last executing test programs: 1m9.853292791s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 59.606585172s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 48.958330932s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 31.656784034s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 19.653081987s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 9.351674584s ago: executing program 1 (id=1791): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a2bed3", 0x46, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x14, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x2000009}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x2000, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x24008010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ef0e4d0900000000000071106a1d000000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 3.173828895s ago: executing program 4 (id=3469): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x24}}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="d26b98d19dd8", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x56) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x8a8, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x8a8, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) socket$inet6(0xa, 0x3, 0xff) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000080) 2.870631818s ago: executing program 4 (id=3471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0xb, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) recvmsg$can_raw(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001800)=""/162, 0xa2}, {&(0x7f00000018c0)=""/76, 0x4c}, {&(0x7f0000001940)=""/61, 0x3d}], 0x3, &(0x7f00000019c0)=""/100, 0x64}, 0x21) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x37) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x57}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x100, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x400}, @NFULA_CFG_MODE={0xa, 0x2, {0x8000, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0xce) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400010000000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200002100000000000000000000000000011400060000000000ff7f0000000000"], 0x40}}, 0x0) writev(r3, &(0x7f0000001780)=[{&(0x7f0000000500)="93258b0d59da53bd1247918904502c04ae06d41a4d7e6d01d5fed88e6cc6015ed8998d43b42f809f56474932ecfccbeb4cda2b340a905b16b14fb4e92504698083a8383a441fc8c6f96a7a00fdcba15cc79cf0b8b230803f4899a2ca4c12ae3303878daa91daaf4fe9d3", 0x6a}, {&(0x7f0000000580)="991077f157897ede4c257a7684b7d8e316b77a62332cee27b97aae7e40f5867c6d2e87ae2772456b7d9001f4c7bf3ab590de029d4530c2cb958059882070e6decb2816b7e500005f05f4128ee6ddc31283b642dba5a97ea50a4bd308899f176fc28a63209c8f4ad8f7700ed012e989587c5becc83af8", 0x76}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="f7104a3fc24f2658340fab15a01570fc4c0014b3a93c05f2f7201b1a0f4ddd4349e33db906d62c2fe69df579f9b88f8798360ef451768335f51223db28b85f6499ff093355ed22201ab30e8d92f15bd9effd859b658b7b5d303e16b3353f9f53a219c5bbfcfe538544c711c6f515fbf6a622921bc3617e9a19739aeb3278f5d9cbf5ec0b60ff8aa266a2", 0x8a}, {&(0x7f00000016c0)="1de78b70c20e2f789fe7fb402a5a671f331f6036298b8e9b233863a0a2dc1886160f3d9f76cc97ea4b43ab5910da069e5c4ec48e31f7439519a8c73ed328889aad0e600ef521e81a31a53585e28d63cff72a900c0a3f6bba2b96a8e8d4981ca25e2cd3a648c87a91d5c29a98df366ec4f450f94fcb2ba7d0fdf2d8939c4e38dd232902a23902c5bfc8f1e8f001d4725ba53de894fbe3d54665acf21f72fde1c949900dfcf0dabb8e9a", 0xa9}], 0x5) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x34, r12, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x40, 0x4}, {0xc, 0x3}, {0x5}, {0x1, 0x4}, {0x81, 0x5}, {0x8, 0x4}], "7ecbad144922f925"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$TUNSETOFFLOAD(r9, 0x40047451, 0x40b942b37d0000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x5, 0x4) 2.423577431s ago: executing program 3 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001200010000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000300000008001d00000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0xb, {}, {}, {0x3}, 0x1, @can={{0x2, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "f662e9cb3103576f"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x890) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x7a, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288ca6d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff06, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="6993c975b60e8d3f781646bc3bf993d16efa918bb141b7e5ce3027659a96a9f999977945848e7315736f0fcaf25be382f67cb41191bdbc8100538b9fa2c6b9b4b854b316ac638da45fe044fc22cd35ec10e8b0edc6fda7297de2713dd980dbf12f511d9c4bedb1aa655c4bb3f3e586b709a2c6bc72d18eea6dc74514dc5931719cce07f1c3ff9be44c599329e18937e427242776dd285806f91e08c1f2a1bb65622b77a2423a205c8f2d5ec6b6f975c7c8d4296bf74a8f4cf76009833e86b0de087501e23578c0b355337e40d5a1cb70e8b8143973652c82dbee1d94c30ba7b5ba63ef2e15"], 0x48}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x7, 0x902, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "cccedc457fbf4b1c"}}, 0x48}}, 0xc000) 1.909893894s ago: executing program 2 (id=3476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000010000000000000000000000850000001700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b904000000000000009b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.847979864s ago: executing program 3 (id=3477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=@newtaction={0x16d8, 0x30, 0x9, 0x0, 0x0, {}, [{0x16c4, 0x1, [@m_ct={0xa4, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x61, 0x6, "c14cccd06357f6fd1e484e7d5610d9b6a183524c9aed6681b20229f5e76a64e21a64b4ea609e9508935d76cd560cd282e69649ffec8309ed589cb9a89d1ff4622d0a2d83215b6bdae9f32d2a9fef0bd57a183152d060e354c52ad2b688"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xe8, 0xc, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x61}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x6}}]}, {0xac, 0x6, "febb39c98556ff7174904f49f276c963c55bbbb55ea84ac341f47b4ab4e960fa86c25052b0e48faf1b1308824dcce708e3b9308e36279985b547954c6d2233b66cf2a4902e9830fbcf271c8805f25624ec0de0505dd52713fd031c1fbe2cfb3c5e7f63bb8a52ecd8be91ece6f9aa79e210fb7bb46dbc2a77118552100ecf12e71fa2d0250448aa2178860a09d2c4b10c3d38c93314ad9b4b4e9557538d3a3098e066975e388ee09b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x294, 0x12, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb6, 0x6, {0x2797, 'security\x00', 0x0, 0x5, "aab622096854ba951bd1a166a44e7be2e18652e775f12783b9a29985ef6c01f6a4af9b6e79b6ec2f743988cf160c836b57c091cd6f6e82a2da414b5971c7408cb6ecfa4662b8ed9d4fee676626b29ea3c2a917feeb9dfb0b94ca1d1196117df0dba1820754f72a764cbaf3ea234d2d5b2abb7ff9ea95e1900b05cd9edf1094263a48265a5099216916005be2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xdf, 0x6, "ad6b8fc649ae9d781af3bd33174c6f5e6b5ae40e7e71892077d707f93527111b7efad5231ce8b6a1c8c1818207a2831ed7c4739e6d7277a5914f41d6b3a85a3184f6c9af3862d868f620deeaacf006c3e774dac9380e5b45a458eeca868b0b989e0485bfeb6a225cdedb2bcb6e5bdfa5f06a48821c41f44f08f1237622291610c1308a53be8d7f09e9bd9855e3218a1a58b0fbc2ff58406dd24297146b8b308586caf99e62596c3dc8d84b6097d4ef4c1612579de9a03fb0804fa6d8abd5a6edfc7475354acbf0058c8fef31c078b6ea643a62d2e7ee511fe31412"}, {0xc, 0x7, {0x1, 0x7c47cdb7e649412}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x106c, 0x1a, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5c4, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x0, 0x0, 0x7, 0xc0}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2320, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x106f, 0x4}}]}, {0x1004, 0x6, "104b69f6e9a42c0bcecda124199cf3bfaf69a34a8089b815fd124233567548e45eb3e28dd7ad23c005b6581a2ae1d3779013f64d12836cfbbc21221bfc05c3b8454c563b838abb90c944cd5edac880965b2944029537ba6ce2f8d7240c3b5efd572fbd7765b030c6f3506f36ddb9850ac7b0ed5b5471962c31d67ff83ea987c1d4f377ba23fd5a0379f70f54d588a2ae2f712183e73a23c46d68724212f26fd193843824d0ce2ce9d879e0d6f383624377f232b35fc42c96e6fe4ddb0d534236cb9077555e2de4a3072c1e8a7f6f2754fde249ac9212392fe5fdefbf3ba69cdb571c5a081c3661eeba9128cbe149428d4c74c028e6746ff1170b3b2977d5166d2b5f5ad357d315e448a84e99d185d909d618eded14c1699fa93c4018c9aaeb34966311fd7c047f81c435751b9c4c9527cf0ba4e851bf21fd8a3dc5b360ce39c242169e01e6b187f1bba88c4478dbe1ee83b3a836e174f50312e585c2aee2b9a30c7e525b13576844c0a185572ef6f9f6533a514892bd612c88f2a9afa4affb1d1e323c1ee0da3c90ca9330eb350681d2226bc76607390fb2a163984e0555d74886da47c771e4ae99fab73362479e825e0354fdee0e35088fbbbf6732f5d798758d109e8d4ba05808094972d9513916b9bdaa12f2a80eafb23c0f47b4420a516c19570f04d56deabf111d0b14902d298ded40a402dbb674b8647a85504b6a5fb1ffec48370e55641ce5345abe99b6efbd9a29dd2c06ebd71ac33e88e85cb08664be6ccd2bbc802e8566d5e4e3284fa2d2d4a5a59af3daf8c8fcf29ea4696c65f39b8793adfd5ec8aec7299422f2c60163f50452f31cf4d513579ed7485b002ff139eda991db0d7fc4d0b3099e5ea1a2690db0c8d3e4cb6c655703d5dbcc77da58aa35c828f5b57e67e2e00dd39178278b3015804fa14dd6f9b1edaf2cf0f8bfc71f78a74bf1c2c9d8f66fc1721685eb3371cbdcddff2b509191d1dc409ea69cd98ec0cc629f3ffbfbdf2bf644eb7be15f267b6cf3fee2cc8ade8941b082d8fbebad356435ef021229a94b641c3ce4b880de3bdbf63ff9325727835f1e0600ffbc12256475d007a04c31455178d4aeadd6a4319fa7fb3bec4a1b33106712dcedbb4e127e3c59eb8ede47e2c90857840583460718603df5af148356941f8ac52bf9ef2eaec2d054c8b25a24bd7fedacf9b1685caf79226c4fe0ba02520bf708332dc24fd7aac632d81dbba537a9ce3509060926dabd5345ad290011ccd3494ad638cc1ead44d7644d319bcc1e7128629ea9634e1e19e717b308a4a8946ea2cb3a69a2cf176600293e91a13d312708d2e7437ac7af89c0e7c5dbbd7b316f55d029f7b1c426ef346770113217290a36979df013df085e20016c84ee88db9af4e698009263994cce3b72971d0f7477b704ab1d57759b6c6ffeb4b38c429a6971142d3f5a25034cdaee922c0f5be5a7bd885e0211101473aad9965c0c997747506d233be743beeb475343f6948e0d62a02995aa656104264a089dcbee8f960b12a8f01fdb550ceece28b4c1318e6a254db352183a93318978450d2d2ddf7509e94c5ef89eb093becf8689351414c1ecc2e7c6ce569f7cde959e4d9c5c448e945a5499c872d752963e82cb13fee5f4f522eb1daadd71b8a01ecf2d4923397087dd8e563931f6fc1b77afc67b3239ca8634a32e306df5c3345ad63c962f79868d2737c3203024598a973fab968fc7198f10f73a36a77a970bbba0cdc71407f3f68111ef4725db08fd149f684f64fc5c6c131c72c91512b23b99a4342384cd3b657077cccb95fec08d2e38d7aa224db5b0ef5c489e0a370202782b7f23feeb9b844e5961edc3dd72b4b3a5d5768702de62c231cc4ab65336bdce14dd227fd63f903b9b1442dfca96f3295c31471753abd3f0ca29ce5ab74c4ce80080dc4491ac70254d70653e9f08019119923f727f584ab79723032a3e578ef9bbd1a468257bd4c8afa214e0d4dbd5c9247d947e254ce5185fd8e0cf8b38908cee964e6993057eba4ee50cd88b3488f5e782876ee1b95d34d740be95e1701e87c78f807e8544c28e68d0f080459f896633f3f83b672254c2313dcd470ae1adcf4468aba75c9a62dae72f075455be6f6f08d2699332791b581fba539643f5ef15c7a80df7f96aff384e8514982c79b264d835d561b6f5433757bb469244888074f414952654bc0b811854fa633027376ae93db13a27f5d11beb4975cccb3b93b51f29c3ff639dd2495a315fad50a004f840abfb31f34df794e6b86bb77b3605f2dd0fbe89b1bd1de71d0983f45e03273a7a2c8f372a3969f9844f81755312b2db27759ed8e9c6a8b7dbd20a46e9299fe23cb1653376871cfd5e5a0876e4fb25dd66f06b2314315f8e087eb336dc7a06b841afc8ddd4b852310d671f9f0915accd0214b067e3eaa2aa92cfde6f29a03fa510fca495407106a954372790fc233528b3cf503dc9fb7ca85bf9b0a599a1202f9a5866909c51bd4ef7910d790df6dd3f9c51f5a204ba56a9ae59ec4a925f6d9fdb43da46c1809ea3667ef3095c60d388a16e654fe7431c7bfb78eb6aeccf1fc01f8aa45c3fe4cd02bb4ffc74fb3ce2d737b051b92d1d76e20b326f51d4c94f331e6e8ebf5bd0b0eebc244671608c3aa82c6430c86d58be6e60b14e6a7808643eca88320b3f62ac7a30bc14bbf6607c53b99e2b7bd3ae87c35a71135fe807c658b09efda0b74c89da8425895e7ca6f8b3c05f313c7206c2b811a039d20cd824820fae07bfcfe7212ab7d7d86a82286206381df4598944dea0a272a6bea70ba6c55f42862fbf2ea23acd96fa1dc6b899fa77b565ca11143ab64c6917fc6cd1ed59a5484e768aaf13db803cc93cdd292e0fc6e8c2fa951a0b0b34036a99ad95ecc4c224bfd75c62ee2eea6defcebab1e7342f5bc1608b840e077457ff38a9e6c7077c9aaacc713b064eb9c8bff64c999e6329cb3200f7a2beb432c3a452336aabeaaaa04484324976969d5fc9b346c4df17db2c65882a5b08fe74d1bd73ea12f012de02c5e6beb18f1529a74493f2f97d59525fae86c84ae3c5cf2a2045e22ecb65906bd95270a4ca720dd03ddf9a7bbde581749d603e8996e40be3d2dafe819f385fbc902489699ba9707c58b50912ca0292ce37b87cedcf3f343bcb376eaa63dd33c8551f92f33d62ef24e7f9d15ae6ce3bfe1b70f667e57d0cd8dce347669bd6acdce8db522d11981054dffcf792af544a116c62a7e93d1c5a3472a5b6e4e26fbf8ec596b2e84c197253a274ae5963efd9728ba3c2fe0c81fec8dc186ef956f731d3f101d2922e633e9be8fb5cde0e7bd7cdd774c7eee36247696e59986dc839bc905cce51b5f1b546403cb14811aa483c9f43493e89f325ef8aa95b12b463ba5ab5722708c8fe6f7d67da19d3be9b92814352ac2ada2d8b8d1512306211b99ce4f6bcee6a964d9f15cb9f1b81c4050216e2250770e787d5a57d2112a8eaaedb541034f930ee785208525532663829cc9d9085fe7d47d8fc5bbfe7d1bd6d51948bc4da771a296700fb48f6c297ebfd1d7c5f4328cd19b798d30283cf0198b2976c389fd2bd7f4169a29637598a3f1a5b35de195ae115e523394a27ecd41c14bf0251d03c4ac913f5f3339ff5ce19eb1b8db3e84fda9188ee8b18124a7f551fc33160a24ad16439da18f8e6a3d108f4cdad969e02150c487acd569754cd4938b3c325436224dbca649e10a54c83c67c8e217e8af2e95dc025b9b0d9e94734d66c6dfc77a0ab2db7dd93df58640df9e893161c16feac17d072c77ca084ff9ac6182c2b10c4e83028e6544d0b5ec90175e36716f7b491294b7f62b91ed3862dafafa35b665751e77e25356e3068d788028a07ba985e5438eded23c5c53f45574b08cf637643af0d5d02a39f52d9ca3ac7a3f43a4ba2c1feef372b1b8dd8f063518e8855b2b4cd988cc46811e21e4bbe7e340c0a98dd5c53634d4d757036da29787a18c602a2c47cbe56a092ff30ff9f1ea68d3a094c2a1a084730bf6a0da031f71fe3e2d27b4318f378127212e4a566235bc24cd199b2b6e145b2f5db2d0a6cdea1aa9572f03027a559cfad528fe77c9e82c53087eb4b62f7249811b65c3065353b1de7143dda357633795c248843ab24afdff89f399fb8afb5a66ff7c75d64f11966071de890da7b0e0daf78fd620e159de504a0d7b2cc937050c2a6a4cb923a3173c4e5486983df91c09e6b67e43076eb4fe7a4a5e0440d6eb0deca431c3a425c407ae2a02752a86b55fedf99fee1e9cc4b2110a11edc98ea17b5cfb5eb84d7ab9ab028b6390f9d0403ca370f9df6666771ae5d229c556e314189248b08fa99d2444003c9cbd5a66c9fa2a8d76f04f5150a9dc480ea9c781a158763bd9e5034a96b67b12475921a0490278102f99d4e737e270aa094fab1c77b9642137c57fe9094611e8e18f32084dce94e656c24c7147fc4f05306164adfa4f69a27abfb3ca0d3956dd2b55f57ea57370684761c80c2ef0537efce6324024c8ca6a4de636f550f8143709dd892c7ad8c12c8cf52329fb0050933f5d9544864a50445479bc2d9c22966c4b37d303180f60e2a6a48205caffdb6cea62aa898419988b39bbb9de3e7c6874fd29821a04d0942d73d05cd587956788eb8f7c46fe7f582df33c4fa15f85ce5f8d247c3ec38231499b660673fc29265badf848f00be219ebd3d4ca609c3d705ae0a1a7aa39f72f2fb130a84a18ddd9f5702b9c2c93265e2ee2eba0cc47881e0748d479e1cb968602df865f428e3b70a732265c945201eff72654a2cd7c930dcd83921bf1ad95db48ed1fb8c0a9a2d3e7be27c416df94d1f298ee49ee0db8266b5d0c46cea71a32799c7c9a2cadbdde297ecbea788a9c245a6b66d3b64a5c2807a08c1dc37745f704b0a02be31a2e01af5277f1d45bc89ba1c35aef4dd3522f63a5a9b3324f6b734ebc2e51e87094915b227aaa2c84236523f8fa0833e44c43a91041d5e22f46522cb5ebf6a7cdc87002607814ec80f44d0a03c2f1e3460973f09683306d11f60f2e5ed4961e01a993498c465b713afdfc7e02bf092db03a7dbce3dbf164f9f298882eeb338f6f1677ce6f217892b8269b60e365567c41b6f7ec6a9aa2418c811ffe0d0178758e58822ff512632b6d2891d4bb2d0108fd90c6d4383c069cc0f572d9d69cbb29d852653782da75200a4fde8bc886bced14a9df60a5088e9e010a2248e2e84faa97da002515249df8271d461c5e9fb730e328d01582906c238af2bc43e4405e1ba8cb0621575b98958cdb772eda309925392c06f33e94803fa2e0bee2641fcc274a12576fc50a57ad71b90dfdfe7ff86f21c771ccb127e95fa0049bbc95b106372447bb309f5291faaae9b09002fce157afd1ff89dfe9a49fb54220d9ff36ececf3a6aca34e3bd7b6b7723a63a81af22230a805ee716f4963709bd0932284c4d42d8b97681f8e65757e927dd243e8b971fbd79b64f7e14b7d634c441f31304aee11a94fe36be6d190c0d4bf033a5ca2d80b5cb80f44614136bdae623d4ac1a0fd2213ec64dc812c027edae156be90fd575758bd45e93a84bf17396f9fbc70d0d5baeeaf4f8c312521b46f29053493b48722a5e159099f06598ebd2015a2bdd2356c53c0123bdf24be356af9e298971dcaaeb68889c3634d362b6814544e92f132d80d03c51b02ab6fd474e357d0be0dd9ef608db46c1bd8feb7b4229a6a98ac961cffe0e0889b9063ebc46f0713797750834c5f6bccbd160940a1fe71402eeffb75b18141f1d1cdf06850e3f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x50, 0x1a, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0x12, 0x6, "785a9e6669c53f386c0030dd7c06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1e4, 0x1e, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1000, 0x0, 0xfff, 0x5}, @loopback, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x10000000, 0x81, 0x9}, @empty, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf, 0x5, 0x1, 0x5}, @remote, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x0, 0x1d68, 0x4}, @loopback, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x4, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0xffffffffffffffff, 0xa7, 0x101}, @remote, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2a7, 0x7623, 0x2, 0x200, 0x3}, @broadcast, @multicast2, 0xffffffff, 0x1}}]}, {0xa3, 0x6, "2bb551b830bf279e4a79b4b8548af21ef5382ad3c13733f1c6745e38eff51429592f486608aa0ea753c23d694133119f49b7e1af90c1f6ba31c2c162b41cfc271e1e5f5d46f141611caf52f504aeedb15a35693f2ca9358131076052b29174ff0a656f04149b5cf01f3e52940276e81204520cd6cedc0f1109b17e1ea7bf78bb37214e40286bf14037f5f3a41c695e98055754626c7b5a51c4cc98d4fcfc62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x16d8}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x0, 0x0, 0x40, 0x500, 0x0, 0x80010200}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xa, 0x0, &(0x7f0000000880)="038f6f5f8fb4f3588ebb", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000001cc0)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x5, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r10, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) (async) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r12}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r15, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r15, &(0x7f0000000040)=ANY=[], 0x6) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0x0, 0xc, 0x28}, 0xc) (async) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x50}}, 0x0) (async) bind$inet(r11, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) 1.763263879s ago: executing program 4 (id=3478): r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x80) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003000000000000000000000000000000000000000000000000000000000000000000240003"], 0x51c}}, 0x0) r5 = socket(0x2, 0x3, 0x9) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0xa, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000000400000000000000000000001800000000000000290000000400000000e4"], 0x30}}], 0x1, 0x0) 1.718779315s ago: executing program 0 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070000000000000000003b00020000000000000016d1f77a1ef0795660526f80e62072ba56517f2090d203ee10ceb14f7c110632c47c776699b86a70", @ANYRES32=r1, @ANYBLOB="04008e0025003300b0100c00080211000001080211000000cdf7ccc4dc9ff8c5000003001b001001c80000000600cd0010000000"], 0x50}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x47, 0xe, 0x2, 0x535, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x3, 0xf2, &(0x7f0000000380)=""/242, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0xfffffff7, 0xd}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x4, 0x5, 0xd, 0x2}, {0x0, 0x3, 0xa, 0xc}, {0x2, 0x1, 0xc, 0x5}, {0x1, 0x5, 0x3, 0x2}], 0x10, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/16, &(0x7f0000000240)=0x10) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) 1.670055566s ago: executing program 2 (id=3480): r0 = epoll_create(0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b00)={0x1, 0x100, @status={[0x98, 0x3f1, 0xb, 0x200, 0x10000, 0xfffffffffffff7dc]}, [0xff, 0xf10, 0x6, 0xfffffffffffffffd, 0x4, 0x7fffffff, 0x70aeb43d, 0x7fffffffffffffff, 0x3, 0x40, 0x200, 0x2, 0x1, 0x5, 0x25, 0x4, 0x3, 0xee3, 0x8, 0x8000000000000000, 0xe5, 0x1, 0x8, 0x8, 0x100000000, 0x92e, 0x4, 0x81, 0xad3, 0x7, 0x1, 0x97, 0x7, 0xfffffffffffffffc, 0x8, 0x3, 0x5, 0x3, 0xb5d0, 0x1, 0x4, 0x7, 0x7, 0x3, 0x6ec, 0xed, 0xffffffff00000001, 0xffff, 0x7, 0x5, 0x6, 0x8, 0x7, 0x8, 0xf, 0x6, 0x8415, 0xa, 0x2, 0x7ff, 0x3, 0x3, 0x7, 0xffffffffffffffff]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="9ca20482a3a6e549b2d3f09c9ea345f4f98d66466946ac", 0x17}, {&(0x7f00000002c0)="8724e1ea98c8c1c22eef2d69e4c945c97ae6ca83d3c7112117e256226a7dbb31af1eb627914dbfe2a95d641a9c8db3d9fdd0a377dcc86c8cdea04573949d8976b5c8b11dae72b660c4c28b0a101f", 0x4e}, {&(0x7f0000000380)="f775cf8b00b542ed0955ddb7935c96d13ae711", 0x13}], 0x3}], 0x1, 0x20040090) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.535124745s ago: executing program 0 (id=3481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x400}}, {0x4}}]}]}, 0x68}}, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000003c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100020000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004038004000500009266c2aeffa32cbb316950e35cb0b7b20ec1375e308ff9092af5a83d3acd9df3123abe61e92596f73538c1ba0881a5c55df6c96c45072da0a517b210b6c161ae86b28977e67158798e0551d3ecc12e5690f1f15def32e97eff6fefb0880ba8bf2d0a10b5a85f916405a8ac4bad84208dd30753eaa53f70bc253a6974b1e56a918d1bf97f27c7c71b9313d048"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r7}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00.'], 0x48) 1.354297589s ago: executing program 2 (id=3482): r0 = socket(0x10, 0x3, 0x1ea) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, @in=@broadcast}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000a060500dc709b02fae033aa0000000000000000031e71d3ec0000000900020073797a3100000000980d000000000000"], 0x2c}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/47, 0x2f}}], 0x2, 0x60010020, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080006000000000013ad23aac3b802d040dddd70ca891cff"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r8, 0x12, 0x4, 0x0, 0xe0d965847b0000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000000000000008000a330273d300"], 0x24}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.321912192s ago: executing program 3 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x308, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdf8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x564}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x777}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xc1b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5cbf7b6f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15f712f7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6809}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @private0, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @empty, 0x60fa}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9038}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x824}, 0x880) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@remote, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x3, 0x400, 0x0, 0x10200}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r8, 0x4, 0x0, 0x0, @void, @value}, 0x10) (async) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r9}, 0x20) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, 0x0, 0x4001) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r12, 0x0, 0x19, 0x0, &(0x7f0000000280)="61df712bc884eef0e1c7ad0ecaf13c0653a7a9a26e9b722780", 0x0, 0xf5b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r11, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000010", @ANYBLOB="838a6a4f2d85287eccd9e31f580614ce8402850bde5901ed8dc255f17eab2c32eadd3ee92f19b8e9ab4aa1b16a722a3240186f9787e792f1c169b9ac498e963ebae920ba29dd28179e290fea84e11901c3f1b076daba8acb3db209af88336f480732b281e31d5287d05cecde9294d97add19bb4971e3777c466cb19a782f8088912b524402a2190aa77ea3fa76dfc10bb95db7b5494006a5d9bd90e85186df9b0d4c81097cd9e11b1a0c88acd6119b06820b8715a2a7d7692ddeed8dd59524716fe6d1e445b9231e2b97"], 0x18}}, 0x0) 1.275239004s ago: executing program 4 (id=3484): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x4, 0x3}, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000050601020000000000000000010000080900030073797a300000000005000100070000000900020073797a30000000005f7ad8641928bf6eab1852f0efedeba0f95ec1583db78da950b915ecf488a11ca26fe2af51e00959b6398a32e3"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) socket(0x2, 0x80805, 0x0) r12 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c00018045000100696d6d656469617465000000280002801c00028018000280096f00020073797a32000089a907120180fffffffc08000140000000000900010073797a30000000000900020073797a32000000001454000011000100"/148], 0x94}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r14, 0x4, 0x583}, &(0x7f0000000200)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r0}) 1.239831404s ago: executing program 0 (id=3485): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f00000001c0)="701b325d9d250a3d3de7cc8dcb374d24600ee9f072daaddf5185349e531fec2573e5c71a5d1ab6ecc718b57aed7ca0f9919f62c83a17d3fbd43cb32fc416000b499d9ca775db4e02a0efbff985b013aac8f11d1e5868c42be83774bfa606d2cab459b455bd32dfd1c0a8577ecaec2a500b02922089cf4abe333e82a23c0e1c8230cd0ec5", 0x84}, {&(0x7f00000000c0)="7943387b8b4b5d5fedb1f9103f6888c0df33d9891c9e9e6f8a99b37aa2b8780a076b187bd619bf7342c6002db7677f0cbd39c427ecd1a66d74aa4f219000c4b910c5c5bf63eb4bf09b06dc43898f50fba0f679ec2595391435eaf680e210b90b9dd458fd667ab911946797b7bbe3fd909f1d3e5d0beaccbfeaf9010e78f06073831e7878d8", 0x85}], 0x3, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.067716276s ago: executing program 3 (id=3486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x228, 0xffffffff, 0x318, 0xf0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f00000000c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xff, 0x80000080, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xff0000ff], 'dvmrp1\x00', 'veth1\x00', {0xff}, {0x7f}, 0x6c, 0x10, 0xa938214ada41425c, 0x44}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x67, @gre_key=0x68d}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x6, 0x0, [0x7ff, 0x0, 0xfffd, 0x1, 0x6, 0x6, 0x7f, 0x9, 0xb, 0x331, 0x2, 0x400, 0x8, 0x2, 0x33, 0x6], 0x7}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1d, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@local, @gre_key=0x9cc, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@private0, @gre_key=0x2, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x5], 0x80000000, 0x2, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1f, @ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @icmp_id=0x64, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 983.329234ms ago: executing program 0 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000003000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000004000008500000005000000bc0910000000000035090100000900f99400000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff000000002f86000000000000070800a9f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000f91de8e624e8fafbf421391da6b9307ecaf28843ad03cfe223e677ee1d064d2bf07f2585d12b297fafa8d984d278b735bba4ccd4de7e5908", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000003f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x30, r1, 0xf8635000) close(r1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001"], 0x8c}}, 0x0) 803.815252ms ago: executing program 3 (id=3488): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0x308, 0xa0, 0x308, 0xa0, 0x308, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x30, 0x375, @remote, 0x4e20}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x7, 0x1, 0x3], 0x0, 0x7}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffff00, 0xffffff00, 'veth1_virt_wifi\x00', 'veth0\x00', {}, {0xff}, 0x5c, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x3, 0x2, 0x2, 0x3], 0x3}, {0x1, [0x1, 0x6, 0x1, 0x6, 0x4, 0x6], 0x1, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x86}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xffffffff, 'tunl0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x5}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x1}, {0x4, 0x1, 0x4}, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xa) 744.507362ms ago: executing program 0 (id=3489): recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {0x0}, {&(0x7f0000000cc0)=""/2, 0x2}], 0x3}, 0xfff7fffe}], 0x1, 0x40010002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad890000000000180000000000000000000000000000001b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8947, &(0x7f0000000140)={'bond0\x00'}) r2 = socket$inet6(0xa, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 599.1143ms ago: executing program 3 (id=3490): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000150029002abd7000fcdbdf250a010100d327e6d5e3b2e199425fb594a6ed68d4bef9d12444d905c67a04ccdd424143c81126e56083300de8693af8499cff9c91512238ceac", @ANYRES32=0x0, @ANYBLOB="140006000800000003000000f8ffffff0200000008000900010000000800080000030000080008001201000014000200fc0200000000000000000000000000010800090000000000"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe25, 0x24, 0x3, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xd, 0x4}, {0x0, 0x9}]}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000300)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a600020000000000050002000000000085000000000000000500feff000000009500000000200000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x450}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0xc001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8665}}, 0x16df, 0x1}, 0x90) recvmmsg(r5, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000180001000000000000000000002000000003000900000000060015000400000005001b0011000000"], 0x2c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x26048851, &(0x7f0000001380)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) 598.688468ms ago: executing program 2 (id=3491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r3, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040c01}, 0x8044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x5}, 0x10, 0xffffffffffffffff, r1, 0xa, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x4, 0xc}, {0x1, 0x4, 0x9, 0x4}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x5, 0x2, 0x9}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x3, 0x5, 0xb}, {0x800003, 0x1, 0x4, 0xb}, {0x4, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x4, 0xe, 0x2}], 0x10, 0x9482, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r4, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) 511.833342ms ago: executing program 4 (id=3492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x8848}, @void, @ipv4=@tipc={{0x15, 0x4, 0x1, 0x7, 0x108, 0x66, 0x0, 0x5, 0x6, 0x0, @local, @remote, {[@rr={0x7, 0x7, 0xb8, [@remote]}, @ssrr={0x89, 0xb, 0x8c, [@dev={0xac, 0x14, 0x14, 0x43}, @empty]}, @timestamp_addr={0x44, 0x24, 0x7, 0x1, 0x1, [{@private=0xa010101, 0x9}, {@multicast2, 0x9}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x2, 0x4e24, 0x4e22, 0x4, 0x4, 0x0, 0x0, 0x1}, [{0x6, 0xfffffffe, 0x5, 0x4, 0x2, 0x1, 0x1, 0x80}, {0xfff, 0xeb85, 0x0, 0x81, 0x5, 0x10000, 0x8, 0x6}, {0x4, 0x9, 0x1, 0x9, 0x0, 0x4, 0x2, 0x84}, {0xc714, 0x2, 0x9, 0xfffffffb, 0x10, 0x8, 0xb, 0x9bcd}, {0x2, 0xaeb, 0x3, 0x4, 0x2, 0xc, 0x9, 0xb}]}}}, 0x10c) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) 465.8053ms ago: executing program 0 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f40000000800070000"], 0x60}}, 0x0) shutdown(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) recvmmsg(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x4, 0x10001}, {0x40, 0x0, 0x0, 0x3}]}, 0x10) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x410}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080016800400018008001b0004000000"], 0x30}}, 0x4004014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10}, 0xc) 419.074409ms ago: executing program 2 (id=3494): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0xffffffff}], 0x1, 0x10022, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000926ddeb1eed04a6762726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000800000004000000ff00000000000000819f4d3bf02f31aa099f2895269f6edf1e7c72aadde13a71b7ec5ffc0b3ea0165eed3789fbae1af91e9c7975b8565c7d83851accef46c7c3a31f574ecaadb7854e6c4d3865aad7982077a984c04eb2a8784d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$FIOCLEX(r5, 0x5451) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006140000000000104a5754814a3ac7f5dfe5ee5ebd28910da91a217155f2fc110a3788e30a920ff59acd909c9b2d07c365d5aeee23c4c9b469d16f9fd810fc2aac060432e5190dd7cda131676ac0ce4603891bcb64e18efc8124adc16d27329828c27cb54829bf4feaa791b098edda0730381f43e0d1ea2639c4f193d3d4bd47e00dd99516590f72b762221d8bd242c8426eee27ede138"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000180)='macvlan1\x00') writev(r4, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500040000000800000008000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000f7ffffff000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000100000085000000590000001863000001000000000000000700000018000000030000000000000010000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffeff850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000000038d4d75cc5677b02b6319902c4209e0ce34c4b8d1de64b410d47466f09e10ebfbdf70805bab27d5bda30ea73925394275663f83c74709e957f42ef7acb4087148fe53b08053f650d0cb8faf805425b470f45e2ad83ce732f71977bf8ac7aaa7ff0ffb6fdf0b43703e3f417b60c28152df037931b"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xbd, &(0x7f0000000900)=""/189, 0x41100, 0x10, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700), &(0x7f00000009c0)=[{0x3, 0x2, 0xe, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x5, 0x3, 0xf, 0x6}, {0x5, 0x1, 0xb, 0x1}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 135.208726ms ago: executing program 4 (id=3495): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0xffffffff}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0, 0x0, 0x0, 0x0, 0x48085}, 0x20000010) close(r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES32], 0x34}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x31}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004810) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r10 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 0s ago: executing program 2 (id=3496): socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d8a40c60c182"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="94ee6a6e9c27"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8844}, 0x20000014) socket$inet6_sctp(0xa, 0x907e2a8d2e2ebbc4, 0x84) kernel console output (not intermixed with test programs): g CT accounting to be enabled [ 346.927000][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 346.985188][T15921] syzkaller1: entered promiscuous mode [ 346.990872][T15921] syzkaller1: entered allmulticast mode [ 347.127021][T15935] bridge8: entered allmulticast mode [ 347.168161][T15658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.190037][T15658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.214912][T15939] netlink: 'syz.0.2745': attribute type 12 has an invalid length. [ 347.232589][T15940] netlink: 'syz.0.2745': attribute type 12 has an invalid length. [ 347.264246][T15658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.296273][T15658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.420404][T15945] vcan0 speed is unknown, defaulting to 1000 [ 347.445208][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 347.495122][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.537308][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.584988][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.592132][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.617365][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.624534][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.658131][T15955] netlink: 'syz.2.2750': attribute type 10 has an invalid length. [ 347.725830][T15955] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.755349][T15955] bond0: (slave team0): Enslaving as an active interface with an up link [ 347.782267][T15963] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 347.932590][T15953] vcan0 speed is unknown, defaulting to 1000 [ 348.212291][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.335230][T15658] veth0_vlan: entered promiscuous mode [ 348.367872][T15658] veth1_vlan: entered promiscuous mode [ 348.381398][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 348.531325][T15988] bridge9: entered allmulticast mode [ 348.541190][T15658] veth0_macvtap: entered promiscuous mode [ 348.562836][T15658] veth1_macvtap: entered promiscuous mode [ 348.610891][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.622803][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.640307][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.791761][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.809771][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.834722][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.873145][T15658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.884006][T15658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.892825][T15658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.901730][T15658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.139737][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.158266][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.227342][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.256972][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.663989][T16028] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 349.686533][T16031] bridge10: entered allmulticast mode [ 349.873191][T16038] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2771'. [ 350.170220][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 350.384876][ T6391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.432139][T16068] bridge9: entered allmulticast mode [ 351.271967][ T6391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.463088][ T6391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.538589][ T6391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.683751][ T6391] bridge_slave_1: left allmulticast mode [ 351.692109][ T6391] bridge_slave_1: left promiscuous mode [ 351.710108][ T5854] Bluetooth: hci0: command tx timeout [ 351.713717][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.752852][ T6391] bridge_slave_0: left allmulticast mode [ 351.758771][ T6391] bridge_slave_0: left promiscuous mode [ 351.764896][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.973109][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2784'. [ 352.022591][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.043170][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.053969][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.074102][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.089073][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.099122][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.317805][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.331464][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.342743][ T6391] bond0 (unregistering): Released all slaves [ 352.381391][T16086] ipvlan1: entered promiscuous mode [ 352.388079][T16086] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 352.395864][T16086] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.518264][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 352.518537][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 352.694324][T16094] vcan0 speed is unknown, defaulting to 1000 [ 352.956198][T16115] vlan3: entered promiscuous mode [ 352.961268][T16115] vlan3: entered allmulticast mode [ 352.986085][T16115] xfrm0: entered allmulticast mode [ 352.991346][T16115] xfrm0: entered promiscuous mode [ 353.007721][T16115] team0: Port device vlan3 added [ 353.034957][T16123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2796'. [ 353.278094][T16140] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 353.287235][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 353.333644][T16138] lo speed is unknown, defaulting to 1000 [ 353.377783][ T6391] hsr_slave_0: left promiscuous mode [ 353.385866][ T6391] hsr_slave_1: left promiscuous mode [ 353.397181][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.405983][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.415063][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.423685][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.451386][ T6391] veth1_macvtap: left promiscuous mode [ 353.457198][ T6391] veth0_macvtap: left promiscuous mode [ 353.462797][ T6391] veth1_vlan: left promiscuous mode [ 353.468363][ T6391] veth0_vlan: left promiscuous mode [ 353.906397][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 353.955064][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 354.187434][ T54] Bluetooth: hci2: command tx timeout [ 354.370746][T16138] lo speed is unknown, defaulting to 1000 [ 354.392968][T16149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 354.404808][T16149] batman_adv: batadv0: Adding interface: ip6gretap1 [ 354.411420][T16149] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.437968][T16149] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 354.449353][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 354.458912][T16153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.466663][T16153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.476570][T16153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.484161][T16153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.491843][T16153] batman_adv: batadv0: Removing interface: ip6gretap1 [ 354.517045][T16153] bond0: (slave batadv0): Releasing backup interface [ 354.539812][T16156] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 354.543909][T16161] netlink: 'syz.4.2799': attribute type 4 has an invalid length. [ 354.565175][T16138] lo speed is unknown, defaulting to 1000 [ 354.634095][T16138] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 354.656035][T16167] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 354.685749][T16167] bond0: (slave batadv0): Releasing backup interface [ 354.698795][T16167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.708136][T16167] team0: Port device batadv0 added [ 354.715426][T16138] lo speed is unknown, defaulting to 1000 [ 354.759497][T16138] lo speed is unknown, defaulting to 1000 [ 354.804305][T16094] chnl_net:caif_netlink_parms(): no params data found [ 354.907178][T16138] lo speed is unknown, defaulting to 1000 [ 354.983072][T16138] lo speed is unknown, defaulting to 1000 [ 355.000584][T16138] lo speed is unknown, defaulting to 1000 [ 355.067341][ T5892] IPVS: starting estimator thread 0... [ 355.163722][T16189] IPVS: using max 23 ests per chain, 55200 per kthread [ 355.171184][T16193] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 355.184321][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.191457][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.227609][T16094] bridge_slave_0: entered allmulticast mode [ 355.237646][T16094] bridge_slave_0: entered promiscuous mode [ 355.260454][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.274750][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.282017][T16094] bridge_slave_1: entered allmulticast mode [ 355.311816][T16094] bridge_slave_1: entered promiscuous mode [ 355.329582][T16197] netlink: 'syz.2.2810': attribute type 12 has an invalid length. [ 355.419826][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.450184][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.483691][T16210] macsec0: entered promiscuous mode [ 355.489527][T16210] macsec0: left allmulticast mode [ 355.562061][T16209] veth1_macvtap: entered promiscuous mode [ 355.578013][T16209] macsec0: left promiscuous mode [ 355.650130][T16094] team0: Port device team_slave_0 added [ 355.671337][T16094] team0: Port device team_slave_1 added [ 355.754713][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.763132][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.794464][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.823203][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.836091][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.868549][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.992924][T16094] hsr_slave_0: entered promiscuous mode [ 355.999619][T16094] hsr_slave_1: entered promiscuous mode [ 356.029393][T16227] sctp: [Deprecated]: syz.0.2818 (pid 16227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.029393][T16227] Use struct sctp_sack_info instead [ 356.273651][ T54] Bluetooth: hci2: command tx timeout [ 356.515712][T16094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.527099][T16094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.536875][T16094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.553735][T16094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.756717][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.897118][T16252] team0: Device veth0_vlan failed to register rx_handler [ 356.987528][T16094] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.020802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.027969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.077512][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.084688][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.275076][T16094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.303697][T16094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.333635][T16281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.518979][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 357.784091][T16094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.792330][T16305] vcan0 speed is unknown, defaulting to 1000 [ 357.870555][T16094] veth0_vlan: entered promiscuous mode [ 357.890077][T16094] veth1_vlan: entered promiscuous mode [ 357.944145][T16094] veth0_macvtap: entered promiscuous mode [ 357.971054][T16094] veth1_macvtap: entered promiscuous mode [ 358.035542][T16094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.076155][T16094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.110622][T16094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.139078][T16094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.168244][T16094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.201231][T16094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.255330][T16305] lo speed is unknown, defaulting to 1000 [ 358.363209][ T54] Bluetooth: hci2: command tx timeout [ 358.380217][ T6390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.393216][ T6390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.432763][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 358.590242][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2850'. [ 358.659773][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.672101][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.759396][T16345] bridge11: entered allmulticast mode [ 358.817444][T16348] team0: Device wg2 is of different type [ 358.828883][T16347] team0: Device wg2 is of different type [ 359.072670][T16364] infiniband syz1: set active [ 359.104207][T16364] infiniband syz1: set active [ 359.121887][T16364] veth0_to_team: left allmulticast mode [ 359.129683][T16364] batadv_slave_0: left allmulticast mode [ 359.142501][T16364] veth0_vlan: left allmulticast mode [ 359.150849][T16364] tipc: Resetting bearer [ 359.161172][T16364] ip6gre1: left allmulticast mode [ 359.170826][T16364] gtp0: left allmulticast mode [ 359.178694][T16364] bridge4: left allmulticast mode [ 359.190410][T16364] geneve2: left allmulticast mode [ 359.197520][T16364] vxcan2: left allmulticast mode [ 359.203022][T16364] vxcan4: left allmulticast mode [ 359.227357][T16364] macvlan3: left allmulticast mode [ 359.232531][T16364] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 359.245706][T16364] xfrm3: left allmulticast mode [ 359.251570][T16364] bridge7: left allmulticast mode [ 359.256996][T16364] bridge9: left allmulticast mode [ 359.262177][T16364] bridge10: left allmulticast mode [ 359.267801][T16364] bridge11: left allmulticast mode [ 359.274949][ T5892] vcan0 speed is unknown, defaulting to 1000 [ 359.301345][ T5894] vcan0 speed is unknown, defaulting to 1000 [ 359.448571][ T5892] IPVS: starting estimator thread 0... [ 359.491911][T16384] veth0_vlan: left promiscuous mode [ 359.516645][T16384] veth0_vlan: entered promiscuous mode [ 359.553902][T16381] IPVS: using max 19 ests per chain, 45600 per kthread [ 359.563262][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2864'. [ 359.575436][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 359.735477][ T6390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.125163][ T6390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.655117][ T6390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.751206][ T6390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.832659][ T6390] bridge_slave_1: left allmulticast mode [ 360.838558][ T6390] bridge_slave_1: left promiscuous mode [ 360.844433][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.852835][ T6390] bridge_slave_0: left allmulticast mode [ 360.858927][ T6390] bridge_slave_0: left promiscuous mode [ 360.864754][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.183039][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.234449][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.269596][ T6390] bond0 (unregistering): Released all slaves [ 361.561408][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.571594][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.614770][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.629773][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.639942][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 361.651213][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.680367][T16429] vcan0 speed is unknown, defaulting to 1000 [ 361.827226][T16429] lo speed is unknown, defaulting to 1000 [ 362.001998][ T6390] hsr_slave_0: left promiscuous mode [ 362.021049][ T6390] hsr_slave_1: left promiscuous mode [ 362.027438][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.035013][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.042844][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.050912][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.084718][ T6390] veth1_macvtap: left promiscuous mode [ 362.090295][ T6390] veth0_macvtap: left promiscuous mode [ 362.095971][ T6390] veth1_vlan: left promiscuous mode [ 362.101285][ T6390] veth0_vlan: left promiscuous mode [ 362.561146][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 362.609920][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 363.086624][T16453] netlink: 'syz.2.2883': attribute type 29 has an invalid length. [ 363.096136][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 363.160797][T16429] chnl_net:caif_netlink_parms(): no params data found [ 363.362548][T16473] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 363.374791][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 363.421258][T16429] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.444239][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.451542][T16429] bridge_slave_0: entered allmulticast mode [ 363.491913][T16429] bridge_slave_0: entered promiscuous mode [ 363.533654][T16429] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.540821][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.563748][T16429] bridge_slave_1: entered allmulticast mode [ 363.570789][T16429] bridge_slave_1: entered promiscuous mode [ 363.656848][T16429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.677426][T16496] set match dimension is over the limit! [ 363.694648][T16429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.714658][ T5854] Bluetooth: hci2: command tx timeout [ 363.803361][T16502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2893'. [ 363.807181][T16429] team0: Port device team_slave_0 added [ 363.855944][T16429] team0: Port device team_slave_1 added [ 363.916369][T16429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.925681][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.952183][T16429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.969877][T16429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.980068][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.038100][T16429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.061149][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 364.084034][T16517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 364.107147][T16429] hsr_slave_0: entered promiscuous mode [ 364.115420][T16429] hsr_slave_1: entered promiscuous mode [ 364.139744][T16517] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 364.325988][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2901'. [ 364.703304][T16540] xt_cgroup: invalid path, errno=-2 [ 364.717576][T16429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.729775][T16429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.756388][T16429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.774659][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 364.794027][T16429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.805046][T16540] netlink: 'syz.3.2904': attribute type 10 has an invalid length. [ 364.814034][T16540] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2904'. [ 364.824392][T16540] team0: entered promiscuous mode [ 364.830054][T16540] team_slave_0: entered promiscuous mode [ 364.836596][T16540] team_slave_1: entered promiscuous mode [ 364.893828][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 364.971855][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 364.986872][T16552] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2908'. [ 365.135678][T16429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.185442][T16429] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.221997][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.229205][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.287691][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.294924][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.785411][ T5854] Bluetooth: hci2: command tx timeout [ 365.895564][T16589] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 366.063816][T16596] bridge_slave_0: default FDB implementation only supports local addresses [ 366.319262][T16596] netlink: 'syz.0.2919': attribute type 58 has an invalid length. [ 366.384353][T16429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.491616][T16429] veth0_vlan: entered promiscuous mode [ 366.536291][T16429] veth1_vlan: entered promiscuous mode [ 366.592067][T16429] veth0_macvtap: entered promiscuous mode [ 366.605010][T16429] veth1_macvtap: entered promiscuous mode [ 366.635648][T16429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.648930][T16429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.661460][T16429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.670930][T16429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.681188][T16429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.690652][T16429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.785449][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.794113][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.825761][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.834949][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.519369][T16625] ipt_REJECT: TCP_RESET invalid for non-tcp [ 367.537218][T16625] ipt_REJECT: TCP_RESET invalid for non-tcp [ 367.568197][T16625] ipt_REJECT: TCP_RESET invalid for non-tcp [ 367.783778][T16645] tap0: tun_chr_ioctl cmd 1074025677 [ 367.794148][T16645] tap0: linktype set to 778 [ 367.804844][T16646] netlink: 'syz.0.2931': attribute type 10 has an invalid length. [ 367.891274][T16650] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 367.913766][T16650] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 367.930469][T16650] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 367.950382][T16650] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 368.103898][T16658] __nla_validate_parse: 6 callbacks suppressed [ 368.103918][T16658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2934'. [ 368.132509][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'. [ 368.208928][T16660] bridge10: entered allmulticast mode [ 368.367755][ T3484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.731600][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.761776][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.770422][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.778438][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.786339][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.793692][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.823163][T16662] vcan0 speed is unknown, defaulting to 1000 [ 368.917688][T16662] lo speed is unknown, defaulting to 1000 [ 369.050363][T16662] chnl_net:caif_netlink_parms(): no params data found [ 369.147311][T16662] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.155488][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.162721][T16662] bridge_slave_0: entered allmulticast mode [ 369.170135][T16662] bridge_slave_0: entered promiscuous mode [ 369.178501][T16662] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.186182][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.193607][T16662] bridge_slave_1: entered allmulticast mode [ 369.200660][T16662] bridge_slave_1: entered promiscuous mode [ 369.237280][ T3484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.268907][T16662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.280557][T16662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.309310][T16662] team0: Port device team_slave_0 added [ 369.334309][ T3484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.349266][T16662] team0: Port device team_slave_1 added [ 369.371587][T16662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.378814][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.405192][T16662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.430873][ T3484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.446875][T16662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.454055][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.480847][T16662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.529288][T16662] hsr_slave_0: entered promiscuous mode [ 369.538319][T16662] hsr_slave_1: entered promiscuous mode [ 369.548795][T16662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.556787][T16662] Cannot create hsr debugfs directory [ 369.605655][ T3484] bridge_slave_1: left allmulticast mode [ 369.611348][ T3484] bridge_slave_1: left promiscuous mode [ 369.619576][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.629254][ T3484] bridge_slave_0: left allmulticast mode [ 369.635482][ T3484] bridge_slave_0: left promiscuous mode [ 369.642615][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.058565][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.081566][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.103079][ T3484] bond0 (unregistering): Released all slaves [ 370.321885][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.332636][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.341523][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.352065][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.362900][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.373130][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.483146][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2945'. [ 370.502227][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 370.564917][T16696] vcan0 speed is unknown, defaulting to 1000 [ 370.697373][T16696] lo speed is unknown, defaulting to 1000 [ 370.825793][ T5854] Bluetooth: hci0: command tx timeout [ 370.854141][T16662] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.916994][ T3484] hsr_slave_0: left promiscuous mode [ 370.923197][ T3484] hsr_slave_1: left promiscuous mode [ 370.934723][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.942165][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.964685][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.972138][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.009084][ T3484] veth1_macvtap: left promiscuous mode [ 371.023594][ T3484] veth0_macvtap: left promiscuous mode [ 371.029181][ T3484] veth1_vlan: left promiscuous mode [ 371.034638][ T3484] veth0_vlan: left promiscuous mode [ 371.530799][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 371.579526][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 372.086281][T16715] vcan0 speed is unknown, defaulting to 1000 [ 372.107223][T16662] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.199947][T16662] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.292025][T16662] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.332540][T16715] lo speed is unknown, defaulting to 1000 [ 372.424445][ T5854] Bluetooth: hci2: command tx timeout [ 372.441674][T16732] vcan0 speed is unknown, defaulting to 1000 [ 372.596959][T16662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.606744][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2952'. [ 372.606906][T16662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.642487][T16662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.675009][T16662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.688919][T16696] chnl_net:caif_netlink_parms(): no params data found [ 372.748367][T16732] lo speed is unknown, defaulting to 1000 [ 372.891861][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2954'. [ 372.903916][ T5854] Bluetooth: hci0: command tx timeout [ 372.951466][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.960578][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.968609][T16696] bridge_slave_0: entered allmulticast mode [ 372.980889][T16696] bridge_slave_0: entered promiscuous mode [ 372.990145][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.998003][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.005414][T16696] bridge_slave_1: entered allmulticast mode [ 373.013126][T16696] bridge_slave_1: entered promiscuous mode [ 373.110266][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.145405][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.184932][T16696] team0: Port device team_slave_0 added [ 373.202399][T16696] team0: Port device team_slave_1 added [ 373.245824][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.252808][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.279428][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.307058][T16662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.335539][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.342521][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.369198][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.392490][T16662] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.423803][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.430955][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.475528][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.482646][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.518152][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 373.595441][T16696] hsr_slave_0: entered promiscuous mode [ 373.622554][T16696] hsr_slave_1: entered promiscuous mode [ 373.691537][T16762] sctp: [Deprecated]: syz.3.2959 (pid 16762) Use of int in maxseg socket option. [ 373.691537][T16762] Use struct sctp_assoc_value instead [ 374.126275][T16662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.210743][T16696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.228799][T16696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.246288][T16696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.269017][T16696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.438924][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.468346][T16789] vcan0 speed is unknown, defaulting to 1000 [ 374.474858][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.503835][ T5854] Bluetooth: hci2: command tx timeout [ 374.531506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.538711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.600464][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.607629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.805177][T16662] veth0_vlan: entered promiscuous mode [ 374.826139][T16662] veth1_vlan: entered promiscuous mode [ 374.905196][T16662] veth0_macvtap: entered promiscuous mode [ 374.917598][T16662] veth1_macvtap: entered promiscuous mode [ 374.967722][T16662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.978352][T16662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.988626][T16662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.997650][T16662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.006565][T16662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.015379][T16662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.032286][ T5854] Bluetooth: hci0: command tx timeout [ 375.049532][T16789] lo speed is unknown, defaulting to 1000 [ 375.138893][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2964'. [ 375.187357][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.251696][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2968'. [ 375.326849][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.363857][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.443736][T16696] veth0_vlan: entered promiscuous mode [ 375.463375][T16696] veth1_vlan: entered promiscuous mode [ 375.488736][T16696] veth0_macvtap: entered promiscuous mode [ 375.510276][T16696] veth1_macvtap: entered promiscuous mode [ 375.526109][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.536900][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.550131][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.559702][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.570293][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.581681][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.592049][T16696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.600866][T16696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.609696][T16696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.618522][T16696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.646601][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.698020][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.830797][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.840256][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.897379][ T6380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.915412][ T6380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.944804][T16833] netlink: 'syz.2.2974': attribute type 30 has an invalid length. [ 376.041144][T16838] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20003 [ 376.112233][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2976'. [ 376.184206][T16843] x_tables: duplicate entry at hook 2 [ 376.218145][T16846] batadv_slave_1: entered promiscuous mode [ 376.552321][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 376.577971][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 376.618716][T16867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2985'. [ 376.638783][T16867] unsupported nlmsg_type 40 [ 376.878177][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 377.045968][T16845] batadv_slave_1: left promiscuous mode [ 377.063876][ T5854] Bluetooth: hci0: command tx timeout [ 377.275357][T16927] macvlan1: entered promiscuous mode [ 377.281264][T16927] team0: Port device macvlan1 added [ 377.409838][T16927] macvlan1: left promiscuous mode [ 377.423363][T16927] team0: Port device macvlan1 removed [ 377.481718][ T6380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.474502][ T6380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.592917][ T6380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.649464][ T6380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.722048][ T6380] bridge_slave_1: left allmulticast mode [ 378.728698][ T6380] bridge_slave_1: left promiscuous mode [ 378.734559][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.746083][ T6380] bridge_slave_0: left allmulticast mode [ 378.751756][ T6380] bridge_slave_0: left promiscuous mode [ 378.757488][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.111334][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.121305][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.129471][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.137882][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.148507][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 379.156144][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.382311][ T6380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.401487][ T6380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.413125][ T6380] bond0 (unregistering): Released all slaves [ 379.429538][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3004'. [ 379.521149][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3006'. [ 379.677122][T16974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3009'. [ 379.692528][T16950] vcan0 speed is unknown, defaulting to 1000 [ 379.695563][T16974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3009'. [ 379.808608][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3011'. [ 379.888928][T16974] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.932272][T16950] lo speed is unknown, defaulting to 1000 [ 380.170369][T16974] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3009'. [ 380.228564][ T6380] hsr_slave_0: left promiscuous mode [ 380.257239][ T6380] hsr_slave_1: left promiscuous mode [ 380.274791][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.282357][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.298481][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.306579][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.312530][T17002] Unsupported ieee802154 address type: 0 [ 380.371026][ T6380] veth1_macvtap: left promiscuous mode [ 380.394537][ T6380] veth0_macvtap: left promiscuous mode [ 380.400189][ T6380] veth1_vlan: left promiscuous mode [ 380.416323][ T6380] veth0_vlan: left promiscuous mode [ 381.199425][ T6380] team0 (unregistering): Port device team_slave_1 removed [ 381.228523][ T54] Bluetooth: hci2: command tx timeout [ 381.261450][ T6380] team0 (unregistering): Port device team_slave_0 removed [ 381.750324][T17008] vlan4: entered promiscuous mode [ 381.793798][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'. [ 381.808470][T17022] delete_channel: no stack [ 382.080453][T16950] chnl_net:caif_netlink_parms(): no params data found [ 382.246190][T17031] delete_channel: no stack [ 382.443682][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.450993][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.472726][T16950] bridge_slave_0: entered allmulticast mode [ 382.495217][T16950] bridge_slave_0: entered promiscuous mode [ 382.502979][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.523850][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.531092][T16950] bridge_slave_1: entered allmulticast mode [ 382.542791][T16950] bridge_slave_1: entered promiscuous mode [ 382.602967][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.617646][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.660945][T17081] netlink: 'syz.0.3037': attribute type 4 has an invalid length. [ 382.684493][T16950] team0: Port device team_slave_0 added [ 382.701823][T16950] team0: Port device team_slave_1 added [ 382.772561][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.781262][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.808144][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.842731][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.855937][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.903312][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.973299][T16950] hsr_slave_0: entered promiscuous mode [ 382.998627][T16950] hsr_slave_1: entered promiscuous mode [ 383.024018][T17086] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3039'. [ 383.064190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.280445][T17105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.290258][T17105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.300924][T17105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.313792][ T54] Bluetooth: hci2: command tx timeout [ 383.336331][T17105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.358946][T17105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.371868][T17108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.411489][T17109] delete_channel: no stack [ 383.492450][T17108] vcan0 speed is unknown, defaulting to 1000 [ 383.604178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.635503][T17120] netlink: 'syz.4.3047': attribute type 10 has an invalid length. [ 383.688127][T16950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.718245][T16950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.752514][T17108] lo speed is unknown, defaulting to 1000 [ 383.753200][T16950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.763581][T17123] sctp: [Deprecated]: syz.4.3048 (pid 17123) Use of int in max_burst socket option. [ 383.763581][T17123] Use struct sctp_assoc_value instead [ 383.805075][T16950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.953302][ T6363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.962451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.064311][T17127] vcan0 speed is unknown, defaulting to 1000 [ 384.064458][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 384.079693][T17132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3051'. [ 384.185470][T16950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.449442][T16950] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.488400][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.495567][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.641858][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.649049][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.712281][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3055'. [ 384.755259][T17127] lo speed is unknown, defaulting to 1000 [ 385.227784][T17129] netlink: 'syz.4.3050': attribute type 8 has an invalid length. [ 385.267006][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'. [ 385.331315][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.384090][ T54] Bluetooth: hci2: command tx timeout [ 385.551646][T16950] veth0_vlan: entered promiscuous mode [ 385.599160][T16950] veth1_vlan: entered promiscuous mode [ 385.614505][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3060'. [ 385.955931][T16950] veth0_macvtap: entered promiscuous mode [ 385.972091][T17186] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3063'. [ 386.009501][T16950] veth1_macvtap: entered promiscuous mode [ 386.070301][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.100886][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.124270][T16950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.138113][T17188] netlink: 'syz.2.3064': attribute type 3 has an invalid length. [ 386.139005][T17190] netlink: 'syz.4.3065': attribute type 1 has an invalid length. [ 386.278689][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.323458][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.352850][T16950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.377158][T16950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.394721][T17195] netlink: 'syz.4.3067': attribute type 11 has an invalid length. [ 386.412868][T17195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3067'. [ 386.413478][T16950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.443498][T16950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.452250][T16950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.493101][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 386.570102][T17197] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 386.602682][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'. [ 386.765987][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.780212][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.852955][ T6380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.886991][ T6380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.976506][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 387.022608][T17209] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3069'. [ 387.176717][T17214] bridge9: entered allmulticast mode [ 387.219676][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 387.931175][ T6391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.155401][ T6391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.249858][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.259383][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.267731][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.275902][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.284037][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 388.298773][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.354120][T17239] vcan0 speed is unknown, defaulting to 1000 [ 388.452061][ T6391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.483186][T17239] lo speed is unknown, defaulting to 1000 [ 388.547742][ T6391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.746836][ T6391] bridge_slave_1: left allmulticast mode [ 388.752542][ T6391] bridge_slave_1: left promiscuous mode [ 388.758246][ C0] net_ratelimit: 4 callbacks suppressed [ 388.758264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.781621][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.792379][ T6391] bridge_slave_0: left allmulticast mode [ 388.804127][ T6391] bridge_slave_0: left promiscuous mode [ 388.809877][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.184071][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.197575][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.208251][ T6391] bond0 (unregistering): Released all slaves [ 389.222900][T17239] chnl_net:caif_netlink_parms(): no params data found [ 389.309349][T17239] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.318485][T17239] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.326365][T17239] bridge_slave_0: entered allmulticast mode [ 389.332993][T17239] bridge_slave_0: entered promiscuous mode [ 389.342211][T17239] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.349819][T17239] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.357574][T17239] bridge_slave_1: entered allmulticast mode [ 389.364792][T17239] bridge_slave_1: entered promiscuous mode [ 389.410411][T17239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.422379][T17239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.462044][T17239] team0: Port device team_slave_0 added [ 389.491668][T17239] team0: Port device team_slave_1 added [ 389.512699][T17239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.519801][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.546221][T17239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.558920][T17239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.567337][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.595339][T17239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.705495][ T3484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.713958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.717182][T17252] netlink: 'syz.3.3080': attribute type 11 has an invalid length. [ 389.758623][T17252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3080'. [ 389.783541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.809076][T17259] netlink: 'syz.4.3081': attribute type 12 has an invalid length. [ 389.831267][T17258] netlink: 'syz.4.3081': attribute type 12 has an invalid length. [ 389.906497][T17239] hsr_slave_0: entered promiscuous mode [ 390.036311][T17239] hsr_slave_1: entered promiscuous mode [ 390.053704][T17239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.057365][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.061304][T17239] Cannot create hsr debugfs directory [ 390.077504][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.086766][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.096196][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.104030][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 390.123351][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.139073][ T6391] hsr_slave_0: left promiscuous mode [ 390.154269][ T6391] hsr_slave_1: left promiscuous mode [ 390.169990][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.177620][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.186212][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.193752][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.214216][ T6391] veth1_macvtap: left promiscuous mode [ 390.219787][ T6391] veth0_macvtap: left promiscuous mode [ 390.225397][ T6391] veth1_vlan: left promiscuous mode [ 390.230654][ T6391] veth0_vlan: left promiscuous mode [ 390.359307][ T5854] Bluetooth: hci2: command tx timeout [ 390.730310][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 390.778825][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 390.825553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.222890][T17266] bridge2: entered allmulticast mode [ 391.459633][T17284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.465449][T17267] vcan0 speed is unknown, defaulting to 1000 [ 391.468713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.636466][T17239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.742768][T17267] lo speed is unknown, defaulting to 1000 [ 391.850398][T17239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.873500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.064985][T17239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.099060][T17303] IPVS: Error joining to the multicast group [ 392.138047][T17239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.170131][T17307] vlan2: entered promiscuous mode [ 392.183983][T17307] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 392.184614][ T5854] Bluetooth: hci4: command tx timeout [ 392.198391][T17307] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 392.235146][T17317] bridge14: entered allmulticast mode [ 392.428127][ T5854] Bluetooth: hci2: command tx timeout [ 392.471963][T17267] chnl_net:caif_netlink_parms(): no params data found [ 392.474577][T17334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3100'. [ 392.485540][T17332] netlink: 'syz.2.3097': attribute type 11 has an invalid length. [ 392.525775][T17332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3097'. [ 392.608624][T17239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.626247][T17239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.660596][T17239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.670091][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.681771][T17267] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.697277][T17267] bridge_slave_0: entered allmulticast mode [ 392.713030][T17267] bridge_slave_0: entered promiscuous mode [ 392.722456][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.736704][T17267] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.744301][T17267] bridge_slave_1: entered allmulticast mode [ 392.752271][T17267] bridge_slave_1: entered promiscuous mode [ 392.759683][T17239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.799456][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.827998][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.877816][T17350] "syz.4.3103" (17350) uses obsolete ecb(arc4) skcipher [ 392.903605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.922868][T17267] team0: Port device team_slave_0 added [ 392.936768][T17267] team0: Port device team_slave_1 added [ 392.985759][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.992746][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.020647][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.042416][T17239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.050043][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.057682][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.084531][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.120177][T17239] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.152136][T17361] bridge3: entered allmulticast mode [ 393.170104][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.177244][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.210887][T17267] hsr_slave_0: entered promiscuous mode [ 393.218120][T17267] hsr_slave_1: entered promiscuous mode [ 393.237698][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.244932][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.397439][T17239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.409228][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 393.491986][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 393.605235][T17382] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3110'. [ 393.679113][T17239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.750750][T17239] veth0_vlan: entered promiscuous mode [ 393.767092][T17239] veth1_vlan: entered promiscuous mode [ 393.820762][T17239] veth0_macvtap: entered promiscuous mode [ 393.837490][T17239] veth1_macvtap: entered promiscuous mode [ 393.854053][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.866646][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.878151][T17239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.889327][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.900967][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.912926][T17390] netlink: 'syz.3.3112': attribute type 11 has an invalid length. [ 393.921991][T17239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.929573][T17390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3112'. [ 393.944076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.957640][T17239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.966877][T17239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.976112][T17239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.985099][T17239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.139086][T17267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.153283][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.170438][T17267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.174805][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.204709][T17267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.254533][T17267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.263819][ T5854] Bluetooth: hci4: command tx timeout [ 394.286640][T17398] bridge15: entered allmulticast mode [ 394.299946][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.313319][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.384441][T17267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.404009][T17267] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.447578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.454784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.489685][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.496871][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.504845][ T5854] Bluetooth: hci2: command tx timeout [ 394.681658][T17411] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 394.689477][T17411] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 394.843226][T17429] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3124'. [ 394.945500][T17267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.983526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.022458][T17437] bridge16: entered allmulticast mode [ 395.124104][T17267] veth0_vlan: entered promiscuous mode [ 395.176632][T17267] veth1_vlan: entered promiscuous mode [ 395.239887][T17267] veth0_macvtap: entered promiscuous mode [ 395.275856][T17267] veth1_macvtap: entered promiscuous mode [ 395.328593][T17451] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3130'. [ 395.350643][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.398869][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.423642][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.445771][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.462089][T17267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.472876][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.481313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.514415][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.546472][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.572276][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.593568][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.605530][T17267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.616750][T17267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.638003][T17267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.667219][T17267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.677212][T17267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.703780][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 395.719258][T17472] netlink: 'syz.2.3137': attribute type 3 has an invalid length. [ 395.744520][T17472] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.753264][T17472] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.762223][T17472] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.771184][T17472] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.894572][T17481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3140'. [ 395.913299][T17484] bridge1: entered allmulticast mode [ 395.960642][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 395.973912][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3141'. [ 396.024346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.033088][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.045166][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.074666][T17491] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3142'. [ 396.085150][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.093000][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.344106][ T5854] Bluetooth: hci4: command tx timeout [ 396.594865][ T5854] Bluetooth: hci2: command tx timeout [ 396.679077][T17532] bridge10: entered allmulticast mode [ 396.738537][T17537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3156'. [ 396.838558][T17544] netlink: 'syz.2.3155': attribute type 4 has an invalid length. [ 396.939098][T17548] vcan0 speed is unknown, defaulting to 1000 [ 397.006398][T17549] pim6reg1: entered promiscuous mode [ 397.011746][T17549] pim6reg1: entered allmulticast mode [ 397.063795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.080373][T17548] lo speed is unknown, defaulting to 1000 [ 397.332252][T17515] syz.0.3148 (17515) used greatest stack depth: 17776 bytes left [ 397.510769][T17563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3162'. [ 397.521582][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3162'. [ 397.762949][T17570] bridge2: entered allmulticast mode [ 397.779881][T17572] bond0: entered promiscuous mode [ 397.797125][T17572] bond_slave_0: entered promiscuous mode [ 397.802985][T17572] bond_slave_1: entered promiscuous mode [ 397.862878][T17571] bond0: left promiscuous mode [ 397.893685][T17571] bond_slave_0: left promiscuous mode [ 397.899258][T17571] bond_slave_1: left promiscuous mode [ 398.103739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.267183][ T6391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.829733][ T6391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.906915][ T6391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.966703][ T6391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.049908][ T6391] bridge_slave_1: left allmulticast mode [ 399.056453][ T6391] bridge_slave_1: left promiscuous mode [ 399.062222][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.071158][ T6391] bridge_slave_0: left allmulticast mode [ 399.077311][ T6391] bridge_slave_0: left promiscuous mode [ 399.083069][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.151323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.448660][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.461967][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.472971][ T6391] bond0 (unregistering): Released all slaves [ 399.749477][ T6391] hsr_slave_0: left promiscuous mode [ 399.760501][ T6391] hsr_slave_1: left promiscuous mode [ 399.773269][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.781106][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.796746][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.804351][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.822772][ T6391] veth1_macvtap: left promiscuous mode [ 399.828475][ T6391] veth0_macvtap: left promiscuous mode [ 399.834231][ T6391] veth1_vlan: left promiscuous mode [ 399.839483][ T6391] veth0_vlan: left promiscuous mode [ 400.085329][T17602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3175'. [ 400.136680][T17608] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3176'. [ 400.193638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.339062][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.363713][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.379637][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.404568][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.422226][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 400.444741][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.511123][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 400.559333][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 401.008350][T17609] netlink: 'syz.0.3175': attribute type 10 has an invalid length. [ 401.021988][T17609] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 401.074711][T17613] vcan0 speed is unknown, defaulting to 1000 [ 401.224820][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.233228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.241422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.282993][T17624] bridge4: entered allmulticast mode [ 401.411210][T17613] lo speed is unknown, defaulting to 1000 [ 401.424322][T17628] vcan0 speed is unknown, defaulting to 1000 [ 401.534727][T17640] IPv6: NLM_F_REPLACE set, but no existing node found! [ 401.883709][T17628] lo speed is unknown, defaulting to 1000 [ 401.959250][T17613] chnl_net:caif_netlink_parms(): no params data found [ 402.009517][T17658] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 402.207460][T17613] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.214959][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.222228][T17613] bridge_slave_0: entered allmulticast mode [ 402.230037][T17613] bridge_slave_0: entered promiscuous mode [ 402.249096][T17613] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.260030][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.271167][T17613] bridge_slave_1: entered allmulticast mode [ 402.273517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.278379][T17613] bridge_slave_1: entered promiscuous mode [ 402.350548][T17670] vlan2: entered promiscuous mode [ 402.370172][T17670] veth1: entered promiscuous mode [ 402.399858][T17670] veth1: left promiscuous mode [ 402.421332][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 402.506429][ T5854] Bluetooth: hci4: command tx timeout [ 402.512410][T17669] vlan2: entered promiscuous mode [ 402.512433][T17669] veth1: entered promiscuous mode [ 402.544147][T17669] veth1: left promiscuous mode [ 402.628982][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.652671][T17679] bridge17: entered allmulticast mode [ 402.662858][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.796122][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 402.826021][T17613] team0: Port device team_slave_0 added [ 402.833319][T17683] macsec0: entered allmulticast mode [ 402.856404][T17613] team0: Port device team_slave_1 added [ 402.906171][T17685] ebt_limit: overflow, try lower: 570423552/2483027968 [ 402.930697][T17685] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3197'. [ 402.957802][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'. [ 402.976660][T17683] dummy0: entered promiscuous mode [ 402.985431][T17683] dummy0: entered allmulticast mode [ 402.992795][T17683] macsec0: left allmulticast mode [ 403.003864][T17685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3197'. [ 403.020229][T17683] dummy0: left allmulticast mode [ 403.187744][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.218027][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.246233][ C0] hrtimer: interrupt took 2270115 ns [ 403.342902][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.435976][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.467255][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.561154][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.638683][T17704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.764293][T17715] vcan0 speed is unknown, defaulting to 1000 [ 403.838019][T17613] hsr_slave_0: entered promiscuous mode [ 403.853225][T17613] hsr_slave_1: entered promiscuous mode [ 403.874437][T17725] netlink: 'syz.0.3207': attribute type 14 has an invalid length. [ 404.008914][T17738] netlink: 'syz.4.3209': attribute type 4 has an invalid length. [ 404.118332][T17728] netlink: 'syz.4.3209': attribute type 4 has an invalid length. [ 404.193193][T17728] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3209'. [ 404.422660][T17715] lo speed is unknown, defaulting to 1000 [ 404.451237][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 404.583720][ T5854] Bluetooth: hci4: command tx timeout [ 404.666539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.707982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.773672][ T3484] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 405.784111][ T3484] bond0 (unregistering): Released all slaves [ 405.797527][ T3484] bond1 (unregistering): Released all slaves [ 405.968529][ T3484] bond2 (unregistering): Released all slaves [ 406.132261][ T3484] bond3 (unregistering): Released all slaves [ 406.464384][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3217'. [ 406.672173][ T5854] Bluetooth: hci4: command tx timeout [ 406.743679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.988842][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.997395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.095760][ T3484] dummy0: left allmulticast mode [ 407.101236][ T3484] dummy0: left promiscuous mode [ 407.109030][ T3484] veth1_macvtap: left promiscuous mode [ 407.115770][ T3484] veth0_macvtap: left promiscuous mode [ 407.121988][ T3484] veth1_vlan: left promiscuous mode [ 407.128019][ T3484] veth0_vlan: left promiscuous mode [ 407.273985][T17786] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 407.384515][ T3484] pim6reg (unregistering): left allmulticast mode [ 407.791184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.397256][T17791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3225'. [ 408.454172][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 408.463194][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'. [ 408.483595][T17613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.526445][T17613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.545904][T17797] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3227'. [ 408.623887][T17613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.674158][T17613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.754358][ T5854] Bluetooth: hci4: command tx timeout [ 408.823551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.898985][T17813] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3234'. [ 408.945684][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.966626][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.000797][T17613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.011225][T17613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.027377][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.035267][ T6390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.090372][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.098220][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.367146][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 409.462925][ T3484] IPVS: stop unused estimator thread 0... [ 409.595220][T17845] veth0_to_batadv: entered promiscuous mode [ 409.602079][T17845] veth0_to_batadv: entered allmulticast mode [ 409.771022][T17852] sctp: [Deprecated]: syz.3.3243 (pid 17852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.771022][T17852] Use struct sctp_sack_info instead [ 409.831783][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.856281][T17855] Bluetooth: MGMT ver 1.23 [ 409.863659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.104731][ T3484] xfrm0: left allmulticast mode [ 410.118324][ T3484] xfrm0: left promiscuous mode [ 410.830615][ T3484] team0: Port device vlan3 removed [ 410.903583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.653593][T17867] netlink: 'syz.4.3246': attribute type 4 has an invalid length. [ 411.713133][T17871] netlink: 'syz.4.3246': attribute type 4 has an invalid length. [ 411.728016][ T3484] tipc: Disabling bearer [ 411.750960][ T3484] tipc: Left network mode [ 411.836118][T17613] veth0_vlan: entered promiscuous mode [ 411.944051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.096983][T17891] bridge_slave_0: left allmulticast mode [ 412.102822][T17891] bridge_slave_0: left promiscuous mode [ 412.109341][T17891] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.122898][T17891] bridge_slave_1: left allmulticast mode [ 412.137612][T17891] bridge_slave_1: left promiscuous mode [ 412.143373][T17891] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.158172][T17891] bond0: (slave bond_slave_0): Releasing backup interface [ 412.180778][T17891] bond0: (slave bond_slave_1): Releasing backup interface [ 412.242205][T17891] team0: Port device team_slave_0 removed [ 412.295948][T17891] team0: Port device team_slave_1 removed [ 412.302791][T17891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.312251][T17891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.322799][T17891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.331065][T17891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.349540][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3254'. [ 412.401825][T17613] veth1_vlan: entered promiscuous mode [ 412.444915][T17904] ip6gretap0: left allmulticast mode [ 412.450264][T17904] ip6gretap0: left promiscuous mode [ 412.470449][T17904] bridge0: port 1(ip6gretap0) entered disabled state [ 412.509141][T17904] bond0: (slave team0): Releasing backup interface [ 412.516182][T17904] bond0: (slave team0): the permanent HWaddr of slave - 62:72:b7:c1:0c:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 412.626020][T17904] team0: Port device batadv0 removed [ 412.669219][T17904] bond0: (slave netdevsim0): Releasing backup interface [ 412.732391][T17904] team0: Port device bridge4 removed [ 412.744636][ T6391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.753845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.987022][T17613] veth0_macvtap: entered promiscuous mode [ 413.036704][T17613] veth1_macvtap: entered promiscuous mode [ 413.167108][T17613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.204527][T17613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.238731][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.287691][T17613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.314276][T17613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.332301][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.361284][ T3484] dummy0: left promiscuous mode [ 413.379368][ T3484] hsr_slave_0: left promiscuous mode [ 413.389351][ T3484] hsr_slave_1: left promiscuous mode [ 413.435051][ T3484] veth1_macvtap: left promiscuous mode [ 413.442668][ T3484] veth0_macvtap: left promiscuous mode [ 413.449048][ T3484] veth1_vlan: left promiscuous mode [ 413.944815][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.545858][T17949] netlink: 'syz.3.3269': attribute type 3 has an invalid length. [ 414.563481][ T5894] lo speed is unknown, defaulting to 1000 [ 414.608332][T17613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.636866][T17613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.667320][T17613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.690380][T17613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.929753][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.949545][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.983503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.123823][ T6380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.163480][ T6380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.205718][ T3484] IPVS: stop unused estimator thread 0... [ 415.660578][ T3484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.797519][ T3484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.023587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.099582][ T3484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.192825][ T3484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.358650][ T3484] bridge_slave_1: left allmulticast mode [ 416.365529][ T3484] bridge_slave_1: left promiscuous mode [ 416.372000][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.391792][ T3484] bridge_slave_0: left allmulticast mode [ 416.399722][ T3484] bridge_slave_0: left promiscuous mode [ 416.406869][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.049655][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.064897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.083294][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.101157][ T3484] bond0 (unregistering): Released all slaves [ 417.560042][ T3484] hsr_slave_0: left promiscuous mode [ 417.589031][ T3484] hsr_slave_1: left promiscuous mode [ 417.602975][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.639040][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.691472][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.724154][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.802798][ T3484] veth1_macvtap: left promiscuous mode [ 417.824750][ T3484] veth0_macvtap: left promiscuous mode [ 417.839518][ T3484] veth1_vlan: left promiscuous mode [ 417.859143][ T3484] veth0_vlan: left promiscuous mode [ 417.980119][T18009] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 418.024414][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.042619][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.055686][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.071247][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.085946][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 418.095504][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.103505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.517700][ T6380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.526770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.709592][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 418.789814][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 419.152468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.449333][T18016] netem: incorrect gi model size [ 419.464572][T18016] netem: change failed [ 419.481537][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3287'. [ 419.570478][T18010] vcan0 speed is unknown, defaulting to 1000 [ 420.012987][T18031] vcan0 speed is unknown, defaulting to 1000 [ 420.183755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.192346][ T54] Bluetooth: hci4: command tx timeout [ 420.225023][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3296'. [ 420.471866][T18010] chnl_net:caif_netlink_parms(): no params data found [ 420.559588][T18059] netlink: 'syz.4.3299': attribute type 21 has an invalid length. [ 420.587018][T18059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3299'. [ 420.792669][T18031] netlink: 'syz.2.3290': attribute type 4 has an invalid length. [ 420.804907][T18031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3290'. [ 420.852976][T18010] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.878663][T18010] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.923946][T18010] bridge_slave_0: entered allmulticast mode [ 420.968169][T18010] bridge_slave_0: entered promiscuous mode [ 421.031962][T18010] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.081358][T18010] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.091394][T18010] bridge_slave_1: entered allmulticast mode [ 421.106450][T18010] bridge_slave_1: entered promiscuous mode [ 421.128756][T18031] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3290'. [ 421.193506][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 421.209223][T18010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.223555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.239044][T18036] x_tables: duplicate underflow at hook 1 [ 421.248054][T18010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.265118][T18031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3290'. [ 421.351216][T18010] team0: Port device team_slave_0 added [ 421.360305][T18082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'. [ 421.370284][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 421.392055][T18010] team0: Port device team_slave_1 added [ 421.468790][T18065] delete_channel: no stack [ 421.474410][T18065] delete_channel: no stack [ 421.592853][T18010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.643480][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.717319][T18010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.732583][T18094] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 421.746476][T18094] bond0: (slave netdevsim0): Releasing backup interface [ 421.765758][T18094] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 421.778278][T18094] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 421.789556][T18094] team0: Failed to send options change via netlink (err -105) [ 421.798249][T18094] team0: Port device netdevsim0 added [ 421.805187][T18093] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 421.819425][T18093] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 421.828412][T18093] team0: Failed to send options change via netlink (err -105) [ 421.836547][T18093] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 421.846871][T18093] team0: Port device netdevsim0 removed [ 421.855819][T18093] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 421.868786][T18010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.887406][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.963535][T18010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.992280][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 422.256479][T18010] hsr_slave_0: entered promiscuous mode [ 422.264487][ T54] Bluetooth: hci4: command tx timeout [ 422.271264][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 422.295786][T18010] hsr_slave_1: entered promiscuous mode [ 422.409057][T18131] vcan0 speed is unknown, defaulting to 1000 [ 423.334691][T18010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 423.437587][T18010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.458548][T18010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.480872][T18010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.742248][T18010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.821302][T18010] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.872640][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.880447][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.920104][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.927766][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.044458][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.044555][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.073821][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.125492][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.158612][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.185517][T18184] syz.2.3332[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.273359][ T9] IPVS: starting estimator thread 0... [ 424.364814][ T54] Bluetooth: hci4: command tx timeout [ 424.403574][T18195] IPVS: using max 20 ests per chain, 48000 per kthread [ 424.425346][T18010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.513926][T18205] syzkaller0: entered promiscuous mode [ 424.531265][T18205] syzkaller0: entered allmulticast mode [ 424.704965][T18214] bridge0: port 1(vlan2) entered blocking state [ 424.716704][T18214] bridge0: port 1(vlan2) entered disabled state [ 424.723177][T18214] vlan2: entered allmulticast mode [ 424.730385][T18212] __nla_validate_parse: 3 callbacks suppressed [ 424.730401][T18212] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3342'. [ 424.764979][T18214] ip6gretap0: entered allmulticast mode [ 424.772030][T18214] vlan2: entered promiscuous mode [ 424.783728][T18214] ip6gretap0: entered promiscuous mode [ 424.791723][T18214] bridge0: port 1(vlan2) entered blocking state [ 424.798757][T18214] bridge0: port 1(vlan2) entered forwarding state [ 424.809987][T18010] veth0_vlan: entered promiscuous mode [ 424.869156][T18010] veth1_vlan: entered promiscuous mode [ 424.919016][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'. [ 425.080238][T18010] veth0_macvtap: entered promiscuous mode [ 425.150409][T18010] veth1_macvtap: entered promiscuous mode [ 425.236504][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.261854][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.294881][T18010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.322885][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 425.432307][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.444345][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.455835][T18010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.476344][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 425.511199][T18010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.550131][T18010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.574566][T18010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.584480][T18010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.616977][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 425.626850][T18244] erspan1: entered promiscuous mode [ 425.643635][T18244] erspan1: entered allmulticast mode [ 425.852388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.868749][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.937888][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.947658][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.264164][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3357'. [ 426.273202][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3357'. [ 426.352987][T18282] netlink: 'syz.3.3361': attribute type 3 has an invalid length. [ 426.784900][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 426.874358][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 426.928352][T18314] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3369'. [ 427.732005][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.002202][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.011907][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.020789][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.032458][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.040320][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 428.049961][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.099604][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.122105][T18361] vcan0 speed is unknown, defaulting to 1000 [ 428.192152][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.294446][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.400086][T18361] chnl_net:caif_netlink_parms(): no params data found [ 428.469027][ T12] bridge_slave_1: left allmulticast mode [ 428.475411][ T12] bridge_slave_1: left promiscuous mode [ 428.481493][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.491003][ T12] bridge_slave_0: left allmulticast mode [ 428.499857][ T12] bridge_slave_0: left promiscuous mode [ 428.506205][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.949616][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.962654][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.974737][ T12] bond0 (unregistering): Released all slaves [ 429.011865][T18361] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.022850][T18361] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.041672][T18361] bridge_slave_0: entered allmulticast mode [ 429.048890][T18361] bridge_slave_0: entered promiscuous mode [ 429.057682][T18361] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.065261][T18361] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.072546][T18361] bridge_slave_1: entered allmulticast mode [ 429.079669][T18361] bridge_slave_1: entered promiscuous mode [ 429.116973][T18361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.161319][T18361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.210814][T18361] team0: Port device team_slave_0 added [ 429.248812][T18361] team0: Port device team_slave_1 added [ 429.286716][T18361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.294871][T18361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.321182][T18361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.345722][T18361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.357423][T18361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.388492][T18361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.450569][ T12] hsr_slave_0: left promiscuous mode [ 429.461559][ T12] hsr_slave_1: left promiscuous mode [ 429.468865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.477247][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.486068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.493961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.526744][ T12] veth1_macvtap: left promiscuous mode [ 429.532309][ T12] veth0_macvtap: left promiscuous mode [ 429.538265][ T12] veth1_vlan: left promiscuous mode [ 429.545393][ T12] veth0_vlan: left promiscuous mode [ 430.112733][ T5854] Bluetooth: hci3: command tx timeout [ 430.160205][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.170868][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.195458][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.207570][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.227909][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 430.237726][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.377322][ T12] team0 (unregistering): Port device team_slave_1 removed [ 430.438107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 431.025278][T18361] hsr_slave_0: entered promiscuous mode [ 431.054164][T18361] hsr_slave_1: entered promiscuous mode [ 431.235169][T18381] vcan0 speed is unknown, defaulting to 1000 [ 431.738397][T18361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.754729][T18361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58194 - 0 [ 431.771878][T18361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 47938 - 0 [ 431.902021][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 431.979946][T18361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.995795][T18361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58194 - 0 [ 432.006893][T18361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 47938 - 0 [ 432.029747][T18407] veth0_vlan: left promiscuous mode [ 432.146775][T18402] delete_channel: no stack [ 432.167744][T18361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.183732][ T5854] Bluetooth: hci3: command tx timeout [ 432.204522][T18361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58194 - 0 [ 432.217709][T18361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 47938 - 0 [ 432.323345][T18361] bond0: (slave netdevsim0): Releasing backup interface [ 432.336139][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'. [ 432.350701][T18361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.369635][ T5854] Bluetooth: hci4: command tx timeout [ 432.376516][T18361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58194 - 0 [ 432.387125][T18361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 47938 - 0 [ 432.662636][T18381] chnl_net:caif_netlink_parms(): no params data found [ 432.739088][T18361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.756215][T18361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.824048][T18361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.886070][T18361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.061826][T18381] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.081477][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.091415][T18381] bridge_slave_0: entered allmulticast mode [ 433.099812][T18381] bridge_slave_0: entered promiscuous mode [ 433.115625][T18381] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.122744][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.148093][T18381] bridge_slave_1: entered allmulticast mode [ 433.157141][T18381] bridge_slave_1: entered promiscuous mode [ 433.255849][T18381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.319375][T18381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.420771][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 433.452512][T18381] team0: Port device team_slave_0 added [ 433.462158][T18474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3406'. [ 433.486668][T18381] team0: Port device team_slave_1 added [ 433.616163][T18381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.633271][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.696166][T18381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.731669][T18381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.750736][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.786813][T18381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.801087][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 433.849873][T18361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.925327][T18381] hsr_slave_0: entered promiscuous mode [ 433.939736][T18381] hsr_slave_1: entered promiscuous mode [ 433.947705][T18381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.957033][T18381] Cannot create hsr debugfs directory [ 433.980882][T18500] bridge0: entered promiscuous mode [ 433.995703][T18500] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 434.095237][T18361] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.165107][T18507] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.210319][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.218096][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.263644][ T54] Bluetooth: hci3: command tx timeout [ 434.322202][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.329369][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.366338][T18361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.376886][T18361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.425358][ T54] Bluetooth: hci4: command tx timeout [ 434.494266][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 434.718266][T18361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.783062][T18530] x_tables: duplicate underflow at hook 1 [ 434.871420][T18361] veth0_vlan: entered promiscuous mode [ 434.938947][T18361] veth1_vlan: entered promiscuous mode [ 434.956511][T18381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.970930][T18381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.981358][T18381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.999442][T18381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.056103][T18361] veth0_macvtap: entered promiscuous mode [ 435.075422][T18361] veth1_macvtap: entered promiscuous mode [ 435.109815][T18361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.120578][T18361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.156218][T18361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.198982][T18361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.204479][T18540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3426'. [ 435.218935][T18361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.232599][T18361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.249515][T18361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.258965][T18361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.268302][T18361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.278615][T18361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.377427][T18381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.431771][T18381] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.465681][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.472845][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.493173][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.512862][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.543115][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.550546][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.574639][T18544] netlink: 'syz.2.3427': attribute type 1 has an invalid length. [ 435.590955][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.615028][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.795085][T18551] netlink: 'syz.3.3379': attribute type 28 has an invalid length. [ 435.826926][T18551] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3379'. [ 436.016459][T18381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.096264][T18381] veth0_vlan: entered promiscuous mode [ 436.113096][T18381] veth1_vlan: entered promiscuous mode [ 436.148984][T18381] veth0_macvtap: entered promiscuous mode [ 436.161535][T18381] veth1_macvtap: entered promiscuous mode [ 436.203788][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.240891][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.253080][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.266199][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.280009][T18381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.295160][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.334711][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.353587][ T54] Bluetooth: hci3: command tx timeout [ 436.371096][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.383352][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.396916][T18381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.446207][T18381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.456444][T18381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.468866][T18381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.478733][T18381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.503697][ T54] Bluetooth: hci4: command 0x040f tx timeout [ 436.664316][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.672881][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.732263][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.742966][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.815420][T18585] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 437.033127][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'. [ 437.057551][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 437.440817][T18609] vlan2: left allmulticast mode [ 437.460319][T18609] ip6gretap0: left allmulticast mode [ 437.473102][T18609] vlan2: left promiscuous mode [ 437.482561][T18609] ip6gretap0: left promiscuous mode [ 437.491447][T18609] bridge0: port 1(vlan2) entered disabled state [ 437.522898][T18610] wg2: entered promiscuous mode [ 437.586909][T18610] team0: Port device wg2 added [ 437.630709][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3445'. [ 437.661304][T18615] vcan0 speed is unknown, defaulting to 1000 [ 438.034166][ T6390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.154737][T18614] vcan0 speed is unknown, defaulting to 1000 [ 438.657175][ T6390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.037600][ T6390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.109333][ T6390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.213949][ T6390] bridge_slave_1: left allmulticast mode [ 439.219650][ T6390] bridge_slave_1: left promiscuous mode [ 439.225416][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.234828][ T6390] bridge_slave_0: left allmulticast mode [ 439.240500][ T6390] bridge_slave_0: left promiscuous mode [ 439.246684][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.714681][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.730926][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.742762][ T6390] bond0 (unregistering): Released all slaves [ 440.077159][ T6390] hsr_slave_0: left promiscuous mode [ 440.088476][ T6390] hsr_slave_1: left promiscuous mode [ 440.098137][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.106148][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.119442][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.126935][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.151713][ T6390] veth1_macvtap: left promiscuous mode [ 440.157391][ T6390] veth0_macvtap: left promiscuous mode [ 440.162979][ T6390] veth1_vlan: left promiscuous mode [ 440.171655][ T6390] veth0_vlan: left promiscuous mode [ 440.690175][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.708288][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.723035][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.742148][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.752941][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 440.761386][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.086597][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 441.143346][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 441.728472][T18634] netlink: 'syz.3.3450': attribute type 6 has an invalid length. [ 441.807787][T18641] vcan0 speed is unknown, defaulting to 1000 [ 442.375848][T18641] chnl_net:caif_netlink_parms(): no params data found [ 442.487465][T18641] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.509192][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.516904][T18641] bridge_slave_0: entered allmulticast mode [ 442.524530][T18641] bridge_slave_0: entered promiscuous mode [ 442.533006][T18641] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.540539][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.548076][T18641] bridge_slave_1: entered allmulticast mode [ 442.555695][T18641] bridge_slave_1: entered promiscuous mode [ 442.682003][T18641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.726926][T18641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.832738][ T54] Bluetooth: hci4: command tx timeout [ 442.890227][T18641] team0: Port device team_slave_0 added [ 442.949304][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 442.968705][T18641] team0: Port device team_slave_1 added [ 443.125313][T18641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.154287][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.230797][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 443.257235][T18641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.274336][T18687] Cannot find del_set index 1 as target [ 443.285761][T18641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.341251][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.368627][T18641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.387322][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3460'. [ 443.545992][T18641] hsr_slave_0: entered promiscuous mode [ 443.566706][T18641] hsr_slave_1: entered promiscuous mode [ 443.586515][T18641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.599828][T18641] Cannot create hsr debugfs directory [ 444.199622][T18723] wg2: left allmulticast mode [ 444.228289][T18723] team0: Port device wg2 added [ 444.248513][T18723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3470'. [ 444.274828][T18724] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3467'. [ 444.335872][T18723] vcan0 speed is unknown, defaulting to 1000 [ 444.367862][T18641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.392440][T18641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.418701][T18641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.431461][T18641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.618798][T18641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.689096][T18641] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.742466][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.750388][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.798540][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3473'. [ 444.837177][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.844356][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.903855][ T54] Bluetooth: hci4: command tx timeout [ 445.056783][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3475'. [ 445.222713][T18641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.545906][T18753] sctp: [Deprecated]: syz.3.3477 (pid 18753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.545906][T18753] Use struct sctp_sack_info instead [ 445.548572][T18641] veth0_vlan: entered promiscuous mode [ 445.612022][T18641] veth1_vlan: entered promiscuous mode [ 445.684495][T18641] veth0_macvtap: entered promiscuous mode [ 445.723984][T18641] veth1_macvtap: entered promiscuous mode [ 445.748399][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 445.845456][T18641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.857780][T18641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.903177][T18641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.940788][T18641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.978502][T18641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.002919][T18641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.015562][T18641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.044036][T18641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.063989][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3482'. [ 446.073894][T18641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.125468][T18641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.158595][T18641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.181390][T18641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.191670][T18641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.202114][T18641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.232544][T18776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3484'. [ 446.328380][T18769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3484'. [ 446.435873][T18788] x_tables: duplicate underflow at hook 1 [ 446.727488][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.763210][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.902491][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.916056][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.930411][T18801] netlink: 'syz.2.3494': attribute type 10 has an invalid length. [ 446.947309][T18801] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 446.983761][ T54] Bluetooth: hci4: command tx timeout [ 447.095939][T18805] netlink: 'syz.0.3493': attribute type 10 has an invalid length. [ 447.200005][T18805] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.222759][T18805] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.258642][T18807] IPv6: Can't replace route, no match found [ 447.283732][T18813] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(273325328536992) <= P.seqno(0) <= S.SWH(273325328537066)) and (P.ackno exists or LAWL(268527363116681) <= P.ackno(268527363116682) <= S.AWH(268527363116682), sending SYNC... [ 447.311941][T18808] ================================================================== [ 447.320041][T18808] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x17e/0x5e0 [ 447.328222][T18808] Read of size 8 at addr ffff88803b7c8bd0 by task syz.0.3493/18808 [ 447.336130][T18808] [ 447.338471][T18808] CPU: 1 UID: 0 PID: 18808 Comm: syz.0.3493 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 447.349254][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.359332][T18808] Call Trace: [ 447.362629][T18808] [ 447.365579][T18808] dump_stack_lvl+0x241/0x360 [ 447.370283][T18808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.375510][T18808] ? __pfx__printk+0x10/0x10 [ 447.380121][T18808] ? _printk+0xd5/0x120 [ 447.384292][T18808] ? __virt_addr_valid+0x183/0x530 [ 447.389410][T18808] ? __virt_addr_valid+0x183/0x530 [ 447.394523][T18808] print_report+0x169/0x550 [ 447.399027][T18808] ? __virt_addr_valid+0x183/0x530 [ 447.404140][T18808] ? __virt_addr_valid+0x183/0x530 [ 447.409247][T18808] ? __virt_addr_valid+0x45f/0x530 [ 447.414355][T18808] ? __phys_addr+0xba/0x170 [ 447.418852][T18808] ? cfusbl_device_notify+0x17e/0x5e0 [ 447.424223][T18808] kasan_report+0x143/0x180 [ 447.428728][T18808] ? cfusbl_device_notify+0x17e/0x5e0 [ 447.434099][T18808] cfusbl_device_notify+0x17e/0x5e0 [ 447.439291][T18808] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 447.445025][T18808] ? __pfx_caif_device_notify+0x10/0x10 [ 447.450589][T18808] ? smc_pnet_netdev_event+0x38f/0x690 [ 447.456052][T18808] ? lockdep_rtnl_is_held+0x26/0x40 [ 447.461263][T18808] notifier_call_chain+0x19f/0x3e0 [ 447.466390][T18808] register_netdevice+0x1274/0x1b00 [ 447.471599][T18808] ? __pfx_register_netdevice+0x10/0x10 [ 447.477154][T18808] ? dev_addr_mod+0xbd/0x330 [ 447.481745][T18808] ? __asan_memset+0x23/0x50 [ 447.486349][T18808] register_netdev+0x3b/0x50 [ 447.490951][T18808] bnep_add_connection+0x823/0xd80 [ 447.496072][T18808] ? __pfx_bnep_add_connection+0x10/0x10 [ 447.501703][T18808] ? __fget_files+0x29/0x470 [ 447.506293][T18808] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 447.511324][T18808] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 447.516873][T18808] ? tomoyo_path_number_perm+0x68d/0x880 [ 447.522513][T18808] sock_do_ioctl+0x158/0x460 [ 447.527108][T18808] ? __pfx_sock_do_ioctl+0x10/0x10 [ 447.532219][T18808] sock_ioctl+0x626/0x8e0 [ 447.536543][T18808] ? __pfx_sock_ioctl+0x10/0x10 [ 447.541387][T18808] ? __fget_files+0x29/0x470 [ 447.545979][T18808] ? __fget_files+0x3f3/0x470 [ 447.550653][T18808] ? __pfx_sock_ioctl+0x10/0x10 [ 447.555498][T18808] __se_sys_ioctl+0xf9/0x170 [ 447.560087][T18808] do_syscall_64+0xf3/0x230 [ 447.564587][T18808] ? clear_bhb_loop+0x35/0x90 [ 447.569259][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.575152][T18808] RIP: 0033:0x7fc532d7e719 [ 447.579568][T18808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.599179][T18808] RSP: 002b:00007fc533ae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.607590][T18808] RAX: ffffffffffffffda RBX: 00007fc532f36208 RCX: 00007fc532d7e719 [ 447.615559][T18808] RDX: 00000000200000c0 RSI: 00000000400442c8 RDI: 000000000000000b [ 447.623526][T18808] RBP: 00007fc532df132e R08: 0000000000000000 R09: 0000000000000000 [ 447.631494][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.639457][T18808] R13: 0000000000000001 R14: 00007fc532f36208 R15: 00007ffd979bc6d8 [ 447.647436][T18808] [ 447.650453][T18808] [ 447.652770][T18808] Allocated by task 54: [ 447.656911][T18808] kasan_save_track+0x3f/0x80 [ 447.661585][T18808] __kasan_kmalloc+0x98/0xb0 [ 447.666166][T18808] __kmalloc_cache_noprof+0x19c/0x2c0 [ 447.671534][T18808] __hci_conn_add+0x2f9/0x1850 [ 447.676293][T18808] hci_conn_request_evt+0x5e8/0xdb0 [ 447.681490][T18808] hci_event_packet+0xac2/0x1540 [ 447.686422][T18808] hci_rx_work+0x3fe/0xd80 [ 447.690828][T18808] process_scheduled_works+0xa63/0x1850 [ 447.696374][T18808] worker_thread+0x870/0xd30 [ 447.700966][T18808] kthread+0x2f0/0x390 [ 447.705027][T18808] ret_from_fork+0x4b/0x80 [ 447.709458][T18808] ret_from_fork_asm+0x1a/0x30 [ 447.714216][T18808] [ 447.716537][T18808] Freed by task 18641: [ 447.720590][T18808] kasan_save_track+0x3f/0x80 [ 447.725263][T18808] kasan_save_free_info+0x40/0x50 [ 447.730283][T18808] __kasan_slab_free+0x59/0x70 [ 447.735044][T18808] kfree+0x1a0/0x440 [ 447.738938][T18808] device_release+0x99/0x1c0 [ 447.743523][T18808] kobject_put+0x22f/0x480 [ 447.747943][T18808] hci_conn_del+0x8c4/0xc40 [ 447.752438][T18808] hci_conn_hash_flush+0x18e/0x240 [ 447.757547][T18808] hci_dev_close_sync+0xa42/0x11c0 [ 447.762653][T18808] hci_unregister_dev+0x20b/0x510 [ 447.767671][T18808] vhci_release+0x80/0xd0 [ 447.771991][T18808] __fput+0x23f/0x880 [ 447.775967][T18808] task_work_run+0x24f/0x310 [ 447.780553][T18808] do_exit+0xa2f/0x28e0 [ 447.784703][T18808] do_group_exit+0x207/0x2c0 [ 447.789286][T18808] __x64_sys_exit_group+0x3f/0x40 [ 447.794312][T18808] x64_sys_call+0x2634/0x2640 [ 447.798990][T18808] do_syscall_64+0xf3/0x230 [ 447.803480][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.809371][T18808] [ 447.811684][T18808] Last potentially related work creation: [ 447.817387][T18808] kasan_save_stack+0x3f/0x60 [ 447.822071][T18808] __kasan_record_aux_stack+0xac/0xc0 [ 447.827441][T18808] insert_work+0x3e/0x330 [ 447.831769][T18808] __queue_work+0xc8b/0xf50 [ 447.836269][T18808] queue_delayed_work_on+0x1ca/0x390 [ 447.841553][T18808] l2cap_chan_del+0x291/0x5d0 [ 447.846229][T18808] l2cap_conn_del+0x38a/0x690 [ 447.850905][T18808] hci_conn_hash_flush+0xff/0x240 [ 447.855928][T18808] hci_dev_close_sync+0xa42/0x11c0 [ 447.861030][T18808] hci_unregister_dev+0x20b/0x510 [ 447.866048][T18808] vhci_release+0x80/0xd0 [ 447.870369][T18808] __fput+0x23f/0x880 [ 447.874349][T18808] task_work_run+0x24f/0x310 [ 447.878933][T18808] do_exit+0xa2f/0x28e0 [ 447.883081][T18808] do_group_exit+0x207/0x2c0 [ 447.887660][T18808] __x64_sys_exit_group+0x3f/0x40 [ 447.892672][T18808] x64_sys_call+0x2634/0x2640 [ 447.897353][T18808] do_syscall_64+0xf3/0x230 [ 447.901846][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.907736][T18808] [ 447.910054][T18808] The buggy address belongs to the object at ffff88803b7c8000 [ 447.910054][T18808] which belongs to the cache kmalloc-8k of size 8192 [ 447.924100][T18808] The buggy address is located 3024 bytes inside of [ 447.924100][T18808] freed 8192-byte region [ffff88803b7c8000, ffff88803b7ca000) [ 447.938063][T18808] [ 447.940378][T18808] The buggy address belongs to the physical page: [ 447.946794][T18808] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3b7c8 [ 447.955551][T18808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 447.964036][T18808] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 447.971570][T18808] page_type: f5(slab) [ 447.975547][T18808] raw: 00fff00000000040 ffff88801ac42280 ffffea0001f14a00 dead000000000004 [ 447.984120][T18808] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 447.992698][T18808] head: 00fff00000000040 ffff88801ac42280 ffffea0001f14a00 dead000000000004 [ 448.001367][T18808] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 448.010034][T18808] head: 00fff00000000003 ffffea0000edf201 ffffffffffffffff 0000000000000000 [ 448.018700][T18808] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 448.027362][T18808] page dumped because: kasan: bad access detected [ 448.033776][T18808] page_owner tracks the page as allocated [ 448.039481][T18808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16758, tgid 16757 (syz.0.2958), ts 374172048266, free_ts 368755823206 [ 448.061010][T18808] post_alloc_hook+0x1f3/0x230 [ 448.065781][T18808] get_page_from_freelist+0x303f/0x3190 [ 448.071318][T18808] __alloc_pages_noprof+0x292/0x710 [ 448.076508][T18808] alloc_pages_mpol_noprof+0x3e8/0x680 [ 448.081963][T18808] alloc_slab_page+0x6a/0x120 [ 448.086630][T18808] allocate_slab+0x5a/0x2f0 [ 448.091128][T18808] ___slab_alloc+0xcd1/0x14b0 [ 448.095805][T18808] __slab_alloc+0x58/0xa0 [ 448.100129][T18808] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 448.106541][T18808] krealloc_noprof+0x88/0x120 [ 448.111213][T18808] copy_verifier_state+0x9d5/0x1020 [ 448.116405][T18808] push_stack+0x1a7/0x4e0 [ 448.120728][T18808] check_cond_jmp_op+0x2171/0x4020 [ 448.125832][T18808] do_check+0x96d5/0xfeb0 [ 448.130153][T18808] do_check_common+0x14bd/0x1dd0 [ 448.135084][T18808] bpf_check+0x18cde/0x1e710 [ 448.139665][T18808] page last free pid 16644 tgid 16637 stack trace: [ 448.146187][T18808] free_unref_page+0xcfb/0xf20 [ 448.150948][T18808] vfree+0x186/0x2e0 [ 448.154844][T18808] __vmalloc_node_range_noprof+0x1119/0x13f0 [ 448.160821][T18808] bpf_map_area_alloc+0xfc/0x120 [ 448.165749][T18808] array_map_alloc+0x285/0x720 [ 448.170508][T18808] map_create+0x946/0x11c0 [ 448.174915][T18808] __sys_bpf+0x6d1/0x810 [ 448.179150][T18808] __x64_sys_bpf+0x7c/0x90 [ 448.183561][T18808] do_syscall_64+0xf3/0x230 [ 448.188071][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.193962][T18808] [ 448.196283][T18808] Memory state around the buggy address: [ 448.201901][T18808] ffff88803b7c8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.209961][T18808] ffff88803b7c8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.218020][T18808] >ffff88803b7c8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.226068][T18808] ^ [ 448.232729][T18808] ffff88803b7c8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.240783][T18808] ffff88803b7c8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.248834][T18808] ================================================================== [ 448.303596][T18808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 448.310837][T18808] CPU: 0 UID: 0 PID: 18808 Comm: syz.0.3493 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 448.321592][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.331640][T18808] Call Trace: [ 448.334912][T18808] [ 448.337835][T18808] dump_stack_lvl+0x241/0x360 [ 448.342512][T18808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.347705][T18808] ? __pfx__printk+0x10/0x10 [ 448.352288][T18808] ? preempt_schedule+0xe1/0xf0 [ 448.357134][T18808] ? vscnprintf+0x5d/0x90 [ 448.361453][T18808] panic+0x349/0x880 [ 448.365345][T18808] ? check_panic_on_warn+0x21/0xb0 [ 448.370448][T18808] ? __pfx_panic+0x10/0x10 [ 448.374859][T18808] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 448.380833][T18808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 448.387155][T18808] ? print_report+0x502/0x550 [ 448.391822][T18808] check_panic_on_warn+0x86/0xb0 [ 448.396749][T18808] ? cfusbl_device_notify+0x17e/0x5e0 [ 448.402115][T18808] end_report+0x77/0x160 [ 448.406365][T18808] kasan_report+0x154/0x180 [ 448.410882][T18808] ? cfusbl_device_notify+0x17e/0x5e0 [ 448.416262][T18808] cfusbl_device_notify+0x17e/0x5e0 [ 448.421459][T18808] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 448.427176][T18808] ? __pfx_caif_device_notify+0x10/0x10 [ 448.432722][T18808] ? smc_pnet_netdev_event+0x38f/0x690 [ 448.438182][T18808] ? lockdep_rtnl_is_held+0x26/0x40 [ 448.443377][T18808] notifier_call_chain+0x19f/0x3e0 [ 448.448492][T18808] register_netdevice+0x1274/0x1b00 [ 448.453688][T18808] ? __pfx_register_netdevice+0x10/0x10 [ 448.459225][T18808] ? dev_addr_mod+0xbd/0x330 [ 448.463806][T18808] ? __asan_memset+0x23/0x50 [ 448.468394][T18808] register_netdev+0x3b/0x50 [ 448.472978][T18808] bnep_add_connection+0x823/0xd80 [ 448.478090][T18808] ? __pfx_bnep_add_connection+0x10/0x10 [ 448.483712][T18808] ? __fget_files+0x29/0x470 [ 448.488295][T18808] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 448.493314][T18808] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 448.498854][T18808] ? tomoyo_path_number_perm+0x68d/0x880 [ 448.504480][T18808] sock_do_ioctl+0x158/0x460 [ 448.509064][T18808] ? __pfx_sock_do_ioctl+0x10/0x10 [ 448.514175][T18808] sock_ioctl+0x626/0x8e0 [ 448.518495][T18808] ? __pfx_sock_ioctl+0x10/0x10 [ 448.523334][T18808] ? __fget_files+0x29/0x470 [ 448.527916][T18808] ? __fget_files+0x3f3/0x470 [ 448.532584][T18808] ? __pfx_sock_ioctl+0x10/0x10 [ 448.537420][T18808] __se_sys_ioctl+0xf9/0x170 [ 448.542008][T18808] do_syscall_64+0xf3/0x230 [ 448.546501][T18808] ? clear_bhb_loop+0x35/0x90 [ 448.551167][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.557055][T18808] RIP: 0033:0x7fc532d7e719 [ 448.561458][T18808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.581063][T18808] RSP: 002b:00007fc533ae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.589469][T18808] RAX: ffffffffffffffda RBX: 00007fc532f36208 RCX: 00007fc532d7e719 [ 448.597428][T18808] RDX: 00000000200000c0 RSI: 00000000400442c8 RDI: 000000000000000b [ 448.605387][T18808] RBP: 00007fc532df132e R08: 0000000000000000 R09: 0000000000000000 [ 448.613347][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.621316][T18808] R13: 0000000000000001 R14: 00007fc532f36208 R15: 00007ffd979bc6d8 [ 448.629292][T18808] [ 448.632566][T18808] Kernel Offset: disabled [ 448.636876][T18808] Rebooting in 86400 seconds..