2: entered promiscuous mode [ 196.270226][T12007] sit2: entered allmulticast mode [ 196.291164][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 196.321595][T11682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.422492][T11682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.561957][T11682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.588801][T11682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.633100][T12030] netlink: 'syz.4.1523': attribute type 21 has an invalid length. [ 196.641789][T11690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.677868][T11690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.730811][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 196.780974][T12030] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 196.822266][T11690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.850942][T11690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.869691][T12043] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 196.923200][T12045] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 196.995900][T11811] lo speed is unknown, defaulting to 1000 [ 197.001684][ T5923] lo speed is unknown, defaulting to 1000 [ 197.033696][T12049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1526'. [ 197.074995][T11811] lo speed is unknown, defaulting to 1000 [ 197.211782][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.236246][T12058] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 197.276823][T12060] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 197.288304][T11690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.310735][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.346231][T11690] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.368180][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.375370][T10424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.390976][T12061] lo speed is unknown, defaulting to 1000 [ 197.416708][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.423852][T10424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.456844][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.463981][T10424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.497280][T12064] veth0_to_hsr: mtu less than device minimum [ 197.527113][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.534260][T10424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.552741][T12073] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 197.714683][T12081] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 197.896672][T12062] siw: device registration error -23 [ 198.193535][ T5829] syz_tun (unregistering): left allmulticast mode [ 198.211777][ T5829] syz_tun (unregistering): left promiscuous mode [ 198.219256][T11811] IPVS: starting estimator thread 0... [ 198.224803][ T5829] bridge0: port 3(syz_tun) entered disabled state [ 198.271405][T12112] __nla_validate_parse: 5 callbacks suppressed [ 198.271424][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 198.314576][T12109] IPVS: using max 26 ests per chain, 62400 per kthread [ 198.475476][T11690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.506612][T11682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.664149][T11690] veth0_vlan: entered promiscuous mode [ 198.712507][T11682] veth0_vlan: entered promiscuous mode [ 198.744050][T11690] veth1_vlan: entered promiscuous mode [ 198.899900][T12121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.939903][T11682] veth1_vlan: entered promiscuous mode [ 199.035708][T12121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.095199][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1543'. [ 199.138499][T12121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.178449][T11690] veth0_macvtap: entered promiscuous mode [ 199.183277][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.192250][T12130] veth1_macvtap: left promiscuous mode [ 199.209404][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.218027][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.230685][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.232753][T11690] veth1_macvtap: entered promiscuous mode [ 199.247567][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.262656][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.277880][T12121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.297012][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 199.307061][T12134] tc_dump_action: action bad kind [ 199.328674][T11682] veth0_macvtap: entered promiscuous mode [ 199.343580][T11682] veth1_macvtap: entered promiscuous mode [ 199.407702][T11690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.423644][T11690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.435739][T11690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.449401][T11690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.480883][T11690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.527622][T11690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.564819][T11690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.576771][T11690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.588262][T11690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.599973][T11690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.661428][T12132] lo speed is unknown, defaulting to 1000 [ 199.678735][T11690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.704701][T11690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.713466][T11690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.731380][T11690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.752524][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.772168][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.793194][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.821964][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.852487][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.870059][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.896065][T11682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.944919][T12121] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.969237][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.998478][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.025636][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.060457][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.073212][T11682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.090187][T11682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.103678][T11682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.140860][T12121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.171643][T11682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.207046][T11682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.236791][T11682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.260589][T11682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.356424][T12121] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.400645][T12121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.729256][T10422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.740324][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.748755][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.756098][T10422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.895904][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.916809][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.930676][T10424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.968859][T10424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.004823][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1549'. [ 201.058689][T12132] chnl_net:caif_netlink_parms(): no params data found [ 201.347475][ T5844] Bluetooth: hci0: command tx timeout [ 201.526328][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.533481][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.548632][T12132] bridge_slave_0: entered allmulticast mode [ 201.556413][T12132] bridge_slave_0: entered promiscuous mode [ 201.722121][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 201.794656][T12228] netlink: 'syz.4.1554': attribute type 6 has an invalid length. [ 201.821519][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 201.943253][T10418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.996568][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.013830][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.023982][T12132] bridge_slave_1: entered allmulticast mode [ 202.032189][T12132] bridge_slave_1: entered promiscuous mode [ 202.119845][T10418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.193449][T12132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.208349][T12132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.248342][T10418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.279920][T12132] team0: Port device team_slave_0 added [ 202.305475][T12132] team0: Port device team_slave_1 added [ 202.366832][T10418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.406406][T12132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.422052][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.458334][T12132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.500813][T12132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.511582][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.539884][T12132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.633506][T12132] hsr_slave_0: entered promiscuous mode [ 202.643313][T12132] hsr_slave_1: entered promiscuous mode [ 202.652632][T12132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.660362][T12132] Cannot create hsr debugfs directory [ 202.685749][T10418] bridge_slave_1: left allmulticast mode [ 202.696070][T10418] bridge_slave_1: left promiscuous mode [ 202.705598][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.718320][T10418] bridge_slave_0: left allmulticast mode [ 202.726377][T10418] bridge_slave_0: left promiscuous mode [ 202.746706][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.068735][T12273] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 203.298301][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.308884][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.318280][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.327749][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.348142][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.364079][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.427092][ T5844] Bluetooth: hci0: command tx timeout [ 203.458669][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.468908][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.480455][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.500645][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.509618][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.518324][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.688799][T10418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.702816][T10418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.713528][T10418] bond0 (unregistering): Released all slaves [ 203.995190][T12281] lo speed is unknown, defaulting to 1000 [ 204.456812][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 204.492764][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 204.525667][T12132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.542818][T12132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.580536][T12285] lo speed is unknown, defaulting to 1000 [ 204.605114][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1564'. [ 204.711703][T12132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.730704][T12132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.049281][T12132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.084780][T12132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.161095][T10418] hsr_slave_0: left promiscuous mode [ 205.167612][T10418] hsr_slave_1: left promiscuous mode [ 205.175835][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.183942][T10418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.201859][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.211425][T10418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.240632][T10418] veth1_macvtap: left promiscuous mode [ 205.246296][T10418] veth0_macvtap: left promiscuous mode [ 205.251919][T10418] veth1_vlan: left promiscuous mode [ 205.257570][T10418] veth0_vlan: left promiscuous mode [ 205.440002][ T5146] Bluetooth: hci2: command tx timeout [ 205.505087][ T5146] Bluetooth: hci0: command tx timeout [ 205.603426][ T5146] Bluetooth: hci3: command tx timeout [ 205.683394][T10418] team0 (unregistering): Port device team_slave_1 removed [ 205.729209][T10418] team0 (unregistering): Port device team_slave_0 removed [ 206.219646][T12132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.230405][T12132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.333558][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 206.395076][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 206.497335][T12132] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.537692][T12132] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.562731][T12132] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.583668][T12132] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.621986][T12281] chnl_net:caif_netlink_parms(): no params data found [ 206.823965][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.834372][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.841687][T12281] bridge_slave_0: entered allmulticast mode [ 206.849627][T12281] bridge_slave_0: entered promiscuous mode [ 206.894774][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.902036][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.910758][T12281] bridge_slave_1: entered allmulticast mode [ 206.925784][T12281] bridge_slave_1: entered promiscuous mode [ 206.957213][T12372] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 207.032110][T12372] bond4: entered promiscuous mode [ 207.038529][T12372] bond4: entered allmulticast mode [ 207.068851][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.081370][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.111699][T12375] bond4: (slave geneve2): making interface the new active one [ 207.119848][T12375] geneve2: entered promiscuous mode [ 207.125924][T12375] geneve2: entered allmulticast mode [ 207.132029][T12375] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 207.142561][T12285] chnl_net:caif_netlink_parms(): no params data found [ 207.162060][T12372] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 207.170571][T12372] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 207.179122][T12372] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 207.187625][T12372] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 207.202124][T12372] geneve3: entered promiscuous mode [ 207.209350][T12372] geneve3: entered allmulticast mode [ 207.220007][T12372] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.229082][T12372] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.240777][T12372] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.249555][T12372] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.347899][T10420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.376424][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.445737][T12281] team0: Port device team_slave_0 added [ 207.500826][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.511270][ T5146] Bluetooth: hci2: command tx timeout [ 207.526384][T12281] team0: Port device team_slave_1 added [ 207.551154][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.571494][T12390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.585158][ T5146] Bluetooth: hci0: command tx timeout [ 207.606973][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.624177][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.651084][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.665076][ T5146] Bluetooth: hci3: command tx timeout [ 207.698201][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.713119][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.720392][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.746927][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.791062][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.818766][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.826501][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.833775][T12285] bridge_slave_0: entered allmulticast mode [ 207.840936][T12285] bridge_slave_0: entered promiscuous mode [ 207.870533][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.881440][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.889583][T12285] bridge_slave_1: entered allmulticast mode [ 207.896553][T12285] bridge_slave_1: entered promiscuous mode [ 207.906458][T12132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.959088][T12281] hsr_slave_0: entered promiscuous mode [ 207.965681][T12281] hsr_slave_1: entered promiscuous mode [ 207.971955][T12281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.980601][T12281] Cannot create hsr debugfs directory [ 208.007243][T12285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.052948][T12285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.113358][T12285] team0: Port device team_slave_0 added [ 208.122812][T12285] team0: Port device team_slave_1 added [ 208.131378][T10418] bridge_slave_1: left allmulticast mode [ 208.138222][T10418] bridge_slave_1: left promiscuous mode [ 208.145416][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.156738][T10418] bridge_slave_0: left allmulticast mode [ 208.162412][T10418] bridge_slave_0: left promiscuous mode [ 208.168689][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.507051][T10418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.517781][T10418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.531708][T10418] bond0 (unregistering): Released all slaves [ 208.653585][T12132] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.670320][T12399] Bluetooth: MGMT ver 1.23 [ 208.699681][T12285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.714927][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.753956][T12285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.766867][T12285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.773831][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.812824][T12285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.979485][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.986669][T10421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.006628][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.013808][T10421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.026818][T12285] hsr_slave_0: entered promiscuous mode [ 209.036572][T12285] hsr_slave_1: entered promiscuous mode [ 209.042637][T12285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.050424][T12285] Cannot create hsr debugfs directory [ 209.477009][T10418] hsr_slave_0: left promiscuous mode [ 209.483205][T10418] hsr_slave_1: left promiscuous mode [ 209.505151][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.512720][T10418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.529290][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.537693][T10418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.550143][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1590'. [ 209.572126][T10418] veth1_macvtap: left promiscuous mode [ 209.577845][T10418] veth0_macvtap: left promiscuous mode [ 209.583452][T10418] veth1_vlan: left promiscuous mode [ 209.584723][ T5146] Bluetooth: hci2: command tx timeout [ 209.590409][T10418] veth0_vlan: left promiscuous mode [ 209.661556][T12431] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 209.739032][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 209.744457][ T5146] Bluetooth: hci3: command tx timeout [ 210.022431][T10418] team0 (unregistering): Port device team_slave_1 removed [ 210.063447][T10418] team0 (unregistering): Port device team_slave_0 removed [ 210.529630][T12132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.552601][T12434] ip6t_srh: unknown srh match flags 536B [ 210.681510][T12438] xt_TCPMSS: Only works on TCP SYN packets [ 210.744292][T12281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.831766][T12281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.856067][T12281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.899127][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 210.910478][T12281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.925664][T12449] netlink: 'syz.4.1595': attribute type 7 has an invalid length. [ 210.943669][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 211.062971][T12132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.161385][T12458] xt_l2tp: missing protocol rule (udp|l2tpip) [ 211.276466][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.296955][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.372144][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.379365][T10421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.416696][T12132] veth0_vlan: entered promiscuous mode [ 211.443446][T12471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 211.466065][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.473182][T10424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.515080][T12132] veth1_vlan: entered promiscuous mode [ 211.555154][T12285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.569779][T12285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.610933][T12285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.613668][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 211.651798][T12281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.666531][ T5146] Bluetooth: hci2: command tx timeout [ 211.671495][T12285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.774368][T12132] veth0_macvtap: entered promiscuous mode [ 211.825375][ T5146] Bluetooth: hci3: command tx timeout [ 211.853481][T12132] veth1_macvtap: entered promiscuous mode [ 211.911226][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 211.924904][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 211.957082][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.985896][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.004365][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.016730][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.028430][T12132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.034218][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 212.054024][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.080145][T12495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.114665][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.135013][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.152612][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.164683][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.182335][T12132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.216492][T12132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.239509][T12132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.252450][T12132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.263884][T12132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.302085][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.349713][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.356871][T10421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.371597][T12503] netlink: 'syz.3.1612': attribute type 12 has an invalid length. [ 212.379623][T12503] netlink: 'syz.3.1612': attribute type 29 has an invalid length. [ 212.418534][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.477327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.484506][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.673374][T10421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.712212][T10421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.784163][T12281] veth0_vlan: entered promiscuous mode [ 212.830026][T10426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.851781][T12281] veth1_vlan: entered promiscuous mode [ 212.864400][T10426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.959669][T12281] veth0_macvtap: entered promiscuous mode [ 212.995386][T12528] x_tables: duplicate underflow at hook 2 [ 213.008591][T12523] netlink: 'syz.4.1618': attribute type 4 has an invalid length. [ 213.036798][T12281] veth1_macvtap: entered promiscuous mode [ 213.112985][T12285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.202935][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.214389][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.233749][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.245088][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.256438][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.269095][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.289483][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.437160][T10426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.493738][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.541328][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.561500][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.590967][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.603734][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.620345][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.632048][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.758366][T10426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.831853][T12281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.861704][T12281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.880999][T12281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.900362][T12281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.935358][T12546] tipc: Started in network mode [ 213.940275][T12546] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.971833][T12546] tipc: Enabled bearer , priority 10 [ 214.000504][T10426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.026862][T12545] tipc: Enabling of bearer rejected, already enabled [ 214.062314][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.077676][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.099740][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.119294][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.127900][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.139182][T10426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.152052][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.172126][T12285] veth0_vlan: entered promiscuous mode [ 214.188138][T12553] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.200710][T12554] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.249050][T12285] veth1_vlan: entered promiscuous mode [ 214.331165][T12550] lo speed is unknown, defaulting to 1000 [ 214.521349][T10427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.528923][T12285] veth0_macvtap: entered promiscuous mode [ 214.538850][T10427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.592410][T10426] bridge_slave_1: left allmulticast mode [ 214.602518][T10426] bridge_slave_1: left promiscuous mode [ 214.608429][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.618190][T10426] bridge_slave_0: left allmulticast mode [ 214.623858][T10426] bridge_slave_0: left promiscuous mode [ 214.629985][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.978407][T10426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.989376][T10426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.999888][T10426] bond0 (unregistering): Released all slaves [ 215.019137][T12285] veth1_macvtap: entered promiscuous mode [ 215.093940][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.116688][ T5923] tipc: Node number set to 2886997162 [ 215.124496][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.134982][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.145585][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.156041][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.167565][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.177731][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.192702][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.205632][T12285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.219711][T10427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.249369][T10427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.332126][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.351225][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.369074][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.381129][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.392553][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.409366][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.420447][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.431755][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.438054][T12580] netlink: 'syz.3.1632': attribute type 8 has an invalid length. [ 215.443469][T12285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.469509][T12285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.479148][T12285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.490170][T12285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.500113][T12285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.748089][T12588] __nla_validate_parse: 8 callbacks suppressed [ 215.748107][T12588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1633'. [ 215.766516][T12588] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1633'. [ 215.953556][T10426] hsr_slave_0: left promiscuous mode [ 215.960558][T10426] hsr_slave_1: left promiscuous mode [ 215.970951][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.978690][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.987685][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.995582][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.025470][T10426] veth1_macvtap: left promiscuous mode [ 216.031427][T10426] veth0_macvtap: left promiscuous mode [ 216.039155][T10426] veth1_vlan: left promiscuous mode [ 216.044676][T10426] veth0_vlan: left promiscuous mode [ 216.227493][ T5844] Bluetooth: hci0: command tx timeout [ 216.480091][T10426] team0 (unregistering): Port device team_slave_1 removed [ 216.525362][T10426] team0 (unregistering): Port device team_slave_0 removed [ 216.974921][T10422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.993351][T10422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.993634][T12550] chnl_net:caif_netlink_parms(): no params data found [ 217.114109][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 217.188040][T10420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.211504][T10420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.374192][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.424002][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.443760][T12550] bridge_slave_0: entered allmulticast mode [ 217.476748][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.477592][T12550] bridge_slave_0: entered promiscuous mode [ 217.492475][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.496604][T12550] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.507214][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.533529][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.538092][T12550] bridge_slave_1: entered allmulticast mode [ 217.560290][T12550] bridge_slave_1: entered promiscuous mode [ 217.572242][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.586846][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.594179][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.683224][T12550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.700347][T12550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.763606][T12615] lo speed is unknown, defaulting to 1000 [ 217.835961][T12550] team0: Port device team_slave_0 added [ 217.875547][T12550] team0: Port device team_slave_1 added [ 217.966321][T12550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.973317][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.034654][T12550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.090198][T10426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.109560][T12630] ip6tnl1: entered allmulticast mode [ 218.151290][T12550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.158572][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.186305][T12550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.248886][T10426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.304216][T12550] hsr_slave_0: entered promiscuous mode [ 218.310522][ T5844] Bluetooth: hci0: command tx timeout [ 218.317429][T12550] hsr_slave_1: entered promiscuous mode [ 218.323396][T12550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.331473][T12550] Cannot create hsr debugfs directory [ 218.457250][T10426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.610010][T12615] chnl_net:caif_netlink_parms(): no params data found [ 218.800136][T10426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.882288][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.891953][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.900468][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.912519][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.920367][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.928234][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.098936][T12643] lo speed is unknown, defaulting to 1000 [ 219.203593][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.212081][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.219568][T12615] bridge_slave_0: entered allmulticast mode [ 219.235600][T12615] bridge_slave_0: entered promiscuous mode [ 219.259933][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.294917][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.322551][T12615] bridge_slave_1: entered allmulticast mode [ 219.374878][T12615] bridge_slave_1: entered promiscuous mode [ 219.581911][T12615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.639560][T12615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.671203][ T5146] Bluetooth: hci2: command tx timeout [ 219.770200][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 219.829778][T10426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.858844][T12691] sctp: [Deprecated]: syz.4.1653 (pid 12691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.858844][T12691] Use struct sctp_sack_info instead [ 219.890579][T12689] sctp: [Deprecated]: syz.4.1653 (pid 12689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.890579][T12689] Use struct sctp_sack_info instead [ 219.949012][T10426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.007201][T12684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.017985][T12684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.030196][T12684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40442 - 0 [ 220.054203][T12615] team0: Port device team_slave_0 added [ 220.081599][T10426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.100356][T12550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.110016][T12550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.127469][T12615] team0: Port device team_slave_1 added [ 220.182156][T12684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.189613][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1654'. [ 220.194664][T12684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.216939][T12684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40442 - 0 [ 220.233898][T12550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.258685][T10426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.315867][T12550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.355767][T12684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.367928][T12684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.378520][T12684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40442 - 0 [ 220.390453][ T5146] Bluetooth: hci0: command tx timeout [ 220.406961][T12615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.413946][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.441119][T12615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.500004][T12615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.507561][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.534941][T12615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.562446][T12684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.573246][T12684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.583799][T12684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40442 - 0 [ 220.709901][T12643] chnl_net:caif_netlink_parms(): no params data found [ 220.798981][T12615] hsr_slave_0: entered promiscuous mode [ 220.806295][T12615] hsr_slave_1: entered promiscuous mode [ 220.812658][T12615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.820241][T12710] netlink: 'syz.4.1657': attribute type 6 has an invalid length. [ 220.833930][T12615] Cannot create hsr debugfs directory [ 220.924857][T10426] bridge_slave_1: left allmulticast mode [ 220.930554][T10426] bridge_slave_1: left promiscuous mode [ 220.974878][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.999114][T10426] bridge_slave_0: left allmulticast mode [ 221.005332][T10426] bridge_slave_0: left promiscuous mode [ 221.011114][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.024885][ T5146] Bluetooth: hci3: command tx timeout [ 221.036605][T10426] bridge_slave_1: left allmulticast mode [ 221.042282][T10426] bridge_slave_1: left promiscuous mode [ 221.048617][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.058361][T10426] bridge_slave_0: left allmulticast mode [ 221.064108][T10426] bridge_slave_0: left promiscuous mode [ 221.070635][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.683341][T10426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.694139][T10426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.704565][T10426] bond0 (unregistering): Released all slaves [ 221.756742][ T5146] Bluetooth: hci2: command tx timeout [ 221.830046][T10426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.841862][T10426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.852422][T10426] bond0 (unregistering): Released all slaves [ 221.882464][T12684] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.894541][T12684] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 40442 - 0 [ 221.913910][T12684] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.081306][T12684] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.121964][T12684] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 40442 - 0 [ 222.139677][T12684] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.213336][T12684] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.224154][T12684] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 40442 - 0 [ 222.233176][T12684] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.284019][T12684] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.311305][T12684] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 40442 - 0 [ 222.330461][T12684] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.346297][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.366653][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.373936][T12643] bridge_slave_0: entered allmulticast mode [ 222.393623][T12643] bridge_slave_0: entered promiscuous mode [ 222.403295][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.414462][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.421775][T12643] bridge_slave_1: entered allmulticast mode [ 222.432859][T12643] bridge_slave_1: entered promiscuous mode [ 222.465156][ T5146] Bluetooth: hci0: command tx timeout [ 222.475844][T12739] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.1661'. [ 222.567704][T12739] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1661'. [ 222.639163][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.671487][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.802626][T12550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.820804][T12643] team0: Port device team_slave_0 added [ 222.898312][T12643] team0: Port device team_slave_1 added [ 223.050856][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.068875][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.098006][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.109997][ T5146] Bluetooth: hci3: command tx timeout [ 223.132945][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.146165][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.173524][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.213466][T12550] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.377890][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.385088][T10422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.592769][T12643] hsr_slave_0: entered promiscuous mode [ 223.605471][T12643] hsr_slave_1: entered promiscuous mode [ 223.611803][T12643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.628237][T12643] Cannot create hsr debugfs directory [ 223.639287][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.646469][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.707888][T10426] hsr_slave_0: left promiscuous mode [ 223.730355][T10426] hsr_slave_1: left promiscuous mode [ 223.775090][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.782592][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.800207][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.820672][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.828219][ T5146] Bluetooth: hci2: command tx timeout [ 223.842963][T10426] hsr_slave_0: left promiscuous mode [ 223.849417][T10426] hsr_slave_1: left promiscuous mode [ 223.855571][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.863011][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.873458][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.881302][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.924223][T10426] veth1_macvtap: left promiscuous mode [ 223.930072][T10426] veth0_macvtap: left promiscuous mode [ 223.936163][T10426] veth1_vlan: left promiscuous mode [ 223.942738][T10426] veth0_vlan: left promiscuous mode [ 223.951168][T10426] veth1_macvtap: left promiscuous mode [ 223.956791][T10426] veth0_macvtap: left promiscuous mode [ 223.962600][T10426] veth1_vlan: left promiscuous mode [ 223.968516][T10426] veth0_vlan: left promiscuous mode [ 224.501733][T10426] team0 (unregistering): Port device team_slave_1 removed [ 224.542167][T10426] team0 (unregistering): Port device team_slave_0 removed [ 225.190759][ T5146] Bluetooth: hci3: command tx timeout [ 225.248441][T10426] team0 (unregistering): Port device team_slave_1 removed [ 225.293780][T10426] team0 (unregistering): Port device team_slave_0 removed [ 225.675511][T12792] hsr0: entered allmulticast mode [ 225.681027][T12792] hsr_slave_0: entered allmulticast mode [ 225.687010][T12792] hsr_slave_1: entered allmulticast mode [ 225.693362][T12795] hsr_slave_0: left promiscuous mode [ 225.701569][T12795] hsr_slave_1: left promiscuous mode [ 225.718500][T12795] hsr0 (unregistering): left allmulticast mode [ 225.907743][ T5146] Bluetooth: hci2: command tx timeout [ 225.989849][T12615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.017175][T12615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.060311][T12615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.099287][T12615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.762307][T12615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.826788][T12550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.858602][T12615] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.911104][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.918296][T10420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.938804][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.945989][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.970291][T12849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1681'. [ 226.996598][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 226.997729][T12852] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 227.032524][T12550] veth0_vlan: entered promiscuous mode [ 227.080097][T12849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.112906][T12550] veth1_vlan: entered promiscuous mode [ 227.121150][T12643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.146567][T12643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.158353][T12643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.180096][T12643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.249456][T12550] veth0_macvtap: entered promiscuous mode [ 227.265778][ T5146] Bluetooth: hci3: command tx timeout [ 227.286348][T12550] veth1_macvtap: entered promiscuous mode [ 227.331653][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.342742][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.359258][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.370425][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.388148][T12550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.399344][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.410352][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.420937][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.431888][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.443349][T12550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.477232][T12550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.487314][T12550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.497538][T12550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.506717][T12550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.558306][T12615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.617130][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.668931][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.682745][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.732034][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.739986][T10426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.752740][T10426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.755205][T12860] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 227.769576][T12860] netlink: 'syz.3.1683': attribute type 3 has an invalid length. [ 227.780136][T12860] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1683'. [ 227.792265][T12615] veth0_vlan: entered promiscuous mode [ 227.836524][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.843719][T10426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.873757][T12615] veth1_vlan: entered promiscuous mode [ 227.897451][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.904631][T10426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.995494][T12643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.011660][T12643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.207347][T12615] veth0_macvtap: entered promiscuous mode [ 228.267922][T12615] veth1_macvtap: entered promiscuous mode [ 228.362925][T12890] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 228.521256][T10422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.623264][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.634777][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.644896][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.655935][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.666335][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.677180][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.688710][T12615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.762114][T10422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.807024][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.828145][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.859966][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.884748][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.921038][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.925484][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 228.947005][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.981204][T12615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.007259][T12615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.028697][T12615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.064469][T12615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.073216][T12615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.146586][T10422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.238186][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.389228][T10422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.460273][T12927] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 229.499139][T12927] netlink: 'syz.4.1693': attribute type 4 has an invalid length. [ 229.509052][T12927] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1693'. [ 229.531599][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.541788][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.557932][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.578421][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.588486][T10428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.598151][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.613117][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.642422][T10428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.670328][T12643] veth0_vlan: entered promiscuous mode [ 229.729933][T10419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.739539][T10419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.800863][T12643] veth1_vlan: entered promiscuous mode [ 229.830761][T12929] lo speed is unknown, defaulting to 1000 [ 229.973571][T10422] bridge_slave_1: left allmulticast mode [ 229.985533][T10422] bridge_slave_1: left promiscuous mode [ 229.991303][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.031651][T10422] bridge_slave_0: left allmulticast mode [ 230.045209][T10422] bridge_slave_0: left promiscuous mode [ 230.050962][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.637110][T10422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.658080][T10422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.668373][T10422] bond0 (unregistering): Released all slaves [ 230.681154][T12944] macvtap0: mtu less than device minimum [ 230.739472][T12953] tunl0: entered promiscuous mode [ 230.779920][T12952] lo speed is unknown, defaulting to 1000 [ 230.881205][T12643] veth0_macvtap: entered promiscuous mode [ 230.954597][T12643] veth1_macvtap: entered promiscuous mode [ 231.073039][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.118151][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.131226][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.148017][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.160730][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.179426][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.192781][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.209374][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.221520][T12643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.242904][T12929] chnl_net:caif_netlink_parms(): no params data found [ 231.406494][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.427398][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.457957][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.485002][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.505037][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.526138][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.548781][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.569574][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.591676][T12643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.673015][T10422] hsr_slave_0: left promiscuous mode [ 231.676469][ T5844] Bluetooth: hci0: command tx timeout [ 231.686686][T10422] hsr_slave_1: left promiscuous mode [ 231.693122][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.711072][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.720372][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.734410][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.760646][T10422] veth1_macvtap: left promiscuous mode [ 231.766554][T10422] veth0_macvtap: left promiscuous mode [ 231.772167][T10422] veth1_vlan: left promiscuous mode [ 231.778166][T10422] veth0_vlan: left promiscuous mode [ 231.788949][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.798290][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.812329][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.821300][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.831749][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.841102][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.233113][T10422] team0 (unregistering): Port device team_slave_1 removed [ 232.280080][T10422] team0 (unregistering): Port device team_slave_0 removed [ 232.707948][T12643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.735734][T12643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.751363][T12643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.760722][T12643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.042848][T12988] lo speed is unknown, defaulting to 1000 [ 233.065790][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.073869][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.129119][T12929] bridge_slave_0: entered allmulticast mode [ 233.145892][T12929] bridge_slave_0: entered promiscuous mode [ 233.226664][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.274545][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.281855][T12929] bridge_slave_1: entered allmulticast mode [ 233.296769][T12929] bridge_slave_1: entered promiscuous mode [ 233.368689][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.437897][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.513038][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.530893][T12929] team0: Port device team_slave_0 added [ 233.546902][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.567935][T12929] team0: Port device team_slave_1 added [ 233.719260][T10422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.744610][ T5146] Bluetooth: hci0: command tx timeout [ 233.754089][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.762416][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.788943][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.801858][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.809014][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.835503][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.906210][ T5146] Bluetooth: hci2: command tx timeout [ 233.941529][T10422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.965557][T10426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.973427][T10426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.016039][T12929] hsr_slave_0: entered promiscuous mode [ 234.022431][T12929] hsr_slave_1: entered promiscuous mode [ 234.028919][T12929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.037050][T12929] Cannot create hsr debugfs directory [ 234.111303][T10422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.167680][T12988] chnl_net:caif_netlink_parms(): no params data found [ 234.352935][T10422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.519465][T13060] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1712'. [ 234.745870][T12988] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.752995][T12988] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.775678][T12988] bridge_slave_0: entered allmulticast mode [ 234.782659][T12988] bridge_slave_0: entered promiscuous mode [ 234.923549][T12988] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.934435][T12988] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.941680][T12988] bridge_slave_1: entered allmulticast mode [ 234.950552][T12988] bridge_slave_1: entered promiscuous mode [ 234.963853][T10422] bridge_slave_1: left allmulticast mode [ 234.970108][T10422] bridge_slave_1: left promiscuous mode [ 234.985555][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.005172][T10422] bridge_slave_0: left allmulticast mode [ 235.010878][T10422] bridge_slave_0: left promiscuous mode [ 235.018621][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.472317][T10422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.483209][T10422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.494078][T10422] bond0 (unregistering): Released all slaves [ 235.641300][T12988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.690016][T12988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.834886][ T5146] Bluetooth: hci0: command tx timeout [ 235.891415][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.912218][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.935168][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.945679][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.953643][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.961236][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.994842][ T5146] Bluetooth: hci2: command tx timeout [ 236.085614][T12988] team0: Port device team_slave_0 added [ 236.186714][T12988] team0: Port device team_slave_1 added [ 236.207796][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 236.395034][T12988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.415665][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.484402][T12988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.522258][T12988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.530199][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.557623][T12988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.598157][T13096] lo speed is unknown, defaulting to 1000 [ 236.847651][T12988] hsr_slave_0: entered promiscuous mode [ 236.866228][T12988] hsr_slave_1: entered promiscuous mode [ 236.879114][T12988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.890502][T12988] Cannot create hsr debugfs directory [ 236.932692][T10422] hsr_slave_0: left promiscuous mode [ 236.940721][T10422] hsr_slave_1: left promiscuous mode [ 236.947303][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.955084][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.962974][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.970940][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.991477][T10422] veth1_macvtap: left promiscuous mode [ 236.997272][T10422] veth0_macvtap: left promiscuous mode [ 237.002943][T10422] veth1_vlan: left promiscuous mode [ 237.008438][T10422] veth0_vlan: left promiscuous mode [ 237.450582][T10422] team0 (unregistering): Port device team_slave_1 removed [ 237.509238][T10422] team0 (unregistering): Port device team_slave_0 removed [ 237.905624][ T5146] Bluetooth: hci0: command tx timeout [ 237.990591][ T5146] Bluetooth: hci3: command tx timeout [ 238.036058][T13131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1723'. [ 238.075481][ T5146] Bluetooth: hci2: command tx timeout [ 238.308608][T12929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.412896][T12929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.456269][T12929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.542011][T12929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.546098][T13160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1727'. [ 238.617752][T13164] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1728'. [ 239.019416][T10422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.168419][T10422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.214902][T13096] chnl_net:caif_netlink_parms(): no params data found [ 239.345098][T10428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 239.383296][T10422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.532584][T10422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.724002][T13096] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.735999][T13096] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.743314][T13096] bridge_slave_0: entered allmulticast mode [ 239.765870][T13096] bridge_slave_0: entered promiscuous mode [ 239.780231][T13096] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.800294][T13096] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.811943][T13096] bridge_slave_1: entered allmulticast mode [ 239.819419][T13096] bridge_slave_1: entered promiscuous mode [ 239.946540][T13096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.030921][T13096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.065250][ T5146] Bluetooth: hci3: command tx timeout [ 240.108949][T12929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.145020][ T5146] Bluetooth: hci2: command tx timeout [ 240.175437][T10422] bridge_slave_1: left allmulticast mode [ 240.181127][T10422] bridge_slave_1: left promiscuous mode [ 240.187906][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.197378][T10422] bridge_slave_0: left allmulticast mode [ 240.203183][T10422] bridge_slave_0: left promiscuous mode [ 240.209486][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.573950][T10422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.584984][T10422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.599476][T10422] bond0 (unregistering): Released all slaves [ 240.610329][T12988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.627615][T12988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.653123][T13096] team0: Port device team_slave_0 added [ 240.692709][T13096] team0: Port device team_slave_1 added [ 240.765426][T13237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 240.800911][T12988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.936149][T13235] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 240.963768][T13241] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 240.982349][T12988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.066475][T13096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.073483][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.104093][T13096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.136481][T12929] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.172012][T13096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.194691][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.227514][T13096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.283998][T13267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1742'. [ 241.347199][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.354401][T10420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.423214][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.430383][T10420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.488053][T13096] hsr_slave_0: entered promiscuous mode [ 241.521788][T13096] hsr_slave_1: entered promiscuous mode [ 241.537826][T13096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.569267][T13096] Cannot create hsr debugfs directory [ 241.713721][T10422] hsr_slave_0: left promiscuous mode [ 241.741787][T10422] hsr_slave_1: left promiscuous mode [ 241.748445][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.766053][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.778807][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.796333][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.841265][T10422] veth1_macvtap: left promiscuous mode [ 241.848153][T10422] veth0_macvtap: left promiscuous mode [ 241.853785][T10422] veth1_vlan: left promiscuous mode [ 241.884720][T10422] veth0_vlan: left promiscuous mode [ 242.154390][ T5844] Bluetooth: hci3: command tx timeout [ 242.557358][T10422] team0 (unregistering): Port device team_slave_1 removed [ 242.600578][T10422] team0 (unregistering): Port device team_slave_0 removed [ 242.998511][T13313] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1751'. [ 243.009720][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 243.181389][T13325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 243.200812][T12988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.273243][T12988] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.322056][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.329228][T10421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.458674][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 243.461216][T13339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1755'. [ 243.506977][T13342] Bluetooth: MGMT ver 1.23 [ 243.513904][T13339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1755'. [ 243.607849][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.615049][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.713341][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.773987][T12988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.819757][T12988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.098019][T12929] veth0_vlan: entered promiscuous mode [ 244.136829][T12929] veth1_vlan: entered promiscuous mode [ 244.208689][T12929] veth0_macvtap: entered promiscuous mode [ 244.225924][ T5832] Bluetooth: hci3: command 0x0419 tx timeout [ 244.231213][T12929] veth1_macvtap: entered promiscuous mode [ 244.311472][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.339338][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.352523][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.366755][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.378019][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.384976][T13339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 244.386736][T13096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.391790][T13339] 0·: hsr_addr_subst_dest: Unknown node [ 244.427264][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.445470][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.461843][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.476292][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.482149][T13380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.487748][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.506410][T13096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.521853][T12929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.531776][T12929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.544071][T12929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.553286][T12929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.568120][T13096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.583367][T13096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.609963][T13378] tipc: Enabling of bearer rejected, failed to enable media [ 244.636278][T13380] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 244.652587][T12988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.863849][T10428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.904849][T10428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.926883][T12988] veth0_vlan: entered promiscuous mode [ 244.989400][T12988] veth1_vlan: entered promiscuous mode [ 245.026900][T10422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.061753][T10422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.118684][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.151586][T12988] veth0_macvtap: entered promiscuous mode [ 245.188381][T12988] veth1_macvtap: entered promiscuous mode [ 245.227650][T13096] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.276124][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.283296][T10428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.316324][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.323475][T10428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.346119][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.366545][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.381454][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.393876][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.407728][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.418883][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.432236][T12988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.465610][T13407] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 245.466333][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.486873][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.497452][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.509331][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.520017][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.531284][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.543234][T12988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.575241][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.585440][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.586007][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 245.608051][T12988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.618789][T12988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.629464][T12988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.642741][T12988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.738855][T13096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.902159][T10422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.924633][T10422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.052278][T10419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.080298][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.131115][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.154155][T13096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.203753][T10419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.289766][T13096] veth0_vlan: entered promiscuous mode [ 246.304662][ T5844] Bluetooth: hci3: command 0x0419 tx timeout [ 246.313771][T13096] veth1_vlan: entered promiscuous mode [ 246.402505][T10419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.431047][T13096] veth0_macvtap: entered promiscuous mode [ 246.440304][T13096] veth1_macvtap: entered promiscuous mode [ 246.459476][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.475707][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.487760][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.498329][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.509079][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.519570][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.529609][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.540146][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.551842][T13096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.571006][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.582379][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.592583][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.604230][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.614899][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.627005][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.637043][T13096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.647541][T13096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.660762][T13096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.670952][T13096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.679938][T13096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.691403][T13096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.739972][T13096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.770338][T13430] __nla_validate_parse: 39 callbacks suppressed [ 246.770355][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 246.794517][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 246.797289][T10419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.168370][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.183605][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.193668][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.204166][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.212581][T10428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.221593][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.230592][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.232865][T10428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.260502][T10419] bridge_slave_1: left allmulticast mode [ 247.267559][T10419] bridge_slave_1: left promiscuous mode [ 247.273258][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.282009][T10419] bridge_slave_0: left allmulticast mode [ 247.289207][T10419] bridge_slave_0: left promiscuous mode [ 247.295394][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.631676][T10419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.642394][T10419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.652779][T10419] bond0 (unregistering): Released all slaves [ 247.687792][T10430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.707496][T13439] lo speed is unknown, defaulting to 1000 [ 247.725274][T10430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.928195][T13096] ================================================================== [ 247.936305][T13096] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 247.943699][T13096] Write of size 8 at addr ffff88805514d5a0 by task syz-executor/13096 [ 247.951843][T13096] [ 247.954167][T13096] CPU: 0 UID: 0 PID: 13096 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 247.954184][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.954193][T13096] Call Trace: [ 247.954200][T13096] [ 247.954207][T13096] dump_stack_lvl+0x241/0x360 [ 247.954226][T13096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.954241][T13096] ? __pfx__printk+0x10/0x10 [ 247.954253][T13096] ? _printk+0xd5/0x120 [ 247.954265][T13096] ? __virt_addr_valid+0x183/0x530 [ 247.954285][T13096] ? __virt_addr_valid+0x183/0x530 [ 247.954305][T13096] print_report+0x169/0x550 [ 247.954322][T13096] ? __virt_addr_valid+0x183/0x530 [ 247.954342][T13096] ? __virt_addr_valid+0x183/0x530 [ 247.954360][T13096] ? __virt_addr_valid+0x45f/0x530 [ 247.954378][T13096] ? __phys_addr+0xba/0x170 [ 247.954396][T13096] ? sco_conn_put+0xad/0x210 [ 247.954408][T13096] kasan_report+0x143/0x180 [ 247.954424][T13096] ? sco_conn_put+0xad/0x210 [ 247.954439][T13096] sco_conn_put+0xad/0x210 [ 247.954451][T13096] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 247.954464][T13096] hci_conn_hash_flush+0x1be/0x350 [ 247.954484][T13096] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 247.954500][T13096] ? drain_workqueue+0x2d3/0x3a0 [ 247.954518][T13096] ? hci_discovery_set_state+0x57/0x180 [ 247.954534][T13096] hci_dev_close_sync+0xa8b/0x1260 [ 247.954551][T13096] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 247.954565][T13096] ? rcu_is_watching+0x15/0xb0 [ 247.954581][T13096] hci_unregister_dev+0x20b/0x510 [ 247.954601][T13096] vhci_release+0x80/0xd0 [ 247.954616][T13096] ? __pfx_vhci_release+0x10/0x10 [ 247.954631][T13096] __fput+0x3e9/0x9f0 [ 247.954653][T13096] task_work_run+0x24f/0x310 [ 247.954669][T13096] ? __pfx_task_work_run+0x10/0x10 [ 247.954681][T13096] ? do_exit+0xa25/0x28e0 [ 247.954699][T13096] ? do_exit+0xa25/0x28e0 [ 247.954723][T13096] do_exit+0xa2a/0x28e0 [ 247.954743][T13096] ? __pfx_do_exit+0x10/0x10 [ 247.954758][T13096] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.954778][T13096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.954798][T13096] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.954811][T13096] ? lockdep_hardirqs_on+0x99/0x150 [ 247.954826][T13096] do_group_exit+0x207/0x2c0 [ 247.954845][T13096] __x64_sys_exit_group+0x3f/0x40 [ 247.954862][T13096] x64_sys_call+0x26a8/0x26b0 [ 247.954876][T13096] do_syscall_64+0xf3/0x230 [ 247.954893][T13096] ? clear_bhb_loop+0x35/0x90 [ 247.954911][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.954928][T13096] RIP: 0033:0x7fe40d18cde9 [ 247.954944][T13096] Code: Unable to access opcode bytes at 0x7fe40d18cdbf. [ 247.954951][T13096] RSP: 002b:00007ffeca30f2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 247.954967][T13096] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe40d18cde9 [ 247.954977][T13096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 247.954986][T13096] RBP: 00007fe40d1ed8d0 R08: 00007ffeca30d067 R09: 0000000000000003 [ 247.954995][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.955004][T13096] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeca30f480 [ 247.955020][T13096] [ 247.955025][T13096] [ 248.256460][T13096] Allocated by task 13277: [ 248.260868][T13096] kasan_save_track+0x3f/0x80 [ 248.265540][T13096] __kasan_kmalloc+0x98/0xb0 [ 248.270116][T13096] __kmalloc_noprof+0x285/0x4c0 [ 248.274952][T13096] sk_prot_alloc+0xe0/0x210 [ 248.279441][T13096] sk_alloc+0x38/0x370 [ 248.283495][T13096] bt_sock_alloc+0x3c/0x340 [ 248.287983][T13096] sco_sock_create+0xbb/0x390 [ 248.292651][T13096] bt_sock_create+0x161/0x230 [ 248.297314][T13096] __sock_create+0x4c0/0xa30 [ 248.301892][T13096] __sys_socket+0x150/0x3c0 [ 248.306382][T13096] __x64_sys_socket+0x7a/0x90 [ 248.311041][T13096] do_syscall_64+0xf3/0x230 [ 248.315529][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.321422][T13096] [ 248.323750][T13096] Freed by task 13277: [ 248.327802][T13096] kasan_save_track+0x3f/0x80 [ 248.332476][T13096] kasan_save_free_info+0x40/0x50 [ 248.337500][T13096] __kasan_slab_free+0x59/0x70 [ 248.342261][T13096] kfree+0x196/0x430 [ 248.346147][T13096] __sk_destruct+0x479/0x5f0 [ 248.350726][T13096] sco_sock_release+0x25e/0x320 [ 248.355576][T13096] sock_close+0xbc/0x240 [ 248.359802][T13096] __fput+0x3e9/0x9f0 [ 248.363772][T13096] task_work_run+0x24f/0x310 [ 248.368349][T13096] do_exit+0xa2a/0x28e0 [ 248.372496][T13096] do_group_exit+0x207/0x2c0 [ 248.377074][T13096] get_signal+0x168c/0x1720 [ 248.381566][T13096] arch_do_signal_or_restart+0x96/0x860 [ 248.387130][T13096] syscall_exit_to_user_mode+0xce/0x340 [ 248.392669][T13096] do_syscall_64+0x100/0x230 [ 248.397250][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.403140][T13096] [ 248.405451][T13096] The buggy address belongs to the object at ffff88805514d000 [ 248.405451][T13096] which belongs to the cache kmalloc-2k of size 2048 [ 248.419492][T13096] The buggy address is located 1440 bytes inside of [ 248.419492][T13096] freed 2048-byte region [ffff88805514d000, ffff88805514d800) [ 248.433449][T13096] [ 248.435762][T13096] The buggy address belongs to the physical page: [ 248.442166][T13096] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55148 [ 248.450915][T13096] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.459401][T13096] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.467364][T13096] page_type: f5(slab) [ 248.471336][T13096] raw: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001 [ 248.479907][T13096] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 248.488482][T13096] head: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001 [ 248.497141][T13096] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 248.505798][T13096] head: 00fff00000000003 ffffea0001545201 ffffffffffffffff 0000000000000000 [ 248.514455][T13096] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 248.523110][T13096] page dumped because: kasan: bad access detected [ 248.529518][T13096] page_owner tracks the page as allocated [ 248.535219][T13096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11811, tgid 11811 (kworker/0:8), ts 230058733933, free_ts 229750489142 [ 248.556834][T13096] post_alloc_hook+0x1f4/0x240 [ 248.561598][T13096] get_page_from_freelist+0x365c/0x37a0 [ 248.567132][T13096] __alloc_frozen_pages_noprof+0x292/0x710 [ 248.572923][T13096] alloc_pages_mpol+0x311/0x660 [ 248.577777][T13096] allocate_slab+0x8f/0x3a0 [ 248.582287][T13096] ___slab_alloc+0xc27/0x14a0 [ 248.586983][T13096] __slab_alloc+0x58/0xa0 [ 248.591314][T13096] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 248.597734][T13096] kmalloc_reserve+0x111/0x2a0 [ 248.602501][T13096] __alloc_skb+0x1f3/0x440 [ 248.606927][T13096] mld_newpack+0x17c/0xc70 [ 248.611342][T13096] add_grec+0x1492/0x19a0 [ 248.615664][T13096] mld_send_initial_cr+0x228/0x4b0 [ 248.620771][T13096] mld_dad_work+0x44/0x500 [ 248.625182][T13096] process_scheduled_works+0xabe/0x18e0 [ 248.630739][T13096] worker_thread+0x870/0xd30 [ 248.635329][T13096] page last free pid 12615 tgid 12615 stack trace: [ 248.641818][T13096] free_frozen_pages+0xe0d/0x10e0 [ 248.646839][T13096] __put_partials+0x160/0x1c0 [ 248.651507][T13096] put_cpu_partial+0x17c/0x250 [ 248.656257][T13096] __slab_free+0x290/0x380 [ 248.661178][T13096] qlist_free_all+0x9a/0x140 [ 248.665791][T13096] kasan_quarantine_reduce+0x14f/0x170 [ 248.671251][T13096] __kasan_slab_alloc+0x23/0x80 [ 248.676098][T13096] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 248.681993][T13096] __alloc_skb+0x1c3/0x440 [ 248.686399][T13096] netlink_ack+0x145/0xa60 [ 248.690806][T13096] netlink_rcv_skb+0x294/0x480 [ 248.695562][T13096] netlink_unicast+0x7f6/0x990 [ 248.700315][T13096] netlink_sendmsg+0x8de/0xcb0 [ 248.705091][T13096] __sock_sendmsg+0x221/0x270 [ 248.709777][T13096] __sys_sendto+0x363/0x4c0 [ 248.714278][T13096] __x64_sys_sendto+0xde/0x100 [ 248.719059][T13096] [ 248.721376][T13096] Memory state around the buggy address: [ 248.726990][T13096] ffff88805514d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.735043][T13096] ffff88805514d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.743093][T13096] >ffff88805514d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.751139][T13096] ^ [ 248.756235][T13096] ffff88805514d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.764283][T13096] ffff88805514d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.772329][T13096] ================================================================== [ 248.802803][T13096] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.810048][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 248.820997][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.831059][T13096] Call Trace: [ 248.834335][T13096] [ 248.837258][T13096] dump_stack_lvl+0x241/0x360 [ 248.841932][T13096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.847121][T13096] ? __pfx__printk+0x10/0x10 [ 248.851695][T13096] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.857671][T13096] ? vscnprintf+0x5d/0x90 [ 248.861995][T13096] panic+0x349/0x880 [ 248.865885][T13096] ? check_panic_on_warn+0x21/0xb0 [ 248.870997][T13096] ? __pfx_panic+0x10/0x10 [ 248.875413][T13096] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 248.881379][T13096] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.887696][T13096] check_panic_on_warn+0x86/0xb0 [ 248.892628][T13096] ? sco_conn_put+0xad/0x210 [ 248.897205][T13096] end_report+0x77/0x160 [ 248.901439][T13096] kasan_report+0x154/0x180 [ 248.905943][T13096] ? sco_conn_put+0xad/0x210 [ 248.910526][T13096] sco_conn_put+0xad/0x210 [ 248.914928][T13096] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 248.920202][T13096] hci_conn_hash_flush+0x1be/0x350 [ 248.925309][T13096] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 248.930935][T13096] ? drain_workqueue+0x2d3/0x3a0 [ 248.935869][T13096] ? hci_discovery_set_state+0x57/0x180 [ 248.941405][T13096] hci_dev_close_sync+0xa8b/0x1260 [ 248.946513][T13096] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 248.952051][T13096] ? rcu_is_watching+0x15/0xb0 [ 248.956808][T13096] hci_unregister_dev+0x20b/0x510 [ 248.961834][T13096] vhci_release+0x80/0xd0 [ 248.966153][T13096] ? __pfx_vhci_release+0x10/0x10 [ 248.971171][T13096] __fput+0x3e9/0x9f0 [ 248.975151][T13096] task_work_run+0x24f/0x310 [ 248.979734][T13096] ? __pfx_task_work_run+0x10/0x10 [ 248.984834][T13096] ? do_exit+0xa25/0x28e0 [ 248.989156][T13096] ? do_exit+0xa25/0x28e0 [ 248.993477][T13096] do_exit+0xa2a/0x28e0 [ 248.997628][T13096] ? __pfx_do_exit+0x10/0x10 [ 249.002210][T13096] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.008190][T13096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.014525][T13096] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.019721][T13096] ? lockdep_hardirqs_on+0x99/0x150 [ 249.024913][T13096] do_group_exit+0x207/0x2c0 [ 249.029497][T13096] __x64_sys_exit_group+0x3f/0x40 [ 249.034513][T13096] x64_sys_call+0x26a8/0x26b0 [ 249.039180][T13096] do_syscall_64+0xf3/0x230 [ 249.043675][T13096] ? clear_bhb_loop+0x35/0x90 [ 249.048346][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.054231][T13096] RIP: 0033:0x7fe40d18cde9 [ 249.058637][T13096] Code: Unable to access opcode bytes at 0x7fe40d18cdbf. [ 249.065677][T13096] RSP: 002b:00007ffeca30f2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 249.074080][T13096] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe40d18cde9 [ 249.082046][T13096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 249.090024][T13096] RBP: 00007fe40d1ed8d0 R08: 00007ffeca30d067 R09: 0000000000000003 [ 249.098000][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.105969][T13096] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeca30f480 [ 249.113948][T13096] [ 249.117219][T13096] Kernel Offset: disabled [ 249.121529][T13096] Rebooting in 86400 seconds..