last executing test programs: 50.675892709s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 48.581224395s ago: executing program 0 (id=662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000b3cbfde119ab9c297c492041239e58a072d5da25728dddd7877741a609716213fe1ad9d18bad5e03d5470f7fe634c0029a0226b25de7be6c87e51fc80b6d303515a7e361876315613a26085e7d3fd61ddc9f069555042f88c3eda44f32c1669aa85f305ad9b9a786f578f7b7b28e7b652ad1ea2ef5e40d846c843539c80d8194f25d3fc9509f0ccda439964503aaca5623772620a1fa4c84a2b8158e6a240f111a204bac2165ebeb430ae76245a2a5d55276929eb55187dbb82c491952a9bf6e271b401b7f9c068d9f546b", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a0000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 48.565492226s ago: executing program 0 (id=663): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="6fcbe4b71b81f5dc07d8d71e579aab0840142c93ae24b846019164d5c2e4ba12911d5430e66c172920b92fff99450925", 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000000c2f9) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001780)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000080)={0x0, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) 48.146323503s ago: executing program 0 (id=667): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3}, 0xc) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4f24, 0x10000, @mcast2, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x3e, 0x0, 0x60, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x26}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x5, r7, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xe, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000880)=[r2, r2, r2], &(0x7f00000008c0)=[{0x5, 0x2, 0x1, 0x2}, {0x1, 0x1, 0xd, 0xa}, {0x0, 0x1, 0x10, 0xa}, {0x4, 0x4, 0xa}, {0x1, 0x3, 0x8, 0x6164296e95fa80af}, {0x5, 0x1, 0x3, 0x2}, {0x4, 0x1, 0x10, 0x8}, {0x2, 0x3, 0x8, 0x9}], 0x10, 0xfffffff9, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x2, 0x8001, 0x80000001, 0x1}, {0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x94}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=@flushsa={0x21c, 0x1c, 0x2, 0x70bd26, 0x25dfdbff, {0x2b}, [@sec_ctx={0xe8, 0x8, {0xe4, 0x8, 0x0, 0x2, 0xdc, "d9b1162a5db49f1278f21b432d69140fb0ee918ded8f1b3ed9bbea3beb14e49975bb5b6206ca90cd43035d549182ad064e802a2652612562b0fd1aa9d5717206dc424f41f2919287e3ffc548f16aeed7c65ec35457423541b5ea0cabe353efb1eea990d04c61abdee41d63b1cd64aff9e6ddc3cf2eee15928833caff531d357d38daa868d4f0f36b8ab8542f01bb963fd157f96b84512060a96f21c5a8bf2c4ba0d0aa605a01666a54f3820c627175be77c77afea1fe954bf6b7ade83c7d94202108e3cb045a4985ede5428b87151af19251302e617aa9c9461ae09c"}}, @tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x4, 0xbab15e94b94da242, 0x0, 0x149, 0x7f, 0x1}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x9, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x33}, 0xa, @in6=@private0, 0x3504, 0x4, 0x2, 0x0, 0x3, 0xff, 0x3}, {{@in=@multicast2, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010101, 0x3507, 0xe58cf5ea486b7c93, 0x3, 0xec, 0x4, 0x81, 0x8}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e20, @in6=@private0}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x810}, 0x24004004) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.927211494s ago: executing program 0 (id=669): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) 47.726587075s ago: executing program 0 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "0f24dfb2173c3d95", "636e022968c663f89db1d7b464428f2e", "e1ff1700", "f9d65a554efffe12"}, 0x28) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000003c0)={'xfrm0\x00', {0x2, 0x0, @local}}) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r5, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x7f, 0x2a40}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f00000000c0), 0x4) shutdown(r0, 0x1) 46.555786393s ago: executing program 0 (id=675): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x2c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000200)) 40.281545065s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 30.595879452s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 21.27054653s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 12.341445099s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 3.355845344s ago: executing program 4 (id=1046): ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x101, 0x9, 0xb9, 0x4, 0x8e, @random="d8a00159cb93"}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x1], 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) (async) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @bcast, @remote, @default, @default]}, &(0x7f0000000180)=0x40, 0x800) setsockopt$rose(r2, 0x104, 0x3, &(0x7f00000001c0)=0x4, 0x4) (async, rerun: 64) recvfrom$rose(r2, &(0x7f0000000200)=""/98, 0x62, 0x0, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000002c0)={0x4}, 0x4) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000300)={'nicvf0\x00', {0x2, 0x4e23, @multicast2}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000340)={r1, 0x90, 0x7, 0x10}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x86}, &(0x7f00000003c0)=0x8) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x80000000}, 0x8) (async, rerun: 64) connect$llc(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x304, 0x8, 0xd, 0xb, 0xb9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (rerun: 64) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2}, 0x80, 0x1, 0x4, 0x3, 0x15, 'syz1\x00', "504085b8a92deb97e19f1c2999df6772a5ebe51453c519fc8d8dee0bebc370ed", "6c1d5f345577cdc44c6923e5ebb3c865091893d99a08fd195f13398fab714077", [{0x8000, 0x800, {0x0, 0x9}}, {0x7f, 0x1ff, {0x0, 0x5}}, {0xffc0, 0x7, {0x3, 0x3}}, {0xfff9, 0x4, {0x0, 0x400}}, {0xe, 0x0, {0x2, 0x1000}}, {0x4, 0x7, {0x3, 0x8}}, {0xffff, 0x6, {0x2}}, {0xd7, 0xa, {0x3, 0x2}}, {0x24, 0x39f, {0x3, 0xfffffffe}}, {0xfffd, 0x81, {0x2, 0x5}}, {0x6, 0x3, {0x0, 0x5}}, {0x1, 0x7, {0x0, 0x3ff}}, {0x9dc, 0x6, {0x1, 0x2}}, {0x4, 0x10, {0x2, 0x200}}, {0x5, 0x8, {0x1, 0xc744}}, {0x286c, 0xdaab, {0x3, 0x6}}, {0x0, 0x2, {0x2, 0x1}}, {0x9f, 0x5, {0x1, 0xf}}, {0x3, 0x4, {0x3, 0x5}}, {0x38, 0x2, {0x1, 0x18000}}, {0x4, 0x1, {0x1, 0x80000000}}, {0x5, 0x2, {0x1, 0xc8}}, {0x0, 0x5, {0x0, 0x58829b56}}, {0xfffc, 0xc8, {0x1, 0x9}}, {0x5, 0x6, {0x2, 0x7}}, {0x8, 0x5, {0x3, 0x1}}, {0xfff8, 0x0, {0x2, 0x9}}, {0xc, 0x2, {0x0, 0xe27}}, {0xfff, 0xa9e, {0x3, 0xff}}, {0x40e, 0xab3, {0x3, 0x5}}, {0x7, 0x9, {0x0, 0x7}}, {0x10, 0x4, {0x0, 0xfffff4ce}}, {0x3, 0x7, {0x0, 0x8}}, {0x7, 0x7, {0x2, 0x5}}, {0x9, 0x3ff, {0x3, 0xce63}}, {0x1, 0x100, {0x2, 0x10001}}, {0x9, 0x0, {0x3, 0x7e400000}}, {0x4, 0x1, {0x1, 0x9}}, {0x4, 0x0, {0x2, 0x7de}}, {0x101, 0x3, {0x2, 0x81}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1084}, 0x10) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000880)={'vlan0\x00', &(0x7f0000000840)=@ethtool_rxfh={0x46, 0x81, 0x9, 0x10000, 0x0, "1442cf", 0xe97, [0x54b, 0x0, 0x2, 0x9, 0x4, 0x8, 0x75ae, 0x2, 0xd, 0x1]}}) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r4) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x84) (async) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) (async) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000a00)) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000b40)=0xe8) ioctl$TUNSETOWNER(r4, 0x400454cc, r8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000002000)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000c00)={0x13b8, r9, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1a8, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x97, 0x2, "5c2259d92c4d09ab72fb7e6376abd84f690f44073b85ac6dc250b42bc5ffe1e7f59f79dac33db01f6f9245322c80083f1e70a9faa1ab1ea3728614994295a67cf973a68aad3053a06c6a814945232f0894a6e4dcc14858790520a02a71f95eabf13e1c6853ebe5018817ed76db16bca073a4aa818a3b04827c1396fa476918819f4d665d37798aee96fa962a82c63355021fe9"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}}, {0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf7, 0x1, "317e6debfaaf501936d37d9252bb18aa0b7fb0e65c09f5474de72788dc606a48ce72f197d83d1262d8a33a1077b46e8e61f12a2998b2ab81835212a0c703bbcf40428e5f2b2841a4fb9305b6c068c9b23780b0a2a587ca7b48e028b8dbd754d90fa8a267cc60870a7fc3a41829ac5e30afd78e475cb0cdde7dad67bfbf532485cfd24028101d37dfb884dc293bed49013422351a2dda345ebfc757fef0b5336ad55f2c5b2fc64701990dfb73365f3426dd1340c27345f17e07a0e765b5eabc972b1ef2a0a574bd996172588c274a78f214fa07c75698c639395f54fc9d94c3845ec9f94a06674f126a6fa47969dd2a499e9763"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x56, 0x1, "af5e5c1d5cae4cbb3c22f52d04c58898ff119eec1c4ae0db857e002138fbb3266223e65c801bda2325a21a8651f92511cba5bbc5710683c27f06a5426502d340d3fafb306d11c47b32bdf537e6cac509050d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd8, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc4, 0x1, "0c22d79e26354ca66b3fa7ad9bfa92d06653fb07f90337612a160d43e4721adfc2226a5a733a487ce2d130a44189eb9bc3ae01c30edc6d1123ac0d4b57e3f1818c695c123b36963c47ba0a37472788cf96b636e33301ff1a41074a99f70c8ef08260c2b9f41dd5cc094994cae7dc8773c0754f83f7447cf774aee7d2fecf0fff89c8d2f944e4afb2a2f4b8ea3df3696cfed0c20630d6f741a472409bc0cf0118933d3a82a71755106d971bcf2636ed9578e97c6af1eb31d4929275b2d3242dbf"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1090, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x71, 0x1, "45801f7d88f03fea7521318663da10daf1880a715575436f2f61a4734c56035a57811a983f947afe1ef3ad08e5c3b5f072f26cf1453a5ca72fc80e6476a8981c110926eb600165b81d8abd3dc433beee9dce95e303fd245767ac5eebb032594e44f8c8f6515bbe5ab1a74c4b2a"}}]}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x4a000}, 0x4004) 3.185617762s ago: executing program 4 (id=1049): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 3.121800651s ago: executing program 4 (id=1050): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000012c0), 0x4) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000012c0), 0x4) (async) socket$kcm(0x23, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write$bt_hci(r5, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) (async) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) (async) 3.067925813s ago: executing program 1 (id=1051): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) socket$inet(0x2, 0x1, 0xcbd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100feffffff000000002000000008000300", @ANYRES32=r1, @ANYBLOB="14002d80050001"], 0x30}}, 0x4080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB="00022cbd7000fbdbdf250100000008000800ffffffff14000600fe80000000000000000000000000001d"], 0x30}, 0x1, 0x0, 0x0, 0x4048080}, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.049816458s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000201000000020000000000000802000000020000000000000e0373f0de925962e94c8e0000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000300)) 1.59295297s ago: executing program 1 (id=1052): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="c6567d5f529c8f63f8c761e35f52adadc1f733c11f73856972a14a38f7b6de9188991aa658f375c32810a605fdb3d56a587857bd7ded2e1af5d9e4749cd7efad3aac63f4eb68bf82a3ef7220210f10dd6ed97fb2e17dc2cdebee22c26be385a012bafa58bc5e99852f823400c9dd95bafd988264ebf82bbc737f42ef9af317c661f04e63446aa78b10337ec8d4473a5f79e9d5587c20fbbd420da7bb8c7a875787ffa4e3e260295ebcbf7ee88c696df2", 0xb0}], 0x1}, 0x40000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1}, 0x2040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000001c0)="03e1f4aef6af774f8384aa37f34bb999b0acff8f6dd68b1497dea98a1fd9cf298cb79657b2251f", 0x27}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, 0x0, 0x0) close(0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000300), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x5}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa0050000, 0xf5}]}}}}}}}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) 1.592366753s ago: executing program 3 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000100000011, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, r3, 0x1, 0x0, 0x6, @random="b60d20440cdd"}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f00000005c0)={0xf0, 0x0, 0x10, 0x0, 0x0, "", [@nested={0x89, 0x12b, 0x0, 0x1, [@typed={0x4, 0x7c}, @typed={0x5, 0x5e, 0x0, 0x0, @str='\x00'}, @generic="5087fce780a970565edde92e746ff9d795cbf95321871d4e0f073c810424742da3143a69078ac4a4884b38f3a5370de6aa887a832265d834edc0865ab5f48f8a540318fb4b5dd927edea609222db6928ac7a0da91a95e064a4f60aa3611c891403", @typed={0xc, 0x38, 0x0, 0x0, @u64=0x4f}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x100000000003}]}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x49, 0x0, 0x0, 0x1, [@generic="fea2dbeef1f000", @generic="c8063818b425489e1eeb5324be0c232d6f04263799aaf9d6bfb5a9c9", @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="615d27a61986d086238cc9d4e758307000b83c281e277d9144e5"]}]}, 0xf0}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4473375cf45409050fde", @ANYRES16=r4, @ANYBLOB="df4800000000000000000c000000180003801000038003fe018005000200000000000400010018000180140002007369743000"/62], 0x44}}, 0x0) 1.59056312s ago: executing program 4 (id=1054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x800, 0x3, [0x3ff, 0x0, 0x2]}, &(0x7f0000000040)=0xe) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x5, 0xa4, "cc1826e22e66f0755f4e91cbf0474813f77d81281a565dd2b373a62d645029a66a236eaaef520b4eeb97079ee1e38e0b01bc257480b3a7c48f49e7cfe6340cbf730cc92dc37d48785a4a91b67cb4258b21f5f0cf223032df3b170403c61f0b092524c86bde36bc3dfca32db0e98f1f8574bd9a59b7a760ae47dc365a415838c22c6abd1746df342e918669dede93e78625fc27bb55c5edd50a88391be2db750edd9ec8c2"}, 0xac) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0xffffff92}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1000, 0x7, 0xf, 0x7, 0x4, 0x3}, &(0x7f0000000280)=0x9c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='rdma.current\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x4, 0x13}, 0x8) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000400)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f0000000440)={0x2, 0x4e22, @multicast1}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r3, 0x5, 0x50}, &(0x7f00000004c0)=0xc) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000500)="d8b24b5ba380eb87b66a2c44ca2e0607ea3f72ce5529922d97c94697ae914cde3fdc795cf88ddcec873a49fa2271b3141ccec080dadd21262c87723dba76d78c85fb01a0d96507eebe5bdadfa86d2037cd4876b53b8dff70885011dce39919d4abcb5692dae2591e5ed9d24fea4d415a9b74dbd39fd5bbe1", 0x78}, {&(0x7f0000000580)="31654566ea221f0c", 0x8}, {&(0x7f00000005c0)="7dabd3bfaf568c18c0ce74851f708c36ec4ec321b7a62c086fa59b12717c4486216192a6b850e01d492b7b8d772c5f03c3eed7e74f7c29e38ddc42b78c7cd12d6d312232fa030d059037070fe2ed7c40fe", 0x51}], 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000680)=0x1300, 0x4) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x7fff) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000006c0)={r1, 0x1}, &(0x7f0000000700)=0x8) sendmmsg$inet6(r5, &(0x7f0000001840)=[{{&(0x7f0000000740)={0xa, 0x4e20, 0x3, @mcast1, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000780)="085d1037637e64499fa8778e1e6cba2992274244e582a5e1ffdcd02976fdba1d813d75a8e14bfe5fef7bac5bf655b009723a0a41d54dfa18419235c614ce6242a7da9bb6a16192a5da10a981ede64b77402bdfa7783b695da721d476fd4babb0f00a74b35cdfe0f6d180f063a3dd1f3525e48b399d4927d82e75e3f18437c4c7982b564a9e7b54c7b6678c8a17cf9a46d1d1cbf41dbb0433f0dddea569d927a2de95dff6a914f12f8daf1d69102c9a97f4f2578e53b12531ed3a4aee59244752b507b6ce4e63e70d8ba68350471fb6384f116941b9b16c011e7211766d97834fdad8644b302818833aff7d2587adbbd74d339c2036276ed7edd8eab68c5e9f4af6104313f30b780964d25a8450eda493cc01d31137e2ce6056c00ff067d0b715cc1312cafb50aeeaac2ee3d814b66f8873abcfa340ab92950e81c78a9bd2ce0d020017f7c81096f53ab34649e2e28fe31c84fbc1e328d4cf6050e73507e8e7eb51a632cd65d416490615420c4446c260ec7d0ae53cacf1bcda6b9ac40e6f33b110073ea998771b77c27cb63d8df81398676de637372b83862cfcce77ac37dc8252234e76c7dc6b5bbf089dac1aeef8972f15812ebacbcc975b951ec204239e16dc7a14b821f96976110a837669e79c74b1b8caa5a635b263376e335f92feab33097c7e9a63ecac700e2402497d7c7a70cc1bd613a873fceba800dadce66f03f20323e5b736699cfb2f75f0084827e01530db4a69e4375d76282f5b7d007d351cf204ca2f46432192672c0e38e588fb5dba02497a06d645fb23672b0d1132d41e6ecdd828f0e37dfe51857ef29f97ed430d283edd726ed054adf77db1045f5f98412dbc5f4048727378d8de05a1c211791394ea184f0bb51626d73fb809fe63439e6126ec313a0ce13886c6911abe79a6ec1a4814f7928f5d0af742ca0cf03bba7202248799c9d15d96d57ebc5df7ae1dad31cac7b2313a137c947f9bf7c69fe8a2a4c8dd0d9ac19d184cf9c29f2458c3fb67b3b20249d298ebf5fc08ae2eaf349f07036920fafc69cbc4f84b2e2c457d05d5719c5568209c4dedca6c22a51f5905ac11802799a2899ac569eb088006f7e45bb139695b9b89357a644a2d9079951de7aa99cccb45e81dab7fa39cb6b6842e5b4584e0b345400579a27cd068d8d6361e4d7aa31f5980fba18db3bacd0922510aed0f505ebb6ad63c3b0a503fe2e354503c31e9eb783526087ccd9fa9f22b99143ef3410fa8c93487c846d659d7de8c265ee568fdf5624409b0546e7987d7ef6e046797c3cf1a62ff106163e8cb7ba6041111258e88ca10504125ad9cd3573f6ec408b06e9932ae7d0b85a444e3ffc3e0ff309bc87b4129bea0c3e1b9268c65ad89048aff579b08b2110732d3d669cb3a104c291ec09514a2328a00c1c616a2863f3a95a38029659a3ba4820baf98a0544b3879c1c3e0a5eb9ae55b1a3d4e6e86dacc4bf331fe1fb9886e0ea796e271f814d333d2d1ad94b8f1cd31c9042a4ee88c50ce7e2f7c56500a12a248eabf01acf6a9718d24546507c220f84bd9a5f10c32f6ed9f0b0280d67d7322bdbf0d4637c22379ec59ebe0c6448431315512bf9fb920684662a06482857c4bd4c6e5306443853763a20ff543c0aeced2b792e1d6a065bcaef919ca7017c1864397f6a4c796f44a14c1219fe0f2b0f9512cd8a4e4e18480f5e235c28e0146850c341485fccd045023e2110a8d83ad48b5bef693aef94f3c51dfa2186876a9c245fdc4ed8c99ba3f96e09021cf432bc6ab7ac384144e08dfb97bca8c576d3f7a3c7c3919c60ed904660116fee356999b30285cca6b1bfd6ab3d43f74258792abfa03dff23763e8670c91494a187c2893676a924925aa161c056abca291c19ffce0fda4325151ac4acbe7fa404e9b393fe8c6ef9572484c11912972412f74e5c518a4df51038c5a8f9028a6c7eac186f329b4a468f8702b7e14768f6644107114aac773f9693886ecad2f7f4be42622330158f44175e924397ca4a78998bf9116a7a8edb12f514484162ef5bb5723d18e8f66e90092d7e753067f985ddbea43f0db358129e016cb70f82a083d3e5ba0ef7738cd29c3f00f14f8ec1699d3d3590620944b1cf294614d32b323acc9bce5224a1ced32f2f3307e0eb0428f3230a714922620c79625749667838c1bce7c1adb4d94bca8ddcebe479d99af940a69fadd7f30eb3dc99cb6c6e6f5fdfe14e9684cd187698c7c3beee7bea79afc5b20aefc69d136cc5a71d435dc9a7f5fd51bc261c3f69f2a728ce650cbf54c957cf31e44ee806743e0abc10dd471cf5edb14cfff026613662bcfd84dc18e48604f59d02e8a0c269c7ccba3fe50c10b485712413a18d5155b86b907041b2a85cf55f6c86b1dc15aa0371f5ab15dd109af4bb8b8dcf04c99fae4253fe39018afcb39cb468e4e9dac20c2b550d4adf25f5ea25f1c7446edf420e3017e11d2988f8bc3bba775b65c68326d492773b608e25a5981a12cbeb27522bd575010474b7e94c38a4328ba40c1b4c9e73e453f304f2282e329f8416bcb05a91aa569789c461a1c1401260f6219b976e21ee229afa33d17b7b1b09c75c4993619d807a5880e6575beabae499674f526377a84c74fc9694087e65a762c554a1b63518db0a727d6cc1495fedefc0f66384b904d52e2f430eb158f4f6c4b4ad35ede1675e114e6f4e56dbfca03e2594ac91436e4df0bd961dc78ec38981c564b4793e7a8680d639c09f70e2238bd0867ad3304d3ec156bd46b8e35b1320c56cde98430ecdbd0123923317ed081cf9d9d863eb5cf0c36e09a8dbfbe6f43f205a490ee34644a3c58a46f1473c63cb9e75d5969ed2c4051e373b1e6eea8ceaa9ede1b9182a4175d917b19eb9849d4ab64a47301dc673f3c07d5b79419d28ea341538cb03a44c4d88e2a0dc5d3042ec294ac1b748a9d9481d98576bd04795edd8bdca986f616ce4049771071bed145e892b62d98660bbac934d7225ae1f6cb36c867e957b589340adefc9ae89b798196f3eb6f8ff9b8113dc2f552e6efe3929ba5ed35f7922ee60276fe9ae6f30e7f5888146f15a5fc6adf12fbde4eb991516c6fd686b7fbf58c790735828b745609cee9b0bd1cc9c443e76c38b7cb59d218d8e87af39383cfc839aae7c889d3233199503779ab91055eab2eee4df23180379435c96c5f8b765e549630f35eed497b6a8f826f34ec85255584b0b7b14f8c9c51146d17616e0857c620396a79510c6a284bd5fd7543e075200cdd34d2c788956ea548cab3e46c80ee0740a1fd2368703bc30309dc84e7362436318a293a19f222e378ad9a865c36230c9d401d32bad6c70ff826d1f9ad1eb19aa2f8b29d7c84ba0a4f0d7ea8ae56395ef76265839b368ceb924e279cf5ba832d61dfc4e1dde44c9b9d0515f972545757df0a540dff45ab541bcf53d9bbde8a3f8eb54b96908443f1be2e481c4b84794587b98afc0327c661950d013cc34456e348bc68e6ea825e1804130ea97a6b6abe394d4dc937cf283e21c584e1d5b1bc6996fd57d93f6f7c6caf158f20731944a0135c0dbd346291dfffdda2436b8138b573a8e0968666d1b5d71656dd559289f28da7c5d3874aa4b9c2a01b345a1ec29b8cc89f2b8319c0f634592e621fb0885a300eb2a24958320b2c867f83f0a2608995005f6d665b75df54f23e41cf248fc9a645fef076d2da803de29bc6c6ae1a97bd832fc6006474a52a8aa876100ab02db48d90fb7128e95f7d51eae6e8ea5d0f168b7c38123f77df7842886c61cd49ae3a26b3c90f9f78f8b61190b38df42edcce9c0ecd6cdcd188fea1c66aa8fb270150ff741ddc7816fa1f579553d714b85067e29b80c73af02d4becc38b70cd23527e3058e26780764a88940dc7bbb72e60111f3d305bd37416731857b3c8d828bb037cf0665898f791dbc4ba8b8b532c3f7e61169f0ea0d16766b7d898d0e4896d37ff1c36a0554f8273f3df1a203dffc2aa580097ec5f321ead5624ebfd93c9aa63169cc35c1d69f76fe0eb33c0cade77a8233f32dade8efc778b12f5e14539907df3eea9e8d0eaf84f88dec36725a83f8057948b8cc8e748979e50a41d8dcf540137d43c3029b049a3a0ce88eb31178d6186551991e0cd312931365666d7f29eb013aee4a84d027be954c770a386047a396461ccbb3183f1a65097ede9b100cb1debcfc9a433ebcaaecf9b73895a96caf9029cf0a2968266089e0043aa1073afb3cd6536b75326827c7389b945f4fa8431421235c6b31c13509d8d7f1b130f0d6b652d3c75072790e6c7f213915217b6714f1380ea9c8ab6bf24e1060f0598b3f9085e1ac6d502677567f39bdc26c8d12aa0e506b8ff6e5496829d59868bfb380ff7223867149d53e33237fa9dbafd5fa7bbefdc32d989190dfe015f4d046af1d4b5e073956bbd8dd91acf7d771afbad385d89740fb986c20ea5653355f01736e6462a1bd53081a9e8b3d2abc2e0295b1ca0625855f01fe4a3d102ed38748b479b13289e71c4ecfab8a8b427f9c760879e1081153f1e2c576e27969695324faabf3855d89f96b2c0d341175e9b0448be4f4db1d02e18d816545745ab7e39874a588afe0e188bf600b7f284e82e081f893a2f0677762f339ec505dfea878fa334abe40b21d53facd324e0501a744aefddaa7a339919478f2632ac319b0fb85367b6e56deff80097a90d5577b91ac855009694892655b7024d5339f264690079460282824c862f49f7e8a3495911b4ec0c584c277e0cdb2a116c3be5ffd2c57500dc982148742a6b65dec8898cb27944e953ea54ef1367d32345b2b39f62018733ac55942aca5f3bfab5eec0867155b3c18fe7de167b084f2eff0d9fd03f8c8a8c71b864bf75bfe88ec58f05c2b817ec336bda46037dffc06385ca9e966c3358dd7a8cb969e52a167cdf4ceafdbb3e71cf0154c3e1a087de4a5e24e535eb6b5849f62389e1f9de627bb623df31dd95c7e9d0ada38fefe6bd2031ed49ebbf20a6cf9de914afc479ab1cf38c7683718b09dc990db1c75359305324bcce3acc74160dc87943d7cc05113ef5cd20bbf5a5834d6a53d60f867b669f480d9822c98d7709cdfbcb407a7b397ec0dcf238586385ab8914b84900a34299947523656c20c1577185899d85346b10d85f4e7751ea7ce650f0190be5fee02b89bfce99914b2d3df1b2051bc416ce498b384e90c62ad2b1d4915b4d2939b3d17c534846126c8dc2b8b120452b195c326137073c8a3cec324761949699fed8f68dc6ef52c72209c0e94b4edc6e3a8d9a7e554716b067e0913b0401c9236cec2521458040eed37458152c6f99122230c7fd31d0a81515c675ea597cded219c3064db81118a668dd62fcf94c1553dbe075c9e51442b320a844df1efe54cdf1d0194489230bb5c036c914eee5505d051904943b1a6a3e1433655a7a4971efa51b66953b789ef57defdbd76862ef9a7d7b1e91cdf6c62ae916b238d4724170ad1aff84a0c779c7fb98308f94368e88ad76677ae59097af5cfd6bd2a51fa2e4155a9ebd0afa5e30a55232cbbddf120c7ca7ed800178e961e74bc3d17ad85ad2c76322827e9db7904071d53457dee27c73309b75c5ac59fafe78e50fe0302c20552ac86e4636da02ff3dc8ca69a909c00564b7bf1752a1cc0b0c5caa3e3a6244425ed24c32f5aa17379b8ce6cf2fcc285e66a213e2ccf195a1950440f342eba1615130d49c010f34a0a1382e4e19f19ebba88895527ac930929c483d43fcc915143f663f687b81760cfe23d19987e47ee46db0", 0x1000}], 0x1, &(0x7f00000017c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xf}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x2b, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @pad1, @ra={0x5, 0x2, 0x1ff}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x8, [0x9, 0x6]}}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x78}}], 0x1, 0x4) connect$pppl2tp(r5, &(0x7f0000001880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e23, 0x3, @local, 0xff0}}}, 0x3a) sendto$inet6(r0, &(0x7f00000018c0)="c511982a1879bc56ea6b997d", 0xc, 0x4, &(0x7f0000001900)={0xa, 0x4e23, 0x7, @mcast1, 0x5}, 0x1c) socketpair(0x29, 0x5, 0x81, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r8, &(0x7f0000001980)={0x2, 0x4e22, @remote}, 0x10) r10 = getpid() sendmsg$nl_route(r9, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@RTM_GETNSID={0x24, 0x5a, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ac0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) 1.468984142s ago: executing program 3 (id=1055): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3d3c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x4008084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000240)={0x7, 0x100, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="f43f09d980c2c2224ae67b58afdc1f09f792088dbcee26b2b1c359d1f6ec561e014848482a68829a900dff0becd43c8a7efa8bfd31ba9f818c2d6383c3cc84385c2aae76012cad81", 0x48}, {&(0x7f0000000380)="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", 0xfb}], 0x2, &(0x7f00000004c0)=[@rthdrdstopts={{0x110, 0x29, 0x37, {0x2f, 0x1e, '\x00', [@generic={0x1, 0xf2, "a7048d8547e98ec678a758e3cde7dcc865ceb43e67329a6308937f29655534677bb6fd671042becfe65080cbb0f49e69359c6294ab9273987d285f2bf5fcefa8d72e1e87c363bf91e4fb53e71c182099c3071e486e3f2d3b7760938bb0907c53e3c47d38c30013b64626cb74448601bad44ee0151808e1e1af6556a6e91673fdf9d930651e539094c7a84e6e9d125e3f14620e4eb76df7ca556b442bc75967934dad619e7452a16fd9938c7781bfd42537dd2203b7ea1b5b24534fb5a42c467b8024eceb702c1e94e63a268c2cc6457c70ad08a548aba7b0c78609f85444a57caac6b74cbd1140f87e7a7e5f8b35d8c85c2a"}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2, 0x6, 0x2, 0xfa, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0x19}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x12, 0x4, 0x2, 0x5, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x4, 0x7, '\x00', [@generic={0x81, 0x2d, "72377429bdc92e6b2cb34753d896d4e9a96557be18feac508f3c1e58affecba3347ba0d338eb65ba6db14f9f3b"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x248}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x88, 0x6, '\x00', [@generic={0xf7, 0x12, "94e8966a142b95fb30a26f07bb33d5259825"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x1, [0x2, 0x8000000000000000, 0xdf94]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x33, 0x11, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x8, [0x2, 0x7fffffff, 0x2]}}, @generic={0x1, 0x5a, "cb651fa195325f9abf94dfa315acf16e64b9ac5335791551741882720ca2a17c796311401f50f12297e3a994e5e1b6e02954120eba8c2694b4aab7a07fdd27964e4c6ee5703f3c6d87c74e1843c237b8db386e98757763400b77"}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x5c, 0xc, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x5, 0xb, [0x3, 0x8, 0x5, 0x7, 0x80000000, 0x219, 0xd79, 0x1, 0x7fffffff, 0x40]}}, @jumbo={0xc2, 0x4, 0xe}]}}}], 0x1c8}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0xe, @dev={0xfe, 0x80, '\x00', 0x40}, 0x800}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="7f82871e45b3402cb8d4730131f96dab965a6257807abbdafdc77c25fa9816ddb4420e8b4fd0ea1b15981f8ee98f71dc7bb8b88b5912d53277b062a5f344bce07faf3967659b18a0235c7f70c692084a5f052657319257e751dff3ffb79615395f862a48b1fc2edf6b4bc069dee96d9a1b31051b66dc925b1d1e6bb30b85fe26747729ca6b50045f32d186aca6905a6e2c60b20e9cbb1fe7ee3c359948c0d6897f68052d8d941e779aae8350b0aa5b6afa723634d11244648e193e51652756daca0ad77659ab9335514f4e34774c2b2a2406336429d521bf5d612f74829acf05f599b36429089173652d67f1a2681c", 0xef}, {&(0x7f0000000ac0)="4b441722824eaf088c9f88d4818a64e5b6753cd7d045d8efcfca999cecfd", 0x1e}, {&(0x7f0000000b00)="298d4c6f7302dd6d98dff0992979c4f3611e2873d879ab8e1829ed735341b50f5288d47dbdb336b12df9ae5602f2f6dc086a6ab732f2762c505c879feb17e850c06116d2c826391e4cbedd4329862a59dbce8e1f715bd291e16ee483d13ff282b68d51670147ad773f9ac2e6acd348ffe317d0f6198f5e781c8c1dc759f2da96cb5f9eaf9e1fc6b02ac15282c8d2e50c054315d0705c07bfa8a6ea615203e37a454cde86410f7e58183592613c944e8544ef5e", 0xb3}, {&(0x7f0000000bc0)="38d1ded1424eed291679bde799e701bd199e67773a84e4055c", 0x19}, {&(0x7f0000000c00)="a03862cbd49515473a0f0997ebb21fc5d774d4c90297be75778ea6b5c7989f707e034cfdc54f5b4664d3e72d5f9e8ed186c466265b177cbb11e8b08e701dcde270522480076724114d43008d955f2973420f7f5726a80c2125aaa2fceae2a3efecec773eadf63d8f07e2f72694e982181d9f946dd57a5e292d761e6e9e079573a1438a9c9a3a4f462b89da83e882da568a691c39d7f88c7a84c137144e7ed287776c7c99663c61cf0b9f62658bd459f6ec036dcaf1046b6049fd47082c41fb66773ed3fb9e3676bdca9de1cdf83d3d989bfc224f5006763ebb24", 0xda}, {&(0x7f0000000d00)="2b2b427bbdf18ccfe73601a32c7d6e9a6aeb2182b956f884ebdc64cf69c36453e0e40debf81ad244c644f8d1a8b0", 0x2e}, {&(0x7f0000000d40)="1288f988279e016eddd61ec48e729c1840b4e34e0f834c524869d1e18819ebfb6ab1b5e392653c16b4829d3e9df205d6f83964bc16b674908fc8e73c0cb7c2d546a20430af85b07ceabfe052399a41f9883205b575adbf184b753d4ea2c1482ffac6713b9c80ca4d7e12", 0x6a}], 0x7, &(0x7f0000000e40)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x48}}], 0x3, 0x40882) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x70, 0x3ed, 0x100, 0x70bd27, 0x25dfdbff, "f20034143058eca212393f650c19ebf45401f3230c27d30cccb70d57f5e031755bc28d63b35ce5b97ca97c049f030e82f8e85000c56e7d81bc179b48b470a178fa2c295c9efb1e3f82bd8a17e0826e88977a9a7a9551bdae275869e52f5da915", ["", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x24004005}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @private1, 0x9}}, 0x81, 0x10, 0x3, 0x40, 0x4c, 0x6, 0x1}, &(0x7f0000001180)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000011c0)={r7, 0x81, 0x3, [0x200, 0x2, 0x3]}, 0xe) sendmsg$AUDIT_GET(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x10, 0x3e8, 0x1, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001340)={r7, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x1, 0x9, 0x7fff, 0xb0, 0x8001, 0x1a}, 0x9c) r9 = getpid() sendmsg$nl_route(r8, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@RTM_GETNSID={0x2c, 0x5a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000001500)={@private2, 0x25, r3}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001540)={r7, 0x93}, &(0x7f0000001580)=0x8) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FITRIM(r11, 0xc0185879, &(0x7f00000015c0)={0x2885d0e0, 0x5, 0x100000001}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001600)) writev(r5, &(0x7f00000016c0)=[{&(0x7f0000001640)="a2ac50c70d4337315467b26e1a639b1e508d82e458265b8f607b7abb893755863904c5a4e2645cda6cf4cd0ea359aa0af1e56b143268a70d8eddbc10a4e1c78550e7799c18003cf7ae7f4d339931ab05bc4357bf6791cc64af0a812b8edf747d0a153de74aaf6281c7", 0x69}], 0x1) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000001700)=0x80, 0x4) r13 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r13, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x10, 0x3e8, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) 1.360999014s ago: executing program 1 (id=1056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x484, r3, 0x300, 0x70bd2b, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x7, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x150, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x8, 0x0, 0x1}, {0x1, 0x7, 0xfd, 0x9}, {0x4, 0x3, 0x7, 0x3ff}, {0x8001, 0xff, 0xa8, 0x4}, {0x7e29, 0x29, 0x7, 0x7ff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{}, {}, {}, {0x0, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6c56}}}]}}, {{0x8}, {0x4}}]}, 0x484}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r8}, 0x38) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x1200, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0xfe}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r15, @ANYRES32=r15, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="d2054b2810f0d50bc59595ceee0689633ef476f8bf98b5f38540000000755721110f57abbc63be0fa8c55131d46dedbf48024e77309c874442af", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=r16, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001580)=r17, 0x4) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002c000100000000000000000008000000", @ANYRES32=r14, @ANYBLOB="0b000080975c3fd233e56b6428686030001800018011000d80905176c518740da397a942"], 0x3c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) 1.19858687s ago: executing program 3 (id=1057): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000180)=ANY=[@ANYBLOB="40731e7d6634cedbef3a06c6200900", @ANYRES16=r3, @ANYBLOB="030225bd7000fddbdf25070000001400080076657468305f766972745f7769666900"], 0x28}, 0x1, 0x0, 0x0, 0x8000040}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x400) r5 = socket(0x23, 0x5, 0x0) connect$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31070000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a030c0000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) 1.018546314s ago: executing program 3 (id=1058): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="47c5245aef819601d8d2a291693a2aa7", 0x10) close(r0) 911.700704ms ago: executing program 3 (id=1059): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="d45a89e2", 0x4}], 0x1}}], 0x1, 0x800) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000680)={r3, 0xd, 0x1, '5'}, 0x9) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000180)="816b024cf1adc3464fa6b891f3c46631907b31b305994870ed537be62b7f56fa7f70bf5c0261049f", 0x28, 0x80, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0x89, 0x4) (async) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) 741.364075ms ago: executing program 3 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa58fea0df9b7606dd6080061000140600870f911c6bdaa643fe800000000000000000d801369500ba3c8000000000000000000000000000aaa0254e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ppoll(&(0x7f0000000280)=[{r2, 0x184}], 0x1, 0x0, 0x0, 0x0) r10 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000065c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 739.826731ms ago: executing program 1 (id=1061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x20040114) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140f, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040000) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1411, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049840}, 0x12) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r2, 0x6, 0x1, 0x7}) sendmsg$AUDIT_USER(r4, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, 0x3ed, 0x300, 0x70bd27, 0x25dfdbfc, "9cff58808d4c5fdc675626c811dbe6f7fc89bfa1cca60bdbc26ee5a5ee94268cf54a46da219da03dc1b2556c832ddf4e509ab2a816a5853cfc3833f6eea65b14423e165c517660efda1cc78e9742619e069456be6ac13f79469cbd0c8efbf90781a4e93b7b6c3a7b981db7c78d998e019ecdb6de85dbe1f6f03c563d569634a0dafcb66a0bd82ffb683d0a67e521828745fa5e28b42cb35409cdb299afaffa1f9e05fd805b8770cc34831f70534b0bc1825c0a0fa0609803ce0e69244c0d9b000a340dd6eb6c5d3163f62927f13b742717f478c78c35e7cf6f14eb2b7aa4c5df", ["", "", "", "", "", "", "", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='ext4_mark_inode_dirty\x00', r4, 0x0, 0x9}, 0x18) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c005) (async) bind$rds(r3, &(0x7f00000007c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r1, 0x2, 0x28e, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-+$-\x00'}]}, 0x40}}, 0x40000) (async) r7 = accept$inet(r4, &(0x7f0000000f00)={0x2, 0x0, @multicast1}, &(0x7f0000000f40)=0x10) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000010c0)=0x0) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001100)=0x0) (async) r10 = getgid() r11 = openat$cgroup_devices(r4, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000001200)={&(0x7f0000000900)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000940)={0x100, 0x3e, 0x200, 0x70bd29, 0x25dfdbfd, "", [@generic="f7833552c2f74927a99e8dce64316e07f710ef00fa3eb87afbd77b55b6b74cae877276e2a0da7a0a17394caff8c05b251f5d95177197ae0ea9da8df00ccaf18a4e485365664258a514e49d12030cbe0349594b97eb9689880e9c3d7e9c147ef7f7ad394ff4e8e40e7ff0b3d345325d87d3cbad77c6fb953492e1c8ea70880be1133fa17fa041f3da5358eab648baa39482df5328736a28c1a9e1a87077d31648224f158d4a49e4a3b185f463188ad3d95443ca436beed054d54446394017f5559a1d2cda1e3ba2d1a9339829bf975115c1b4847aa7e1121dd0568c8f1d51eeaa2731b744754cee54d775c052af"]}, 0x100}, {&(0x7f0000000a40)={0x2e4, 0x14, 0x308, 0x70bd28, 0x25dfdbfd, "", [@nested={0x1e0, 0x52, 0x0, 0x1, [@generic="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", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@multicast1}, @generic="e3ac6d4943eb8179f276c67cc2e990a4b621cc4f3123c2d22c4af9a08cba7a0be85f7868a76f6690606dcdaed6c608f2893c3d15a442ec4670a7919024e32021afdd89c21e4db08456c1eb22b003e53bf5bf709d5d299fd6ab1a5361cd9e488b460d403667ab3555cea12e7f35fc642db9f797c1ef7605f3e8ca54aeaa20c9ebc2d8364053fc6abe4991ff7cc08258805a7b8caf67eecb7e99bd558f14f0b57507870a8cc02db45996d7ebc1f441862aee3ce906e5e806c15d813cbe024b131da8980c7abb557fd9388f89ea539a147505cb"]}, @generic="f4ee6c146653066d7e08d67f13c8f7d883c72a7abcc82874bbb85e868c4c6491590f55d1becaead472ad2453ee216f8a0e7632d8944a51b658ce84fde99e988a4ff2e39e08cac903b681097f4507c1ac0ed1081b8810683715b545ea43dac839c3a3c4f35080290bc6a53638deacc17e061af2", @generic="517e8a20abac235d68a40d53496437e103a9060155e05b75bf22df1694de74fd99b17f7962eca5aee3fa84efa99056b97ea95adf9bdf6f7d6db1aefd9981187f211f020d14e3165d481570209209a19f52f79362c144b8908b3cf76d9ae70eadac756dea894f80bd5641a278fae4", @typed={0x8, 0x1, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x58, 0x0, 0x1, [@nested={0x4, 0x5f}]}]}, 0x2e4}, {&(0x7f0000000d40)={0xe4, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@generic="2125e83cec6fa12811c52b6092d7db3088e3b64d8e0466b4613776c7b0099d2e778c3eb1b21d1ef58d80f338bc09bab23b7ab8dfa2f16411adaab75ee217c6eb6ec217073708d2728c3748affe624ee25b7b67613b1e5c8d980741342af76aef98a5d75b1bd3cf0b4dc886b9cad35087031e48eb6dd9b72099ef098111f7e10a5b0b3f4467529d7f565fac07e598f540225bc3dd59408ebd6438a1d1fc8bd03330c6e19fd75c43430d86da48b703ff1f6e586736564bce68855738f382ad21f0fbb61224e3d0f72fe17f90b02aff2584ec7c44", @generic]}, 0xe4}, {&(0x7f0000000e40)={0x84, 0x12, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x74, 0xb8, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="bb27e645bd292ea37424e3d4f89f51968507bcefdc18eeb94e76ad7b92ec84af44e000329f1e32844994ed71409389ce7b32523ca6cd6c20d9d61e7217409e5337d25470178dd9903c760bbb5d22b53d03ca0575d86df6f1d8e9be99", @nested={0x4, 0x3e}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x2}]}]}, 0x84}, {&(0x7f0000000f80)={0xa4, 0x1e, 0x10, 0x70bd26, 0x25dfdbfb, "", [@nested={0x85, 0x10c, 0x0, 0x1, [@nested={0x4, 0x7b}, @generic="ea2943661f08b86de59ac69fdfb097138c614de95f28eb90c5de9401592df22d264e95d7025c5de6e1c1064e5b7cc4fab5f01fda9a608829f9076fb3de527080eb2559da896cb46c8b9277c7e8", @typed={0x8, 0xf0, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x9e}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x13c}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x3c}]}, @typed={0xc, 0xf6, 0x0, 0x0, @u64=0x1}]}, 0xa4}], 0x5, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r3, r11, r2]}}], 0x48, 0x40040000}, 0x8090) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r1, 0x420, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async) sendmsg$key(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2, 0xc, 0x5, 0x2, 0x13, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb8, 0x9f7, {0x6, 0x32, 0x13, 0x6, 0x0, 0x400, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_filter={0x5, 0x1a, @in6=@private2, @in=@private=0xa010102, 0x22, 0x14, 0x4}, @sadb_lifetime={0x4, 0x3, 0x10, 0x6, 0x4}]}, 0x98}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f00000014c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xcd, 0x200, 0x4c, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x1, 0x10000}}) connect$can_j1939(r4, &(0x7f0000001580)={0x1d, r12, 0x3, {0x0, 0x1}, 0x1}, 0x18) (async) bind$rds(r5, &(0x7f00000015c0)={0x2, 0x4e22, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$packet(r4, &(0x7f0000001600)="5ad2666085fae2ed5e24f6b41f005b1e151e802ef414a295b6fedc1b46041c86652a6b783323a4dd3ad67d24703e97e050a103f644d3efc7b33d1a8776367fd8d639c66b9ef1c3aa7a1bc5adae860649ec0bfb1f90df16102b32ecb8e87ae09b0c07e1b1cc4dae6a6086014fdb1db285ef251ff456e344b5d3e8b09b6e261d6c35cd9d83e577680baa95ee2d7e2900ffe75c59eae1da7ef00c7b95b50f36670496ab55150546ca2834d2dc90d371ed65a94ba1b8c63a0608b1ffbf5954a4ec9cec2e3c463336809dab9a262b05993e8a9fd30ebd4af658f60b68482c77fb0e486257ca5e6578853ef7e3d1bbf30a9ec545124ca2190a", 0xf6, 0x4000004, &(0x7f0000001700)={0x11, 0xf8, r12, 0x1, 0x61, 0x6, @local}, 0x14) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001780)=@o_path={&(0x7f0000001740)='./file0\x00', 0x0, 0x8, r7}, 0x18) 647.160119ms ago: executing program 4 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000400)={0x4f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 596.95867ms ago: executing program 1 (id=1063): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000000009500800000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x2c7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0xe1aedaa66ea6adb, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008880) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0xe1aedaa66ea6adb, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008880) 9.016695ms ago: executing program 4 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="02002cbd7000fedbdf25010000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000180", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030000000000480102801c0001800800010000000000080001000700000008000100070000002c000180080001000200000008000100080000000800010006000000080001000e00000008000100070000003c00018008000100000000000800010002000000080001000f000000080001000700000008000100000000000800010000000000080001000000000014000180080001000000000008000100020000001c0001800800010006000000080001000500000008000100070000001400018008000100070000000800010004000000340001800800010000000000080001000200000008000100060000000800010000000000080001000800000008000100000000001c0001800800010003000000080001000200000008000100050000002c00018008000100080000000800010007000000080001000300000008000100020000000800010002000000"], 0x180}, 0x1, 0x0, 0x0, 0x4080}, 0x8804) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10082}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x58}}, 0x8c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {0x15}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=1065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): e_write_user helper that may corrupt user memory! [ 89.737968][ T6619] netlink: 'syz.1.177': attribute type 3 has an invalid length. [ 90.207474][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 90.235151][ T6642] netlink: 48 bytes leftover after parsing attributes in process `syz.4.185'. [ 90.444748][ T6657] netlink: 'syz.4.188': attribute type 4 has an invalid length. [ 90.497744][ T6657] vlan1: entered promiscuous mode [ 90.523160][ T6656] vlan1: left promiscuous mode [ 90.838915][ T3447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.144294][ T6692] netlink: 'syz.3.195': attribute type 12 has an invalid length. [ 91.568806][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.577540][ T6713] sctp: [Deprecated]: syz.0.202 (pid 6713) Use of int in max_burst socket option deprecated. [ 91.577540][ T6713] Use struct sctp_assoc_value instead [ 91.599583][ T6713] IPVS: set_ctl: invalid protocol: 22 172.20.20.63:20000 [ 91.607772][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.627680][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.648969][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.670653][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.680041][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.701129][ T6718] openvswitch: netlink: IP tunnel dst address not specified [ 91.787091][ T3447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.820042][ T6710] lo speed is unknown, defaulting to 1000 [ 91.867236][ T3447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.965444][ T3447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.325459][ T3447] bridge_slave_1: left allmulticast mode [ 92.341519][ T3447] bridge_slave_1: left promiscuous mode [ 92.348226][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.359421][ T6738] ip6t_srh: unknown srh invflags A757 [ 92.382393][ T3447] bridge_slave_0: left allmulticast mode [ 92.388804][ T3447] bridge_slave_0: left promiscuous mode [ 92.394553][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.636758][ T6751] netlink: 'syz.0.212': attribute type 25 has an invalid length. [ 92.985375][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.008643][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.020923][ T3447] bond0 (unregistering): Released all slaves [ 93.193431][ T6758] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 93.315238][ T6759] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 93.801707][ T5837] Bluetooth: hci2: command tx timeout [ 93.828939][ T6796] TCP: TCP_TX_DELAY enabled [ 93.856855][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 93.948831][ T6796] infiniband syz0: set active [ 93.953683][ T6796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.993259][ T25] lo speed is unknown, defaulting to 1000 [ 94.234688][ T3447] hsr_slave_0: left promiscuous mode [ 94.269776][ T3447] hsr_slave_1: left promiscuous mode [ 94.291913][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.296567][ T6827] netlink: 'syz.3.231': attribute type 18 has an invalid length. [ 94.300565][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.317561][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.325305][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.347576][ T3447] veth1_macvtap: left promiscuous mode [ 94.353110][ T3447] veth0_macvtap: left promiscuous mode [ 94.363248][ T3447] veth1_vlan: left promiscuous mode [ 94.368648][ T3447] veth0_vlan: left promiscuous mode [ 94.792584][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 94.831632][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 95.261136][ T6829] __nla_validate_parse: 11 callbacks suppressed [ 95.261157][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 95.360645][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.381702][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.402795][ T6710] bridge_slave_0: entered allmulticast mode [ 95.429060][ T6710] bridge_slave_0: entered promiscuous mode [ 95.451866][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.472073][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.489986][ T6710] bridge_slave_1: entered allmulticast mode [ 95.507605][ T6710] bridge_slave_1: entered promiscuous mode [ 95.611097][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.715374][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.0.238'. [ 95.744767][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.873139][ T6710] team0: Port device team_slave_0 added [ 95.880080][ T5837] Bluetooth: hci2: command tx timeout [ 95.910630][ T6710] team0: Port device team_slave_1 added [ 95.981393][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.991032][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.018823][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.031272][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.039762][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.067020][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.103813][ T6710] hsr_slave_0: entered promiscuous mode [ 96.110154][ T6710] hsr_slave_1: entered promiscuous mode [ 96.117743][ T6710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.125302][ T6710] Cannot create hsr debugfs directory [ 96.443447][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 96.453876][ T6870] nbd: must specify a size in bytes for the device [ 96.464484][ T6870] block nbd4: not configured, cannot reconfigure [ 96.550615][ T6710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.567620][ T6710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.658907][ T6710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.707764][ T6710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.030626][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.075101][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.108505][ T6710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.118981][ T6710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.148518][ T6900] geneve2: entered promiscuous mode [ 97.171188][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.178366][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.187220][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.194349][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.256409][ T6906] trusted_key: syz.0.251 sent an empty control message without MSG_MORE. [ 97.306043][ T6911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.253'. [ 97.314310][ T6914] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 97.322971][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 97.326289][ T6912] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 97.394358][ T6912] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 97.577242][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.644752][ T6923] xt_l2tp: invalid flags combination: 4 [ 97.679300][ T6710] veth0_vlan: entered promiscuous mode [ 97.717217][ T6710] veth1_vlan: entered promiscuous mode [ 97.846766][ T6710] veth0_macvtap: entered promiscuous mode [ 97.885516][ T6710] veth1_macvtap: entered promiscuous mode [ 97.909592][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'. [ 97.944872][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.959866][ T5837] Bluetooth: hci2: command tx timeout [ 97.994024][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.005013][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.025748][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.030910][ T6944] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 98.042291][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.053430][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.070080][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.082480][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.100510][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.123736][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.138654][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.148679][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.175377][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.187134][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.198976][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.209993][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.221405][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.242204][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.267401][ T6710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.281514][ T6710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292437][ T6710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.329954][ T6710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.417103][ T6958] delete_channel: no stack [ 98.430926][ T6954] syzkaller0: entered promiscuous mode [ 98.445166][ T6954] syzkaller0: entered allmulticast mode [ 98.513725][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 100.041219][ T5837] Bluetooth: hci2: command tx timeout [ 100.418364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.465707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.524408][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.555800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.702971][ T7011] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'. [ 100.785693][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 100.794931][ T7011] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'. [ 100.852892][ T7020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'. [ 100.896066][ T7020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'. [ 100.920697][ T7022] netlink: 'syz.0.284': attribute type 2 has an invalid length. [ 100.936162][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.284'. [ 101.106190][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 101.194428][ T7043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.291'. [ 101.210572][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 101.353615][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 101.519845][ T7058] veth0_to_hsr: entered promiscuous mode [ 101.689889][ T7058] hsr_slave_0 (unregistering): left promiscuous mode [ 101.772958][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.061569][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.105444][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.167238][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.361881][ T81] bridge_slave_1: left allmulticast mode [ 102.391996][ T81] bridge_slave_1: left promiscuous mode [ 102.434393][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.482536][ T81] bridge_slave_0: left allmulticast mode [ 102.490663][ T81] bridge_slave_0: left promiscuous mode [ 102.497027][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.552414][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.605550][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.624452][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.635259][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.644640][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.652191][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.029099][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.040861][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.050942][ T81] bond0 (unregistering): Released all slaves [ 103.070553][ T7085] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 103.146972][ T7079] lo speed is unknown, defaulting to 1000 [ 103.281739][ T7095] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 103.297462][ T7095] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 104.039564][ T81] hsr_slave_0: left promiscuous mode [ 104.103962][ T81] hsr_slave_1: left promiscuous mode [ 104.129448][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.140713][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.180580][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.194562][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.230745][ T81] veth1_macvtap: left promiscuous mode [ 104.245782][ T81] veth0_macvtap: left promiscuous mode [ 104.265909][ T81] veth1_vlan: left promiscuous mode [ 104.274812][ T81] veth0_vlan: left promiscuous mode [ 104.766137][ T5837] Bluetooth: hci2: command tx timeout [ 105.009736][ T81] team0 (unregistering): Port device team_slave_1 removed [ 105.051804][ T81] team0 (unregistering): Port device team_slave_0 removed [ 105.597168][ T7172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.609251][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 105.701328][ T7182] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 105.942384][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.954553][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.978618][ T7079] bridge_slave_0: entered allmulticast mode [ 105.996632][ T7079] bridge_slave_0: entered promiscuous mode [ 106.237070][ T7210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.321223][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.349239][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.367288][ T7079] bridge_slave_1: entered allmulticast mode [ 106.387212][ T7079] bridge_slave_1: entered promiscuous mode [ 106.423329][ T7211] tipc: Started in network mode [ 106.432433][ T7211] tipc: Node identity 124caa7e1603, cluster identity 4711 [ 106.451678][ T7211] tipc: Enabled bearer , priority 0 [ 106.469722][ T7214] syzkaller0: entered promiscuous mode [ 106.477081][ T7214] syzkaller0: entered allmulticast mode [ 106.567795][ T7228] __nla_validate_parse: 5 callbacks suppressed [ 106.567814][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 106.603008][ T7217] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 106.724929][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.774987][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.919288][ T5837] Bluetooth: hci2: command tx timeout [ 106.974739][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 107.136885][ T7242] x_tables: unsorted underflow at hook 3 [ 107.211303][ T7079] team0: Port device team_slave_0 added [ 107.240106][ T7079] team0: Port device team_slave_1 added [ 107.254166][ T7241] lo speed is unknown, defaulting to 1000 [ 107.329601][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.356264][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.411084][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.442235][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.457847][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.515733][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.567430][ T9] tipc: Node number set to 72329854 [ 107.609770][ T7079] hsr_slave_0: entered promiscuous mode [ 107.628508][ T7079] hsr_slave_1: entered promiscuous mode [ 107.634935][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.643426][ T7079] Cannot create hsr debugfs directory [ 107.808712][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 107.824219][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 107.843292][ T7260] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 107.858010][ T7260] netlink: 156 bytes leftover after parsing attributes in process `syz.0.348'. [ 108.114967][ T7264] sock: sock_set_timeout: `syz.1.350' (pid 7264) tries to set negative timeout [ 108.170230][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 108.579357][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'. [ 108.614352][ T7280] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 108.829733][ T7289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.359'. [ 108.951495][ T7079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.973629][ T7079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.988968][ T7079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.996125][ T5837] Bluetooth: hci2: command tx timeout [ 109.022555][ T7079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.144997][ T7300] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 109.294907][ T7300] bond2: entered promiscuous mode [ 109.310399][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.335511][ T7313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.367'. [ 109.423835][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.508830][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.599857][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.607072][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.661320][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.668592][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.820418][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.877182][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.950494][ T7342] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 109.977189][ T7342] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 110.161421][ T7342] team0: Cannot enslave team device to itself [ 110.268195][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 110.569863][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.611332][ T7370] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.653967][ T7079] veth0_vlan: entered promiscuous mode [ 110.670587][ T7079] veth1_vlan: entered promiscuous mode [ 110.759775][ T7079] veth0_macvtap: entered promiscuous mode [ 110.768854][ T7079] veth1_macvtap: entered promiscuous mode [ 110.783704][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.794823][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.805116][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.815790][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.825774][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.839019][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.848972][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.859510][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.870537][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.880064][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.890924][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.901151][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.906939][ T7382] sctp: [Deprecated]: syz.1.386 (pid 7382) Use of int in max_burst socket option deprecated. [ 110.906939][ T7382] Use struct sctp_assoc_value instead [ 110.911698][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.937050][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.947619][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.957528][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.968078][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.979061][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.051778][ T7079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.062924][ T7079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075376][ T7079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075764][ T5837] Bluetooth: hci2: command tx timeout [ 111.090640][ T7079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.183556][ T7392] hsr0: entered promiscuous mode [ 111.201964][ T7388] dvmrp1: entered allmulticast mode [ 111.228443][ T7388] pimreg: left allmulticast mode [ 111.233720][ T7388] dvmrp1: left allmulticast mode [ 111.409191][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.445733][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.515127][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.537252][ T7404] lo speed is unknown, defaulting to 1000 [ 111.548529][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.724099][ T7407] pim6reg1: entered promiscuous mode [ 111.729585][ T7407] pim6reg1: entered allmulticast mode [ 111.941667][ T7415] netlink: 'syz.1.395': attribute type 3 has an invalid length. [ 112.232711][ T29] audit: type=1107 audit(1735784351.835:2): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 112.274251][ T7430] __nla_validate_parse: 2 callbacks suppressed [ 112.274274][ T7430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.399'. [ 112.427191][ T7432] lo speed is unknown, defaulting to 1000 [ 112.450014][ T7430] netlink: 68 bytes leftover after parsing attributes in process `syz.1.399'. [ 113.246716][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.740714][ T7462] netlink: 'syz.4.408': attribute type 2 has an invalid length. [ 113.865223][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.037189][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.127422][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 114.137427][ T7476] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 114.154091][ T7476] syzkaller1: entered promiscuous mode [ 114.168719][ T7476] syzkaller1: entered allmulticast mode [ 114.186459][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 114.212924][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.246224][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.267864][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.286137][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.301449][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.311508][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.513052][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.610449][ T7475] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 114.641734][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.411'. [ 114.651559][ T7475] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.774927][ T7479] lo speed is unknown, defaulting to 1000 [ 114.784624][ T7487] netlink: 888 bytes leftover after parsing attributes in process `syz.1.416'. [ 114.975761][ T12] bridge_slave_1: left allmulticast mode [ 114.984778][ T12] bridge_slave_1: left promiscuous mode [ 115.046000][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.116083][ T12] bridge_slave_0: left allmulticast mode [ 115.121790][ T12] bridge_slave_0: left promiscuous mode [ 115.177222][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.248928][ T7514] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 115.398558][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 115.955517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.967160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.979035][ T12] bond0 (unregistering): Released all slaves [ 116.120222][ T7529] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 116.355951][ T5837] Bluetooth: hci2: command tx timeout [ 116.536620][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 116.551423][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 116.700522][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 117.128831][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.147970][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.155238][ T7479] bridge_slave_0: entered allmulticast mode [ 117.177515][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.442'. [ 117.227501][ T7479] bridge_slave_0: entered promiscuous mode [ 117.248288][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.274224][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.296351][ T7479] bridge_slave_1: entered allmulticast mode [ 117.303420][ T7479] bridge_slave_1: entered promiscuous mode [ 117.334936][ T7586] lo speed is unknown, defaulting to 1000 [ 117.396360][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'. [ 117.461138][ T12] hsr_slave_0: left promiscuous mode [ 117.479654][ T12] hsr_slave_1: left promiscuous mode [ 117.487940][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.507431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.531568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.540987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.572442][ T12] veth1_macvtap: left promiscuous mode [ 117.582658][ T12] veth0_macvtap: left promiscuous mode [ 117.595439][ T12] veth1_vlan: left promiscuous mode [ 117.616805][ T12] veth0_vlan: left promiscuous mode [ 118.253509][ T12] team0 (unregistering): Port device team_slave_1 removed [ 118.294503][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.439681][ T5837] Bluetooth: hci2: command tx timeout [ 118.844557][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.900201][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.981829][ T7609] netlink: 244 bytes leftover after parsing attributes in process `syz.3.448'. [ 119.067739][ T7479] team0: Port device team_slave_0 added [ 119.092835][ T7620] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 119.101080][ T7479] team0: Port device team_slave_1 added [ 119.116287][ T7620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.451'. [ 119.156481][ T7620] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 119.283268][ T7634] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 119.290895][ T7631] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.353135][ T7637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.455'. [ 119.364089][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.381653][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.455758][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.508834][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 119.521801][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.545863][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.579434][ T7640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.457'. [ 119.597352][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.844976][ T7479] hsr_slave_0: entered promiscuous mode [ 119.854611][ T7479] hsr_slave_1: entered promiscuous mode [ 119.878715][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.904690][ T7479] Cannot create hsr debugfs directory [ 119.992790][ T7661] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 120.526108][ T5837] Bluetooth: hci2: command tx timeout [ 120.537355][ T7683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 120.546612][ T7683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 120.557068][ T7683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 120.568494][ T7683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 121.048325][ T7479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.089550][ T7479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.128691][ T7479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.167060][ T7479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.258689][ T5883] IPVS: starting estimator thread 0... [ 121.275775][ T7719] bridge0: port 3(team0) entered disabled state [ 121.283735][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.291986][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.355353][ T7732] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 121.364240][ T7723] IPVS: using max 26 ests per chain, 62400 per kthread [ 121.387260][ T7732] team0: Device veth0_macvtap failed to register rx_handler [ 121.629060][ T7736] Cannot find add_set index 0 as target [ 121.677482][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.748166][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.791276][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.798462][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.807934][ T7746] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 121.849305][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.856514][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.913932][ T7479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.924472][ T7479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.280194][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.383253][ T7479] veth0_vlan: entered promiscuous mode [ 122.442990][ T7479] veth1_vlan: entered promiscuous mode [ 122.502236][ T7479] veth0_macvtap: entered promiscuous mode [ 122.528824][ T7479] veth1_macvtap: entered promiscuous mode [ 122.600717][ T5837] Bluetooth: hci2: command tx timeout [ 122.610586][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.617133][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.641944][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.652884][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.664303][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.674265][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.684872][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.695237][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.706666][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.717847][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.733586][ T7789] veth0: entered promiscuous mode [ 122.737972][ T7791] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.749534][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.762470][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.773765][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.784473][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.794457][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.805170][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.829783][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.846737][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.888112][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.900024][ T7789] lo: entered promiscuous mode [ 122.923254][ T7788] lo: left promiscuous mode [ 122.939492][ T7788] veth0: left promiscuous mode [ 122.957219][ T7479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.983042][ T7479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.016559][ T7479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.033408][ T7479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.208186][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.242050][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.275184][ T7802] __nla_validate_parse: 64 callbacks suppressed [ 123.275204][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.503'. [ 123.291468][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.311135][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.878612][ T7831] openvswitch: netlink: Key type 34 is out of range max 32 [ 123.992932][ T7838] netlink: 52 bytes leftover after parsing attributes in process `syz.1.513'. [ 124.438286][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.479934][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 124.509336][ T7858] netlink: 92 bytes leftover after parsing attributes in process `syz.0.520'. [ 124.559934][ T7858] netlink: 80 bytes leftover after parsing attributes in process `syz.0.520'. [ 124.610179][ T7858] –eth0_vlan: renamed from dummy0 (while UP) [ 125.218719][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.324543][ T7868] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 125.333295][ T7867] Illegal XDP return value 4294967294 on prog (id 113) dev N/A, expect packet loss! [ 125.723397][ T7886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.529'. [ 125.745772][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 125.776250][ T7888] netlink: 'syz.0.528': attribute type 8 has an invalid length. [ 125.821430][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.826811][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.841972][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 125.851323][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.882242][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.899170][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.907545][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.924140][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.025802][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.091658][ T7904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.116936][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 126.175590][ T7889] lo speed is unknown, defaulting to 1000 [ 126.180886][ T7898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.432029][ T11] bridge_slave_1: left allmulticast mode [ 126.450252][ T11] bridge_slave_1: left promiscuous mode [ 126.482189][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.523453][ T11] bridge_slave_0: left allmulticast mode [ 126.553669][ T11] bridge_slave_0: left promiscuous mode [ 126.576784][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.778024][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.540'. [ 126.957407][ T7940] nbd: must specify a size in bytes for the device [ 127.251868][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.263158][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.274435][ T11] bond0 (unregistering): Released all slaves [ 127.620237][ T7957] syzkaller1: entered promiscuous mode [ 127.628498][ T7957] syzkaller1: entered allmulticast mode [ 127.687235][ T7957] netlink: 'syz.3.548': attribute type 14 has an invalid length. [ 127.711978][ T7957] IPv6: addrconf: prefix option has invalid lifetime [ 127.882867][ T7973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.965834][ T5837] Bluetooth: hci2: command tx timeout [ 128.433228][ T11] hsr_slave_0: left promiscuous mode [ 128.447133][ T11] hsr_slave_1: left promiscuous mode [ 128.458611][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.468125][ T5882] IPVS: starting estimator thread 0... [ 128.485767][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.502281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.516161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.555776][ T8006] IPVS: using max 24 ests per chain, 57600 per kthread [ 128.576413][ T11] veth1_macvtap: left promiscuous mode [ 128.582061][ T11] veth0_macvtap: left promiscuous mode [ 128.590817][ T11] veth1_vlan: left promiscuous mode [ 128.605832][ T11] veth0_vlan: left promiscuous mode [ 129.084364][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.133791][ T11] team0 (unregistering): Port device team_slave_0 removed [ 129.693282][ T8027] __nla_validate_parse: 3 callbacks suppressed [ 129.693302][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 129.736683][ T8027] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 129.763054][ T8027] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 129.811436][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 130.036058][ T5837] Bluetooth: hci2: command tx timeout [ 130.279588][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.295787][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.319853][ T7889] bridge_slave_0: entered allmulticast mode [ 130.327613][ T7889] bridge_slave_0: entered promiscuous mode [ 130.376737][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.385321][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.403845][ T7889] bridge_slave_1: entered allmulticast mode [ 130.432424][ T8070] Cannot find map_set index 0 as target [ 130.436831][ T7889] bridge_slave_1: entered promiscuous mode [ 130.459960][ T8070] x_tables: duplicate underflow at hook 2 [ 130.592031][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.667842][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.888874][ T7889] team0: Port device team_slave_0 added [ 130.908435][ T7889] team0: Port device team_slave_1 added [ 130.941744][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.955450][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.011038][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.031334][ T8100] batman_adv: batadv0: Adding interface: dummy0 [ 131.048146][ T8100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.084557][ T8100] batman_adv: batadv0: Interface activated: dummy0 [ 131.099832][ T8103] netlink: 'syz.0.579': attribute type 5 has an invalid length. [ 131.129294][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.136515][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.166034][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.308264][ T7889] hsr_slave_0: entered promiscuous mode [ 131.327291][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.582'. [ 131.339743][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 131.343449][ T7889] hsr_slave_1: entered promiscuous mode [ 131.354931][ T7889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.363724][ T7889] Cannot create hsr debugfs directory [ 131.372662][ T8116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.383557][ T8116] gretap1: entered promiscuous mode [ 131.389077][ T8116] gretap1: entered allmulticast mode [ 131.679760][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 131.708545][ T8128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.585'. [ 131.816076][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 132.115896][ T5837] Bluetooth: hci2: command tx timeout [ 132.123672][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 132.131988][ T7889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.152639][ T7889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.186166][ T7889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.220173][ T7889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.241689][ T8142] netlink: 'syz.3.591': attribute type 2 has an invalid length. [ 132.379308][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.409899][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.429933][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.437154][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.475743][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.482991][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.523436][ T7889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.534302][ T7889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.674928][ T8159] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.598'. [ 132.714601][ T8159] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.598'. [ 132.998741][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.080504][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.167507][ T7889] veth0_vlan: entered promiscuous mode [ 133.220564][ T7889] veth1_vlan: entered promiscuous mode [ 133.250499][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 133.293042][ T7889] veth0_macvtap: entered promiscuous mode [ 133.335293][ T7889] veth1_macvtap: entered promiscuous mode [ 133.383098][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.412852][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.450995][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.462031][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.472860][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.492048][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.503448][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.520680][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.543604][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.572897][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.594150][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.635990][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.650441][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.660870][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.671577][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.689946][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.711242][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.739692][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.751508][ T8204] xt_hashlimit: invalid interval [ 133.764150][ T8193] team0: No ports can be present during mode change [ 133.784909][ T8207] sctp: [Deprecated]: syz.3.612 (pid 8207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.784909][ T8207] Use struct sctp_sack_info instead [ 133.814330][ T7889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.840822][ T7889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.854917][ T8209] xt_hashlimit: Unknown mode mask 20000300, kernel too old? [ 133.864259][ T8207] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.871129][ T7889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.890585][ T7889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.167363][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.196298][ T5837] Bluetooth: hci2: command tx timeout [ 134.204042][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.321853][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.347580][ T8244] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 134.353255][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.375089][ T8246] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 134.487742][ T8253] netlink: 'syz.3.621': attribute type 32 has an invalid length. [ 134.754998][ T8270] batadv_slave_1: entered promiscuous mode [ 134.773913][ T8269] batadv_slave_1: left promiscuous mode [ 134.871148][ T8276] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20003 [ 134.943990][ T8283] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.441821][ T8306] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 135.450977][ T8305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.462275][ T8305] bond3: entered promiscuous mode [ 135.468406][ T8305] bond0: (slave bond3): Enslaving as an active interface with an up link [ 135.522350][ T8317] netlink: 'syz.4.638': attribute type 21 has an invalid length. [ 135.530373][ T8317] __nla_validate_parse: 2 callbacks suppressed [ 135.530388][ T8317] netlink: 156 bytes leftover after parsing attributes in process `syz.4.638'. [ 135.964106][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 136.005011][ T8340] netlink: 5 bytes leftover after parsing attributes in process `syz.1.646'. [ 136.086381][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.648'. [ 136.163308][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 136.164406][ T3447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.206183][ T8346] team0: left allmulticast mode [ 136.211098][ T8346] team_slave_0: left allmulticast mode [ 136.266128][ T8346] team_slave_1: left allmulticast mode [ 136.295340][ T8346] team0: left promiscuous mode [ 136.300454][ T8346] team_slave_0: left promiscuous mode [ 136.310786][ T8346] team_slave_1: left promiscuous mode [ 136.320279][ T8346] bridge0: port 3(team0) entered disabled state [ 136.329107][ T8346] bridge_slave_1: left allmulticast mode [ 136.334855][ T8346] bridge_slave_1: left promiscuous mode [ 136.342031][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.350179][ T8346] bridge_slave_0: left allmulticast mode [ 136.356485][ T8346] bridge_slave_0: left promiscuous mode [ 136.362215][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.623239][ T3447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.681152][ T3447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.732194][ T3447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.857322][ T3447] bridge_slave_1: left allmulticast mode [ 136.863000][ T3447] bridge_slave_1: left promiscuous mode [ 136.869192][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.878549][ T3447] bridge_slave_0: left allmulticast mode [ 136.884228][ T3447] bridge_slave_0: left promiscuous mode [ 136.890497][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.114486][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 137.129053][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 137.141616][ T8358] netlink: 'syz.3.651': attribute type 8 has an invalid length. [ 137.371565][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.390533][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.399352][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.417709][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.427587][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.435271][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.552552][ T8369] netlink: 80 bytes leftover after parsing attributes in process `syz.0.655'. [ 137.566562][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.579997][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.593072][ T3447] bond0 (unregistering): Released all slaves [ 137.736506][ T8371] netlink: 'syz.1.656': attribute type 2 has an invalid length. [ 137.747111][ T8363] lo speed is unknown, defaulting to 1000 [ 137.756117][ T8371] netlink: 'syz.1.656': attribute type 9 has an invalid length. [ 137.764263][ T8371] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.656'. [ 137.974521][ T8378] ip6gre2: entered allmulticast mode [ 138.020474][ T8380] tipc: Started in network mode [ 138.036428][ T8380] tipc: Node identity ac1414aa, cluster identity 4711 [ 138.082921][ T8380] tipc: Enabled bearer , priority 10 [ 138.302600][ T8393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.664'. [ 138.550307][ T3447] hsr_slave_0: left promiscuous mode [ 138.556873][ T3447] hsr_slave_1: left promiscuous mode [ 138.604328][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.623664][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.647617][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.662420][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.698826][ T3447] veth1_macvtap: left promiscuous mode [ 138.704500][ T3447] veth0_macvtap: left promiscuous mode [ 138.718268][ T3447] veth1_vlan: left promiscuous mode [ 138.723656][ T3447] veth0_vlan: left promiscuous mode [ 139.206188][ T875] tipc: Node number set to 2886997162 [ 139.450392][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 139.478386][ T5836] Bluetooth: hci2: command tx timeout [ 139.505172][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 139.942308][ T8407] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.005106][ T8407] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.339300][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 140.611011][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.620925][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.629369][ T8363] bridge_slave_0: entered allmulticast mode [ 140.637693][ T8363] bridge_slave_0: entered promiscuous mode [ 140.647244][ T8444] __nla_validate_parse: 3 callbacks suppressed [ 140.647262][ T8444] netlink: 256 bytes leftover after parsing attributes in process `syz.1.677'. [ 140.665914][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.683866][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.705990][ T8363] bridge_slave_1: entered allmulticast mode [ 140.735798][ T8363] bridge_slave_1: entered promiscuous mode [ 140.870975][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.919175][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.980958][ T8455] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.682'. [ 141.055469][ T8363] team0: Port device team_slave_0 added [ 141.090611][ T8363] team0: Port device team_slave_1 added [ 141.112813][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.122666][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.132320][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.141899][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.150639][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.169477][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.259405][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 141.278334][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.285415][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.324642][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.340214][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.347260][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.373341][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.384878][ T8461] lo speed is unknown, defaulting to 1000 [ 141.444047][ T8363] hsr_slave_0: entered promiscuous mode [ 141.462698][ T8363] hsr_slave_1: entered promiscuous mode [ 141.486917][ T8363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.502963][ T8363] Cannot create hsr debugfs directory [ 141.555972][ T5836] Bluetooth: hci2: command tx timeout [ 141.592054][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 141.762809][ T8490] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 142.184671][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 142.479121][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.523396][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.551414][ T8461] bridge_slave_0: entered allmulticast mode [ 142.578622][ T8461] bridge_slave_0: entered promiscuous mode [ 142.619059][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.674353][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.694086][ T8461] bridge_slave_1: entered allmulticast mode [ 142.736655][ T8461] bridge_slave_1: entered promiscuous mode [ 142.803136][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.868025][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.003594][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 143.022718][ T8461] team0: Port device team_slave_0 added [ 143.043139][ T8461] team0: Port device team_slave_1 added [ 143.053499][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 143.073869][ T8363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.169977][ T8363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.204687][ T8363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.215586][ T8363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.230469][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.253785][ T5836] Bluetooth: hci0: command tx timeout [ 143.255780][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.305790][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.371274][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.378442][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.404864][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.519908][ T8461] hsr_slave_0: entered promiscuous mode [ 143.565469][ T8461] hsr_slave_1: entered promiscuous mode [ 143.575358][ T8461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.594008][ T8461] Cannot create hsr debugfs directory [ 143.642594][ T5836] Bluetooth: hci2: command tx timeout [ 143.883085][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 144.007703][ T8461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.033154][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.119408][ T8461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.150953][ T8363] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.169929][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 144.186949][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.194353][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.197599][ T8588] netlink: 'syz.4.720': attribute type 7 has an invalid length. [ 144.212822][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.220038][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.244232][ T8461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.332891][ T8461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.510999][ T8461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.524409][ T8461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.538331][ T8461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.551689][ T8461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.569333][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.648684][ T8363] veth0_vlan: entered promiscuous mode [ 144.682915][ T8363] veth1_vlan: entered promiscuous mode [ 144.710453][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.735424][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.758067][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.765186][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.781398][ T8363] veth0_macvtap: entered promiscuous mode [ 144.783717][ T8578] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.790989][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.800910][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.816170][ T8363] veth1_macvtap: entered promiscuous mode [ 144.849860][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.877743][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.903292][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.931893][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.942328][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.961039][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.973103][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.986734][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.998145][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.033591][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.058252][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.095945][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.107066][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.117569][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.128735][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.138951][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.149893][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.164473][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.192556][ T8363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.203444][ T8363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.222033][ T8363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.233190][ T8363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.254719][ T8461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.268305][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.281228][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 145.453928][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.477901][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.510335][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.527153][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.755148][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.834757][ T8461] veth0_vlan: entered promiscuous mode [ 145.862645][ T8461] veth1_vlan: entered promiscuous mode [ 145.938216][ T8461] veth0_macvtap: entered promiscuous mode [ 145.954720][ T8461] veth1_macvtap: entered promiscuous mode [ 145.974213][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.985099][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.995332][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.007426][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.017360][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.033527][ T8631] openvswitch: netlink: Multiple metadata blocks provided [ 146.043381][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.075724][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.089550][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.116341][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.153671][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.170294][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.195351][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.211337][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.222229][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.233495][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.233595][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 146.243551][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.243576][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.261708][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 146.264519][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.293995][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.303965][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.315539][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.326985][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.349053][ T8461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.359671][ T8461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.385297][ T8461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.395126][ T8461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.424371][ T8641] tipc: Started in network mode [ 146.431405][ T8641] tipc: Node identity ba3d07103ccd, cluster identity 4711 [ 146.447085][ T8641] tipc: Enabled bearer , priority 0 [ 146.569463][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.652650][ T8638] syzkaller0: entered promiscuous mode [ 146.659973][ T8638] syzkaller0: entered allmulticast mode [ 146.675550][ T8647] tipc: Resetting bearer [ 146.733325][ T8636] tipc: Resetting bearer [ 146.753708][ T8636] tipc: Disabling bearer [ 146.783362][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.803463][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.832733][ T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.854102][ T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.091318][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.509631][ T8651] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 147.531233][ T8651] netlink: 'syz.3.734': attribute type 2 has an invalid length. [ 147.545584][ T8651] netlink: 'syz.3.734': attribute type 2 has an invalid length. [ 147.559467][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 147.568814][ T8651] netlink: 'syz.3.734': attribute type 2 has an invalid length. [ 147.586569][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'. [ 147.759285][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.794028][ T8659] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 147.814144][ T8663] syz.1.737[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.814245][ T8663] syz.1.737[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.827248][ T8659] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 147.850282][ T8663] syz.1.737[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.851564][ T8662] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 147.874574][ T8659] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.736'. [ 147.901119][ T8658] delete_channel: no stack [ 147.928600][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.091842][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 148.107502][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.154577][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.175313][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.180280][ T8681] netlink: 'syz.4.741': attribute type 11 has an invalid length. [ 148.184225][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.200013][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.200964][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 148.207572][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.239024][ T8681] netlink: 64 bytes leftover after parsing attributes in process `syz.4.741'. [ 148.284123][ T52] bridge_slave_1: left allmulticast mode [ 148.292052][ T52] bridge_slave_1: left promiscuous mode [ 148.298523][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.312790][ T52] bridge_slave_0: left allmulticast mode [ 148.318988][ T52] bridge_slave_0: left promiscuous mode [ 148.324736][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.711570][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.722517][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.733535][ T52] bond0 (unregistering): Released all slaves [ 148.752788][ T8676] lo speed is unknown, defaulting to 1000 [ 148.930593][ T8690] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20001 [ 149.094034][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 149.174301][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.191746][ T8696] batadv_slave_1: entered promiscuous mode [ 149.205117][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.746'. [ 149.229630][ T8694] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 149.253716][ T8694] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 149.509480][ T52] hsr_slave_0: left promiscuous mode [ 149.521874][ T52] hsr_slave_1: left promiscuous mode [ 149.529247][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.540241][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.549153][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.557994][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.579187][ T52] veth1_macvtap: left promiscuous mode [ 149.584725][ T52] veth0_macvtap: left promiscuous mode [ 149.591918][ T52] veth1_vlan: left promiscuous mode [ 149.597360][ T52] veth0_vlan: left promiscuous mode [ 150.137972][ T52] team0 (unregistering): Port device team_slave_1 removed [ 150.178531][ T52] team0 (unregistering): Port device team_slave_0 removed [ 150.277318][ T5840] Bluetooth: hci2: command tx timeout [ 150.692349][ T8676] chnl_net:caif_netlink_parms(): no params data found [ 150.871198][ T8723] x_tables: duplicate underflow at hook 2 [ 151.023759][ T8735] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 151.072159][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.095232][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.114551][ T8676] bridge_slave_0: entered allmulticast mode [ 151.136974][ T8676] bridge_slave_0: entered promiscuous mode [ 151.165537][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.188072][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.195532][ T8676] bridge_slave_1: entered allmulticast mode [ 151.219536][ T8676] bridge_slave_1: entered promiscuous mode [ 151.240392][ T8740] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 151.261380][ T8753] __nla_validate_parse: 3 callbacks suppressed [ 151.261402][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 151.280376][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 151.284681][ T8740] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 151.385285][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.418137][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.489508][ T8676] team0: Port device team_slave_0 added [ 151.507844][ T8676] team0: Port device team_slave_1 added [ 151.564036][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.572155][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.609338][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.630310][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.670954][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.705557][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.821486][ T8676] hsr_slave_0: entered promiscuous mode [ 151.833860][ T8676] hsr_slave_1: entered promiscuous mode [ 151.844625][ T8676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.859346][ T8676] Cannot create hsr debugfs directory [ 152.356550][ T5840] Bluetooth: hci2: command tx timeout [ 152.449391][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 152.482523][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 152.560653][ T8676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.605591][ T8676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.645406][ T8676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.679536][ T8676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.761908][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.769827][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.850508][ T8824] x_tables: duplicate underflow at hook 2 [ 152.856797][ T8824] x_tables: duplicate underflow at hook 2 [ 152.862801][ T8824] x_tables: duplicate underflow at hook 2 [ 152.893143][ T8824] x_tables: duplicate underflow at hook 2 [ 152.945384][ T8824] x_tables: duplicate underflow at hook 2 [ 152.964104][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.973133][ T8824] x_tables: duplicate underflow at hook 2 [ 152.985913][ T8824] x_tables: duplicate underflow at hook 2 [ 152.993500][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 153.006307][ T8824] x_tables: duplicate underflow at hook 2 [ 153.018126][ T8676] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.030872][ T8824] x_tables: duplicate underflow at hook 2 [ 153.076817][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.083976][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.093025][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.100198][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.147789][ T8830] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 153.161889][ T8833] netlink: 'syz.3.783': attribute type 21 has an invalid length. [ 153.171750][ T8830] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.193849][ T8833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'. [ 153.264500][ T8837] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.266511][ T8676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.584659][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 153.609049][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 153.623081][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 153.751871][ T8860] netlink: 'syz.1.788': attribute type 7 has an invalid length. [ 153.777247][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.811949][ T8676] veth0_vlan: entered promiscuous mode [ 153.823658][ T8676] veth1_vlan: entered promiscuous mode [ 153.852948][ T8874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.790'. [ 153.891674][ T8676] veth0_macvtap: entered promiscuous mode [ 153.898857][ T8860] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 153.922562][ T8676] veth1_macvtap: entered promiscuous mode [ 153.979326][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.011820][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.030594][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.058501][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.073515][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.092266][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.104138][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.124184][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.134270][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.145581][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.164866][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.187874][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.209146][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.252912][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.264013][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.295734][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.325805][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.360044][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.382849][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.399049][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.412060][ T8893] 0·: renamed from hsr0 (while UP) [ 154.420912][ T8893] 0·: entered promiscuous mode [ 154.432771][ T8893] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 154.435808][ T5840] Bluetooth: hci2: command tx timeout [ 154.462479][ T8676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.487141][ T8676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.496443][ T8676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.506095][ T8676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.662529][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.681513][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.720515][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.736613][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.826986][ T8908] lo: entered promiscuous mode [ 154.850846][ T8908] netlink: 'syz.3.801': attribute type 2 has an invalid length. [ 154.870345][ T8908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.210869][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.881284][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.951106][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.009397][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.129592][ T1145] bridge_slave_1: left allmulticast mode [ 157.136156][ T1145] bridge_slave_1: left promiscuous mode [ 157.141958][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.151656][ T1145] bridge_slave_0: left allmulticast mode [ 157.162468][ T1145] bridge_slave_0: left promiscuous mode [ 157.169869][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.384775][ T8966] __nla_validate_parse: 5 callbacks suppressed [ 157.384796][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.450761][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.502319][ T8969] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 157.548472][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.658648][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.862467][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.880502][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.890372][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.921937][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.938003][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.945399][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.956128][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.970938][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.987161][ T1145] bond0 (unregistering): Released all slaves [ 158.066895][ T8983] lo speed is unknown, defaulting to 1000 [ 158.188289][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.211880][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.608415][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 158.724296][ T1145] hsr_slave_0: left promiscuous mode [ 158.762369][ T1145] hsr_slave_1: left promiscuous mode [ 158.770875][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.778742][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.788782][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.796350][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.820335][ T1145] veth1_macvtap: left promiscuous mode [ 158.826066][ T1145] veth0_macvtap: left promiscuous mode [ 158.831629][ T1145] veth1_vlan: left promiscuous mode [ 158.839225][ T1145] veth0_vlan: left promiscuous mode [ 159.523008][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 159.572403][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 160.039141][ T5840] Bluetooth: hci2: command tx timeout [ 160.074418][ T9033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.092355][ T9033] bond0: (slave bond1): Enslaving as an active interface with an up link [ 160.284967][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.292610][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.300383][ T8983] bridge_slave_0: entered allmulticast mode [ 160.307950][ T8983] bridge_slave_0: entered promiscuous mode [ 160.347351][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.354498][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.363153][ T8983] bridge_slave_1: entered allmulticast mode [ 160.370829][ T8983] bridge_slave_1: entered promiscuous mode [ 160.543912][ T9056] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.598348][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.654429][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.674362][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.4.843'. [ 160.759880][ T8983] team0: Port device team_slave_0 added [ 160.778800][ T8983] team0: Port device team_slave_1 added [ 160.842643][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 160.894347][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.926413][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.953842][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.009018][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.042928][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.086753][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.287980][ T9098] netlink: 260 bytes leftover after parsing attributes in process `syz.3.850'. [ 161.311467][ T8983] hsr_slave_0: entered promiscuous mode [ 161.368605][ T9103] netlink: 260 bytes leftover after parsing attributes in process `syz.3.850'. [ 161.377163][ T8983] hsr_slave_1: entered promiscuous mode [ 161.384435][ T8983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.392294][ T8983] Cannot create hsr debugfs directory [ 161.897256][ T9130] gtp0: entered promiscuous mode [ 161.902414][ T9130] gtp0: entered allmulticast mode [ 162.115943][ T5840] Bluetooth: hci2: command tx timeout [ 162.216205][ T8983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.247594][ T8983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.269006][ T8983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.300106][ T8983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.470993][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.503248][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.528738][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.544220][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.551493][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.582328][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.589536][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.637875][ T8983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.648427][ T8983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.733820][ T9166] __nla_validate_parse: 1 callbacks suppressed [ 162.733839][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 162.927138][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.052047][ T8983] veth0_vlan: entered promiscuous mode [ 163.118151][ T8983] veth1_vlan: entered promiscuous mode [ 163.212088][ T8983] veth0_macvtap: entered promiscuous mode [ 163.248296][ T8983] veth1_macvtap: entered promiscuous mode [ 163.277703][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.292119][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.322348][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.341924][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.365359][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.384546][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.396369][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.416235][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.426485][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.437020][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.448551][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.472080][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.489669][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.499800][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.510435][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.521556][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.548198][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.558775][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.579462][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.596861][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.669571][ T8983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.699793][ T8983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.721918][ T8983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.746818][ T8983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.977415][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.985260][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.045047][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'. [ 164.184825][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.196684][ T5840] Bluetooth: hci2: command tx timeout [ 164.212313][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.324870][ T9226] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 164.353537][ T9226] netlink: 224 bytes leftover after parsing attributes in process `syz.1.886'. [ 164.499616][ T9234] syz.3.889 (9234) used greatest stack depth: 17040 bytes left [ 164.726015][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 164.755448][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.776878][ T9244] batadv_slave_1: entered promiscuous mode [ 164.782753][ T9244] batadv_slave_1: entered allmulticast mode [ 165.343393][ T9275] netlink: 188 bytes leftover after parsing attributes in process `syz.4.903'. [ 165.364180][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 165.375490][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 165.485333][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.526182][ T9277] infiniband syz0: set active [ 165.531019][ T9277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.566311][ T5883] lo speed is unknown, defaulting to 1000 [ 166.153417][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.330161][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.381708][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.480967][ T52] bridge_slave_1: left allmulticast mode [ 166.488584][ T52] bridge_slave_1: left promiscuous mode [ 166.495068][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.504336][ T52] bridge_slave_0: left allmulticast mode [ 166.510792][ T52] bridge_slave_0: left promiscuous mode [ 166.521287][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.056208][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 167.066013][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 167.075708][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 167.277981][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.281076][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.297026][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.307248][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.328283][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.349981][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.360700][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.370531][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.400749][ T52] bond0 (unregistering): Released all slaves [ 167.473841][ T9317] lo speed is unknown, defaulting to 1000 [ 167.519674][ T9323] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 168.024959][ T9343] __nla_validate_parse: 3 callbacks suppressed [ 168.024979][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 168.205818][ T52] hsr_slave_0: left promiscuous mode [ 168.208191][ T9350] netlink: 'syz.3.918': attribute type 8 has an invalid length. [ 168.219630][ T9350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.918'. [ 168.230608][ T52] hsr_slave_1: left promiscuous mode [ 168.239550][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.247411][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.262746][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.276532][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.332836][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 168.335085][ T52] veth1_macvtap: left promiscuous mode [ 168.352388][ T52] veth0_macvtap: left promiscuous mode [ 168.359336][ T52] veth1_vlan: left promiscuous mode [ 168.364659][ T52] veth0_vlan: left promiscuous mode [ 168.835365][ T52] team0 (unregistering): Port device team_slave_1 removed [ 168.884135][ T52] team0 (unregistering): Port device team_slave_0 removed [ 169.355143][ T9352] infiniband syz0: set active [ 169.363514][ T9352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.388487][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.405998][ T5837] Bluetooth: hci2: command tx timeout [ 169.462226][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 169.473968][ T5884] lo speed is unknown, defaulting to 1000 [ 169.508210][ T9359] xt_check_table_hooks: 56 callbacks suppressed [ 169.508233][ T9359] x_tables: duplicate underflow at hook 1 [ 169.692518][ T9361] netlink: 'syz.4.923': attribute type 20 has an invalid length. [ 169.743285][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.750609][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.758028][ T9317] bridge_slave_0: entered allmulticast mode [ 169.765501][ T9317] bridge_slave_0: entered promiscuous mode [ 169.773943][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.781420][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.788952][ T9317] bridge_slave_1: entered allmulticast mode [ 169.797686][ T9317] bridge_slave_1: entered promiscuous mode [ 169.898564][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.933816][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.050330][ T9317] team0: Port device team_slave_0 added [ 170.066667][ T9317] team0: Port device team_slave_1 added [ 170.108489][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.115494][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.142630][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.164520][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.184818][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.221600][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.269873][ T9317] hsr_slave_0: entered promiscuous mode [ 170.278812][ T9317] hsr_slave_1: entered promiscuous mode [ 170.285235][ T9317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.294151][ T9317] Cannot create hsr debugfs directory [ 170.572107][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'. [ 170.648854][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 170.875383][ T9317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.904682][ T9317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.929624][ T9317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.959071][ T9406] mac80211_hwsim hwsim7 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.976127][ T9317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.135352][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.179616][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.200718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.208085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.232215][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.239448][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.476752][ T5837] Bluetooth: hci2: command tx timeout [ 171.682575][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.788615][ T9317] veth0_vlan: entered promiscuous mode [ 171.801489][ T9317] veth1_vlan: entered promiscuous mode [ 171.827979][ T9442] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 171.847946][ T9442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.862226][ T9442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.882559][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 171.891989][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 171.901513][ T9444] netlink: 'syz.1.945': attribute type 11 has an invalid length. [ 171.914505][ T9442] batadv_slave_0: entered promiscuous mode [ 171.921800][ T9442] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 171.937801][ T9451] netlink: 'syz.1.945': attribute type 15 has an invalid length. [ 171.946584][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 171.990261][ T9317] veth0_macvtap: entered promiscuous mode [ 172.028551][ T9317] veth1_macvtap: entered promiscuous mode [ 172.083597][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.105838][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.135065][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.155672][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.173135][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.184303][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.194611][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.205465][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.232273][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.260200][ T9458] netlink: 'syz.1.950': attribute type 6 has an invalid length. [ 172.298432][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.324311][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.354679][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.366593][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.377472][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.388524][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.413195][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.464626][ T9317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.484928][ T9317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.509143][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 172.516109][ T9317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.549565][ T9317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.635042][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.954'. [ 172.679011][ T9471] xt_hashlimit: overflow, rate too high: 0 [ 172.769332][ T9475] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 172.831948][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.841294][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.909440][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.919972][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.076778][ T52] wlan0: Trigger new scan to find an IBSS to join [ 173.085866][ T9485] __nla_validate_parse: 1 callbacks suppressed [ 173.085887][ T9485] netlink: 1275 bytes leftover after parsing attributes in process `syz.1.958'. [ 173.105503][ T9485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.862683][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 173.948314][ T9508] xt_policy: neither incoming nor outgoing policy selected [ 174.018018][ T9508] sctp: [Deprecated]: syz.4.965 (pid 9508) Use of int in max_burst socket option. [ 174.018018][ T9508] Use struct sctp_assoc_value instead [ 174.126325][ T11] wlan1: Trigger new scan to find an IBSS to join [ 174.275013][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 174.328950][ T9516] xt_nfacct: accounting object `syz1' does not exists [ 174.600416][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.464895][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.552567][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.603973][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.792962][ T2993] bridge_slave_1: left allmulticast mode [ 175.813463][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 175.814986][ T2993] bridge_slave_1: left promiscuous mode [ 175.835951][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.846263][ T2993] bridge_slave_0: left allmulticast mode [ 175.851965][ T2993] bridge_slave_0: left promiscuous mode [ 175.865388][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.127729][ T52] wlan0: Trigger new scan to find an IBSS to join [ 176.144806][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.170846][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.181265][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.192267][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.200916][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 176.214245][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.369393][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.381497][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.392147][ T2993] bond0 (unregistering): Released all slaves [ 176.480428][ T9531] lo speed is unknown, defaulting to 1000 [ 176.569798][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 176.777376][ T9541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.974'. [ 176.855070][ T9548] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 176.869682][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 177.099257][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 177.150740][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 177.159609][ T9563] syz_tun: entered allmulticast mode [ 177.170956][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 177.177010][ T9566] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.229179][ T9562] syz_tun: left allmulticast mode [ 177.431014][ T2993] hsr_slave_0: left promiscuous mode [ 177.440439][ T2993] hsr_slave_1: left promiscuous mode [ 177.453212][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.460576][ T9581] netlink: 76 bytes leftover after parsing attributes in process `syz.4.984'. [ 177.464647][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.483990][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.492134][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.554921][ T2993] veth1_macvtap: left promiscuous mode [ 177.563471][ T2993] veth0_macvtap: left promiscuous mode [ 177.577852][ T2993] veth1_vlan: left promiscuous mode [ 177.583572][ T2993] veth0_vlan: left promiscuous mode [ 178.134129][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 178.181290][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 178.288509][ T5840] Bluetooth: hci2: command tx timeout [ 178.636004][ T9584] tipc: Enabling of bearer rejected, failed to enable media [ 178.659328][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 178.880411][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.888120][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.895380][ T9531] bridge_slave_0: entered allmulticast mode [ 178.903088][ T9531] bridge_slave_0: entered promiscuous mode [ 178.911605][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.919630][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.928870][ T9531] bridge_slave_1: entered allmulticast mode [ 178.936626][ T9531] bridge_slave_1: entered promiscuous mode [ 179.059013][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.084528][ T3447] wlan0: Creating new IBSS network, BSSID e6:dc:fa:9f:33:0d [ 179.118728][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.260092][ T9531] team0: Port device team_slave_0 added [ 179.298457][ T9531] team0: Port device team_slave_1 added [ 179.361639][ T9620] __nla_validate_parse: 1 callbacks suppressed [ 179.361662][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 179.410065][ T9626] vlan3: entered allmulticast mode [ 179.424133][ T9626] bond0: entered allmulticast mode [ 179.429793][ T9626] bond_slave_0: entered allmulticast mode [ 179.439890][ T9626] bond_slave_1: entered allmulticast mode [ 179.453882][ T9626] bond1: entered allmulticast mode [ 179.483288][ T9626] bond0: left allmulticast mode [ 179.492538][ T9626] bond_slave_0: left allmulticast mode [ 179.498643][ T9626] bond_slave_1: left allmulticast mode [ 179.504304][ T9626] bond1: left allmulticast mode [ 179.533876][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.541837][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.568607][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.582880][ T9629] bridge_slave_0: default FDB implementation only supports local addresses [ 179.635097][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.655813][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.701859][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.794555][ T9640] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 179.831693][ T9640] netlink: 'syz.3.1001': attribute type 2 has an invalid length. [ 179.854946][ T9531] hsr_slave_0: entered promiscuous mode [ 179.871112][ T9531] hsr_slave_1: entered promiscuous mode [ 179.877815][ T9531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.885591][ T9531] Cannot create hsr debugfs directory [ 179.907380][ T9640] geneve3: entered promiscuous mode [ 179.912642][ T9640] geneve3: entered allmulticast mode [ 180.016356][ T340] wlan1: Creating new IBSS network, BSSID d2:81:02:c3:d2:b5 [ 180.366331][ T5840] Bluetooth: hci2: command tx timeout [ 180.452783][ T9661] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 180.507574][ T9666] sch_fq: defrate 0 ignored. [ 180.698913][ T9531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.735944][ T9531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.761455][ T9531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.794540][ T9679] set match dimension is over the limit! [ 180.802111][ T9531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.813411][ T9681] nbd: must specify a size in bytes for the device [ 180.815861][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 180.856532][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 181.024648][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'. [ 181.072615][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.116672][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.132838][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.140053][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.229069][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.236263][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.642092][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.729773][ T9531] veth0_vlan: entered promiscuous mode [ 181.744362][ T9531] veth1_vlan: entered promiscuous mode [ 181.785535][ T9531] veth0_macvtap: entered promiscuous mode [ 181.803262][ T9531] veth1_macvtap: entered promiscuous mode [ 181.821330][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.839133][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.851726][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.863304][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.873657][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.885110][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.895553][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.906419][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.919671][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.951756][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.968749][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.979729][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.990522][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.002910][ T9531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.014232][ T9531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.026828][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.060291][ T9531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.069278][ T9531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.078146][ T9531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.087204][ T9531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.250330][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.251177][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.258983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.277984][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 182.289898][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.457733][ T5840] Bluetooth: hci2: command tx timeout [ 182.497699][ T9749] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 182.719558][ T5883] IPVS: starting estimator thread 0... [ 182.814060][ T9749] veth1_macvtap: left promiscuous mode [ 182.822656][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 182.833192][ T9759] tc_dump_action: action bad kind [ 182.836257][ T9764] IPVS: using max 22 ests per chain, 52800 per kthread [ 182.845224][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 182.856461][ T9760] tc_dump_action: action bad kind [ 182.930103][ T9769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1037'. [ 183.093813][ T9778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.436680][ T9796] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.499716][ T9800] netlink: 'syz.4.1049': attribute type 2 has an invalid length. [ 183.576910][ T9803] netlink: 'syz.4.1050': attribute type 3 has an invalid length. [ 183.584910][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1050'. [ 183.796504][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.829633][ T9809] netlink: 'syz.4.1050': attribute type 3 has an invalid length. [ 183.865800][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1050'. [ 184.727608][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.179662][ T9818] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1052'. [ 185.309410][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.421052][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.471156][ T9826] infiniband syz0: set active [ 185.547928][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.558197][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.558338][ T9826] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.566975][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.598210][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.614954][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.621608][ T5886] lo speed is unknown, defaulting to 1000 [ 185.628006][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.704427][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.787235][ T9829] lo speed is unknown, defaulting to 1000 [ 185.958044][ T81] bridge_slave_1: left allmulticast mode [ 185.988343][ T81] bridge_slave_1: left promiscuous mode [ 185.994118][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.087420][ T81] bridge_slave_0: left allmulticast mode [ 186.093136][ T81] bridge_slave_0: left promiscuous mode [ 186.123419][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.366391][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 186.372535][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 186.532382][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.544722][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.556653][ T81] bond0 (unregistering): Released all slaves [ 186.569568][ T9847] tipc: MTU too low for tipc bearer [ 186.575537][ T9852] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1060'. [ 186.823475][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 186.888040][ T5883] ================================================================== [ 186.896276][ T5883] BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 [ 186.903793][ T5883] Read of size 8 at addr ffff888034162338 by task kworker/1:5/5883 [ 186.911705][ T5883] [ 186.914078][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:5 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 186.924945][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.935021][ T5883] Workqueue: events l2cap_chan_timeout [ 186.940517][ T5883] Call Trace: [ 186.943795][ T5883] [ 186.946720][ T5883] dump_stack_lvl+0x241/0x360 [ 186.951396][ T5883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.956596][ T5883] ? __pfx__printk+0x10/0x10 [ 186.961188][ T5883] ? _printk+0xd5/0x120 [ 186.965344][ T5883] ? __virt_addr_valid+0x183/0x530 [ 186.970467][ T5883] ? __virt_addr_valid+0x183/0x530 [ 186.975578][ T5883] print_report+0x169/0x550 [ 186.980079][ T5883] ? __virt_addr_valid+0x183/0x530 [ 186.985184][ T5883] ? __virt_addr_valid+0x183/0x530 [ 186.990288][ T5883] ? __virt_addr_valid+0x45f/0x530 [ 186.995394][ T5883] ? __phys_addr+0xba/0x170 [ 186.999898][ T5883] ? lock_release+0x151/0xa30 [ 187.004572][ T5883] kasan_report+0x143/0x180 [ 187.009073][ T5883] ? lock_release+0x151/0xa30 [ 187.013748][ T5883] ? process_scheduled_works+0xa66/0x1840 [ 187.019473][ T5883] lock_release+0x151/0xa30 [ 187.024003][ T5883] ? __pfx_lock_release+0x10/0x10 [ 187.029046][ T5883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.035019][ T5883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.041338][ T5883] ? process_scheduled_works+0xa66/0x1840 [ 187.047059][ T5883] __mutex_unlock_slowpath+0xe2/0x790 [ 187.052430][ T5883] ? kasan_quarantine_put+0xdc/0x230 [ 187.057716][ T5883] ? lockdep_hardirqs_on+0x99/0x150 [ 187.062910][ T5883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.069102][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 187.074351][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 187.079568][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 187.084769][ T5883] ? process_scheduled_works+0x976/0x1840 [ 187.090482][ T5883] process_scheduled_works+0xa66/0x1840 [ 187.096027][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.102012][ T5883] ? assign_work+0x364/0x3d0 [ 187.106597][ T5883] worker_thread+0x870/0xd30 [ 187.111185][ T5883] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 187.117090][ T5883] ? __kthread_parkme+0x169/0x1d0 [ 187.122980][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 187.128089][ T5883] kthread+0x2f0/0x390 [ 187.132159][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 187.137360][ T5883] ? __pfx_kthread+0x10/0x10 [ 187.141949][ T5883] ret_from_fork+0x4b/0x80 [ 187.146623][ T5883] ? __pfx_kthread+0x10/0x10 [ 187.151210][ T5883] ret_from_fork_asm+0x1a/0x30 [ 187.155986][ T5883] [ 187.159032][ T5883] [ 187.161348][ T5883] Allocated by task 8639: [ 187.165667][ T5883] kasan_save_track+0x3f/0x80 [ 187.170349][ T5883] __kasan_kmalloc+0x98/0xb0 [ 187.175022][ T5883] __kmalloc_cache_noprof+0x243/0x390 [ 187.180392][ T5883] l2cap_conn_add+0xa9/0x8e0 [ 187.185014][ T5883] l2cap_chan_connect+0x623/0xeb0 [ 187.190034][ T5883] l2cap_sock_connect+0x5c9/0x800 [ 187.195159][ T5883] kernel_connect+0x10b/0x160 [ 187.199857][ T5883] rfcomm_dlc_open+0x7cc/0x1270 [ 187.204826][ T5883] rfcomm_sock_connect+0x305/0x610 [ 187.209944][ T5883] __sys_connect+0x288/0x2d0 [ 187.214985][ T5883] __x64_sys_connect+0x7a/0x90 [ 187.219764][ T5883] do_syscall_64+0xf3/0x230 [ 187.224280][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.230194][ T5883] [ 187.232510][ T5883] Freed by task 8461: [ 187.236483][ T5883] kasan_save_track+0x3f/0x80 [ 187.241169][ T5883] kasan_save_free_info+0x40/0x50 [ 187.246190][ T5883] __kasan_slab_free+0x59/0x70 [ 187.251037][ T5883] kfree+0x196/0x430 [ 187.254935][ T5883] hci_conn_hash_flush+0x1be/0x350 [ 187.260043][ T5883] hci_dev_close_sync+0xa42/0x11c0 [ 187.265154][ T5883] hci_unregister_dev+0x20b/0x510 [ 187.270195][ T5883] vhci_release+0x80/0xd0 [ 187.274525][ T5883] __fput+0x23c/0xa50 [ 187.278506][ T5883] task_work_run+0x24f/0x310 [ 187.283095][ T5883] do_exit+0xa2f/0x28e0 [ 187.287312][ T5883] do_group_exit+0x207/0x2c0 [ 187.291892][ T5883] __x64_sys_exit_group+0x3f/0x40 [ 187.296911][ T5883] x64_sys_call+0x26a8/0x26b0 [ 187.301587][ T5883] do_syscall_64+0xf3/0x230 [ 187.306315][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.312954][ T5883] [ 187.315468][ T5883] The buggy address belongs to the object at ffff888034162000 [ 187.315468][ T5883] which belongs to the cache kmalloc-1k of size 1024 [ 187.329546][ T5883] The buggy address is located 824 bytes inside of [ 187.329546][ T5883] freed 1024-byte region [ffff888034162000, ffff888034162400) [ 187.343448][ T5883] [ 187.345777][ T5883] The buggy address belongs to the physical page: [ 187.352199][ T5883] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34160 [ 187.360964][ T5883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.369475][ T5883] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 187.377026][ T5883] page_type: f5(slab) [ 187.381017][ T5883] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 187.389604][ T5883] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 187.398193][ T5883] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 187.406871][ T5883] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 187.415552][ T5883] head: 00fff00000000003 ffffea0000d05801 ffffffffffffffff 0000000000000000 [ 187.424227][ T5883] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 187.432985][ T5883] page dumped because: kasan: bad access detected [ 187.439409][ T5883] page_owner tracks the page as allocated [ 187.445128][ T5883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2993, tgid 2993 (kworker/u8:8), ts 71459123632, free_ts 71435563847 [ 187.464492][ T5883] post_alloc_hook+0x1f3/0x230 [ 187.469261][ T5883] get_page_from_freelist+0x365c/0x37a0 [ 187.474813][ T5883] __alloc_pages_noprof+0x292/0x710 [ 187.480092][ T5883] alloc_pages_mpol_noprof+0x3e8/0x680 [ 187.485554][ T5883] alloc_slab_page+0x6a/0x110 [ 187.490312][ T5883] allocate_slab+0x5a/0x2b0 [ 187.494805][ T5883] ___slab_alloc+0xc27/0x14a0 [ 187.499478][ T5883] __slab_alloc+0x58/0xa0 [ 187.503891][ T5883] __kmalloc_noprof+0x2e6/0x4c0 [ 187.508823][ T5883] ieee802_11_parse_elems_full+0xdb/0x2880 [ 187.514624][ T5883] ieee80211_inform_bss+0x15f/0x1080 [ 187.520005][ T5883] cfg80211_inform_single_bss_data+0xec1/0x2070 [ 187.526365][ T5883] cfg80211_inform_bss_data+0x3ce/0x5e80 [ 187.532113][ T5883] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 187.538216][ T5883] ieee80211_bss_info_update+0x8a7/0xbc0 [ 187.543864][ T5883] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 187.550032][ T5883] page last free pid 5995 tgid 5995 stack trace: [ 187.556888][ T5883] free_unref_page+0xd3f/0x1010 [ 187.561739][ T5883] __put_partials+0x160/0x1c0 [ 187.566413][ T5883] put_cpu_partial+0x17c/0x250 [ 187.571214][ T5883] __slab_free+0x290/0x380 [ 187.575646][ T5883] qlist_free_all+0x9a/0x140 [ 187.580253][ T5883] kasan_quarantine_reduce+0x14f/0x170 [ 187.585831][ T5883] __kasan_slab_alloc+0x23/0x80 [ 187.590694][ T5883] kmem_cache_alloc_noprof+0x1d9/0x380 [ 187.596173][ T5883] getname_flags+0xb7/0x540 [ 187.600686][ T5883] vfs_fstatat+0x3f/0x130 [ 187.605009][ T5883] __x64_sys_newfstatat+0x11d/0x1a0 [ 187.610213][ T5883] do_syscall_64+0xf3/0x230 [ 187.614713][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.620606][ T5883] [ 187.622940][ T5883] Memory state around the buggy address: [ 187.628644][ T5883] ffff888034162200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.636711][ T5883] ffff888034162280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.644783][ T5883] >ffff888034162300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.652901][ T5883] ^ [ 187.658792][ T5883] ffff888034162380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.666935][ T5883] ffff888034162400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.675080][ T5883] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 187.737341][ T5836] Bluetooth: hci2: command tx timeout [ 188.045825][ T5883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 188.053079][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:5 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 188.063902][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.073989][ T5883] Workqueue: events l2cap_chan_timeout [ 188.079496][ T5883] Call Trace: [ 188.082800][ T5883] [ 188.085754][ T5883] dump_stack_lvl+0x241/0x360 [ 188.090453][ T5883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.095672][ T5883] ? __pfx__printk+0x10/0x10 [ 188.100452][ T5883] ? preempt_schedule+0xe1/0xf0 [ 188.105305][ T5883] ? vscnprintf+0x5d/0x90 [ 188.109661][ T5883] panic+0x349/0x880 [ 188.113569][ T5883] ? check_panic_on_warn+0x21/0xb0 [ 188.118686][ T5883] ? __pfx_panic+0x10/0x10 [ 188.123207][ T5883] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 188.129189][ T5883] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.135516][ T5883] ? print_report+0x502/0x550 [ 188.140244][ T5883] check_panic_on_warn+0x86/0xb0 [ 188.145179][ T5883] ? lock_release+0x151/0xa30 [ 188.149946][ T5883] end_report+0x77/0x160 [ 188.154387][ T5883] kasan_report+0x154/0x180 [ 188.159011][ T5883] ? lock_release+0x151/0xa30 [ 188.163913][ T5883] ? process_scheduled_works+0xa66/0x1840 [ 188.169654][ T5883] lock_release+0x151/0xa30 [ 188.174275][ T5883] ? __pfx_lock_release+0x10/0x10 [ 188.179302][ T5883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 188.185289][ T5883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.191961][ T5883] ? process_scheduled_works+0xa66/0x1840 [ 188.197694][ T5883] __mutex_unlock_slowpath+0xe2/0x790 [ 188.203068][ T5883] ? kasan_quarantine_put+0xdc/0x230 [ 188.208374][ T5883] ? lockdep_hardirqs_on+0x99/0x150 [ 188.213574][ T5883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.219558][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 188.224954][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 188.230257][ T5883] ? l2cap_chan_timeout+0x196/0x360 [ 188.235459][ T5883] ? process_scheduled_works+0x976/0x1840 [ 188.241177][ T5883] process_scheduled_works+0xa66/0x1840 [ 188.246818][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.252906][ T5883] ? assign_work+0x364/0x3d0 [ 188.257515][ T5883] worker_thread+0x870/0xd30 [ 188.262123][ T5883] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 188.268027][ T5883] ? __kthread_parkme+0x169/0x1d0 [ 188.273049][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 188.278183][ T5883] kthread+0x2f0/0x390 [ 188.282276][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 188.287411][ T5883] ? __pfx_kthread+0x10/0x10 [ 188.292015][ T5883] ret_from_fork+0x4b/0x80 [ 188.296430][ T5883] ? __pfx_kthread+0x10/0x10 [ 188.301130][ T5883] ret_from_fork_asm+0x1a/0x30 [ 188.306110][ T5883] [ 188.309307][ T5883] Kernel Offset: disabled [ 188.313627][ T5883] Rebooting in 86400 seconds..