last executing test programs: 32.76407717s ago: executing program 3 (id=321): syz_emit_ethernet(0x4e, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x90) 32.644530579s ago: executing program 3 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 64) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2008}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="0600000018000000000008002400000024000000020000000000000000000002000000000000003ce10c4b9cb47ea96e0301000084000000000000000001000000000000010000ed4132b924518b75195b4206f146f8fba0c7c063115ef79e730ba76076e591b84974fcaff1cf17fbbe4a09c995de7e74dbc7f8ba638d25fa9fe7"], &(0x7f0000000340)=""/184, 0x3e, 0xb8, 0x1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x3f000000}, {0x801, 0x0, 0x18000000}]}) (async, rerun: 32) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x6) (async, rerun: 32) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000200), 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010100000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000050000000060a010400000000000000000000000008000b400000000028000480240001800b000100657874686472000014000280080006400000000108000440000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) 32.184238196s ago: executing program 3 (id=330): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005800}, 0x40844) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2}, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2}, 0x10) (async) sendmmsg$sock(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)="53fb7ce9bca5b4c6c82fb997acc6b0361e5c15be43", 0x15}], 0x1}}], 0x1, 0x20000800) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000068000100000000000000000002000000000000000600070004000000100008800c0001000000000000000000080006000000000008000500", @ANYRES32=r8], 0x40}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e23, 0x2, 'sed\x00', 0x4, 0x8d6c, 0x67}, {@remote, 0x4e22, 0x0, 0xcc6, 0x6, 0x8}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8) (async) sendto$inet(r0, &(0x7f00000007c0)="09268a927f1f658e0900000041ba7860fcfaf6f7c618ded8974895abeaf4b4834ff922b3f1e0b0775205c81a46fc2b5e82c06ad0182bd67aa03059bcecc7a95425a3a07e75a379bfed072c44aba6f7ae55", 0xfffffffffffffe4d, 0x91, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0x38, [0xb3, 0x100000000, 0x8000000000000001, 0x4, 0xfffffffffffffffc, 0x5], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/56}, &(0x7f0000000200)=0x78) 31.095579407s ago: executing program 3 (id=346): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000006000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x90) 30.531572633s ago: executing program 3 (id=350): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x2000041}, 0x10) bind$tipc(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) (async, rerun: 32) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async, rerun: 64) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 14.182192877s ago: executing program 3 (id=350): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x2000041}, 0x10) bind$tipc(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) (async, rerun: 32) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async, rerun: 64) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 5.149470904s ago: executing program 2 (id=528): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x7}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "942e90151e65ff0aada747df6955a24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f188b980cbf03c519020be82778ad9db"}, @NL80211_ATTR_PMK={0x14, 0xfe, "deda87372b1899b16d6f405fb6782a74"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "90ab85a9157fb7cd17e3c2610e55947d"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.025184431s ago: executing program 2 (id=529): socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x808, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfc6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x705281, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r9, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140", @ANYRES16, @ANYRES8, @ANYRES32=r9], 0xfdef) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00040000000000006e71dc08dbddb7e4ccb4d40f00007200000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r11, 0x2}, 0x10) 3.604473229s ago: executing program 0 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000606010200000000000000000500000105000100070000000900020073797a3000000000050001"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000606010200000000000000000500000105000100070000000900020073797a3000000000050001"], 0x58}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x2060, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x2060, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r8, &(0x7f0000000000)=""/14, 0xe, 0x10100, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x3c, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74, r11}, [@TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_RATE={0x6, 0x5, {0x6b, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0xd1}}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 3.399885356s ago: executing program 2 (id=533): bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000780000000000019078ac1e0001ac1414aa0304907800000000470000000000000000010000ac141400ac1414aa44050000000300443c0001ac1e00010000000300000000000000000000000000000000ac1414aa000000007f00000100000000ffffffff00000000ffffffff000000004404000000"], 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) unshare(0x0) sendmsg$rds(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001eac1db4b53439bcfc446bb1601"], 0x24}}, 0x0) 3.258970407s ago: executing program 4 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xd9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0xcb16) connect$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) splice(r7, 0x0, r6, 0x0, 0x7ffff041, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006911510000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)={0xfffffffffffffe4e, r11, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x0, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR, @NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x8) 3.247491737s ago: executing program 0 (id=535): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES8], 0x48}}, 0x4040884) r3 = socket(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0xfffffffffffffdee) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000d5356bb2a6017c514ec8fa084abc8ce8452ed29739d3c61bd65b7ca42e321c4b38ab2b88f802b82cc5ed92b6cd67b6a4ee3cc269fb1c", @ANYRES16=r7, @ANYBLOB="010025bd700000000000050000000400018004000680"], 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) 3.023648856s ago: executing program 4 (id=536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x20, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000007c0), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'wg0\x00', {0x3}, 0x8}) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (rerun: 64) sendto$inet6(r3, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x78, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "12083a0c22576d21b1a8033b5a11d85dbe95e8816f8c9554"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24fc1f30082824f8bf10417c1d2007ae72e6ffffffffd603"}]]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r4, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x7b}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x38}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000240}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xd8, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x8}}, @NL80211_ATTR_SCAN_SSIDS={0xa4, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="aa0bcf3eab9aa326cbf866993ef357ce56"}, {0xa, 0x0, @default_ap_ssid}, {0x21, 0x0, @random="ad1eaa8c41d3dfb17157b1c78d63bf9dc71b9b82d92d2ddb2bc90bb5c8"}, {0xb, 0x0, @random="5ac85959d66e94"}, {0x1b, 0x0, @random="3ce89ca4afb9b60068c7edb190be2344ed0f12d2dbf286"}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="b36dbd563f5599a8f46815f253e344"}, {0xf, 0x0, @random="778e5bf57be20ec0a6c943"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x4801) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYRES8=r7, @ANYRES32, @ANYBLOB="0000002200000000b7020000000000008500000086000400feffffff717736b5a4664a5a78370463bcb16a966370b6880b1d7b99590885046c1276dac54819b9e35c95ce782342396cf8cfcd4d73504060e595141612e1e8289b7e0b68ff835d4a639cf173e7b1dc701da7ae25f716324d9cb8a1b3fd5290d7c34ab3a7cd0b726351012b0c3824d735b34c50659de10ffc81fffc"], &(0x7f00000001c0)='GPL\x00', 0x36c, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xc, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x4, 0x3, 0x0, 0x3}], 0x10, 0xb}, 0x90) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0xae, 0xfe, &(0x7f0000000380)="5e241b8f77bbd78f2b59e904fd8e11769531ff02659caea9d74e171001a9409f494e7ade2c47101d5d3b4c4e18bf200b1a0e5ba4ac29bd905bc54c451c0c9f458a3ef93a35e841f98e9a7ad767b15d98e81f4e22b8841a5048195a802c2963f9182ea2cae0e7e116602b24f094a55d236181b3b94b378877ea434a432ae9b6a936051f3932ecd4636fc4f9da285aa04c6a3c6e49b9cd4c37859c7b821bf2f8dbfbf16eb37c1472da7617ab768dda", &(0x7f0000000440)=""/254, 0xd9, 0x0, 0xd8, 0x14, &(0x7f0000000540)="551ed6a12cff40a531bd7b3c350957f9f24176ad121cff99967d467c747eab0f9f7ff34cacc9492555c56a88c7aac7b20ec3b0cff225c20a14d3e4b8a6f0a9c8428ae237fc2d02f989c9a2bb6dd72491ffe2813a17de440ef7ebcd2135676445668dca61d33c2ebc355cf1ccc88bcd24e6c117f69f206fc3f482f26e403421a564d215fe947e5643ed43f8d9a73f7904d0126f5929203c5775e61c28344d9017bd5f8a953f46c792255f8a7abbb89e17b2388ef479463bfe0dd1dbc830732675c4dba0c719f04e81bd7f57b58702d041336bf448de308894", &(0x7f0000000640)="c11c020ffe25715f0022607041e7a56d89fd6195", 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r7, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async) syz_emit_ethernet(0x1017, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x55, "1087", "1376d7", 0x883e, "34bc39508eb3154694c5a2a9f34fdd3caf73242f6a8bf6331af174ec428473cc97347cf8ffed6cdd23b024f51c0b8ce550fa91f228511670a69fe9ae395f6643d561542c302cbab6f65456f12ad9cb07d567bfd96f308eac2825d1ad5208d007a430f85d6fd1ae1602e09caf2fbab72d03d3dcdb8901e8c1847436f7c9fd75c84e2afda7f32f8051ccf2b28c29d6a5f27ae8fedc66d610500d6d2ad163f543dd49ca1f31a56ed1b009dad0b914d538cff9314056cd9f6d22b75c830646bc903290db52c745675346541398f751c19da00340df604c6405d6396200f61b5643ac66da7a64dc3e273bfad5ad2b965889632b10e2c0da1752657c521e22d3c3267576d624542902154cba5c6ae24578b814fee8f859cf7d5cc34ca9d59af95458a480baf34a1215fd582a13f447f898b187c3ae959de8bf63a6d3601d5248a35c6d02266a0b09b8684f9c45c4071f5f24a28449e1ede5ad9eb735ec86816ac6309c17532e9d84e346eaf07615480df7bce1d0883acb85b65688ed49c924e8bba7f949af9547fc0c9a5ba45747c87de42e3b34f5f4657ab515b0ab3e1e6b56150b0aa0b488339f57f658dacccaef4484d027d4b20cdac8e4c4dd996a720a3190ddb85655f7eb9b87934fe08d6535c2dc54d88f6f3d49b64e127bd71e5b8f54544b461fd5cec1cc78ed3f39ab17bc1e9657521decb7ec41f5aa1cf9fa19a49108664d5d5fe091ef900f3895e0d047dc79cc4786f5c7ce9e15993cb4c5215431d725d784bf9f6f884bba8ffed6e5e882d6b16ae73d54dc6a73699a3ca64fc3d5cabb628b328a7ae99d7bf9a8c572ce9f8cc36f2812adc3d3bbcbdf27f4d3b92da46a585ebe9970a0fbf3337cd79679d14803df0f3c8398297a1760db656257cc81c453164c813ab9f1947938123ee52f74a0f7f3dba1be98127c40fa8e068127e428039d88222591346b0b05022f4944211ce1725f8df8632d031e7eab7a1df8158b7558cc107bab77fac6bd351aa1c4e9bde18b333081ed844918c416842f3237a5a2038d163079379fdf6e89ab8466f946c62f1db23497dcc9faad647d7ab16173a11c3d1e5c5b13a5b3f7cab42d7ac9d8607f9db5ad305db3c69418e716046dab5d23d8bc0c36f15bee4f4dbd7315ce7728186320ebd38d22f3f1ffcd013fc582174561a2301a92af6370e9d1e51c5f2ee7726ef265923c02f84bc6e84592c5023a454c67d7c5e908863c91d71931e6b86941571869edfcbf40dc52718fcd29ec839a038695ae27d34173cfad5bf07d098801acea6af91d9767da566486888be1a31d5ee6aa7601621885bf9525e04b86ac4c7e7608d230eca0f78c849a0f75bd3434a0fd11dcaa17f49493f38814b4f75bfe929895310200e80f865a025d6ce20790217a2c8d87dfee700bdf02136173d998f7f291e68ee84b1d8cf4019a7104e67bb751518b8d35a3c77754c1ff828847532917e7411ff03f1e69d4e5bd57812fb577895135c4ad9454f94da9f258453bcc6021725a486d320cabdd11c7611597fde624ed64c1cd5b9f09bceb979718a004fc4ee325c5aea85e8a8e62ee83ac8c4653ffe2f5a17498d91b0dc4be5f0d88300d1b05ec5e25bc4c5ee508f056bd3c28e0c6a0b5a88cbe17c23af4667f94d4c0eedff10917c20fe8c3938326acdf94ba8c26d3077516402d4c2404134cfb0ab5cb21ba6642e1890d5978c3c94ba4e56be6ee1704c66369788d0555e21255cc70b739278cf30af35af7ebbf09d8070da880cc5287c67c38fa4d6b8a76fe64d6e232e0133e0ac8da7c768c07e73b641062bb1c83c65299ed4d4dd53823b652774509afb57e8fabb34f41954cd68af8e11464a4c35e3ce6ae75380b99ce7b390d62e5f876d67edd71abd92880e198fb48c9e3919aaafa28dbbbb82f430b0d2745b5af1bbbc92ebc7ac01c846e4c0b3835dd2258a9f7cb78a67212b7082cc7e32b29fc003040a96808b0c03211316abc3060ed1951f6484d750a09d1fbd7677ed5a048cc9a2dd79b7dbde4c37ab9e897d936621ffa83b87b33f9b9a9b0e255935103adf1b90f0a6e62061591b7ca168741571da3e6a36ec91d1ae473aaaa82b4e53c8350dc13c40640bbe91dd37fcf95efd0f74de74e60357dc30753db3c126109b992eac66f1f2d568f5fd4f41658a18234c9dd5615a0234e9a129c6d536ee8b18ed9c4eeb3b3f39179d2e8e5ade0eb8617431b8c5f9684404742c9aa00cee6f673adf9d6c65e24f634cf3a6905b182c92edd1185feb66c4e7d8adc3ce154729440bb75782892464667b0b9c9b510f3a2fc0601a748ffd183f214de83f0d5538c5ef5099ac9e70b961046f87560aef698a3b34e35f5ed3dbd02fe6a246a77a689918260749a647a5920e81a985cedfe7cbcc436315bfb323b877acf5b11d2889bd5844645bf3261d9bd871c98338fe1d9a40290e75a83a2477e14d95016d79eb74e73229045c92a157c00ed640067bfddc6032305849f821e03f6dd845213a456deafe857fe11701d41568a79871ca71b96e065f13b855f5aa2b464e8401263574d56834399f62a31a812d665b9f75353977df0c8b5171c6b1f7f27cbf702ad5b3e506aa77f6a8ade373202d38308db8e7640ff819c42971f44a059b167698764fc0ef05090c691e9c50992c3784664d44f5d3f3ccac28094933de8dd80078739abacbc8036f4b321c58760b50ee8b668f002b968d6af9580cf1cdfc7f099bb597e9b2925b4d35ee9962a7f4bbd65c06f6d231d0a6fc23f3611502c26a68432b32cd780ff5f1775f3580be81c66490766be2e2e3d1137d8d3ec7490485f16bb0bd6a533d091c38b5308b0250bbad208ffa568c419d8923e351e4dfbc4cc7f3c5f26939d51dc201d4003c670976ce9ecdbb9feaa6b10794469d7ea066dcf1a6daac8889975fba9e8666f346b2efec753ba74f13d26b1621445161bbd80e86ddd90d7e759038cbb58d8543d52a69b8df27d528c38b908b5e84de68b0e3ee5e412952160066ea0ca99267f18946f0a09ecbb2dd96506f0b4142bfb6177e53160f7f3ad134cf3efbd54f9667c2296bd6b8e9f7dc7381c16bb34fa638f326183f5df2a15ead97fc7fba6ca4f0985e5787263ea368f2128db2021db74726761a02ff9002be29b469cb609a7e6cb19e1369a272fba2d7ec9ff319b6807368fd8f1bad5655cc8c8f7251ccee91ae5e9f0f656af5ebe25db28bdcf808e5273d59082615c998205dd5f7d52ec5f1d39e658b1cafcf8245cc4f94c0f5ba4bad2228169f585c260ff43699e715301f1f3823afcb1f412ad5870f4f89ef1677a498481069c7fa22e978182f0dc779046037fbde7a74ba493faecdda30fda5bce32c1a4b93fe3d12d3be336ca78d229a47005955b8dffa976875241f400253cdae301d5826d603912b11cfffc1be5bc3ed1c730dd84b48f709ddc010b0b2874798d471a986bc7cdf0e86eb886a1996c2c6563b56a5f84556a156b76c15e1aea6ba9bbed4f00d75ff927dfb1ee6c0ae7e50636dfa80404495e6a1e66081c4a9de4cfa89ae9bdd3d3dc77adb5bdb25261f068eb9dc1a822c66816309fa7ba9c9e05faacda8ab2af2df9e84a90fb1bb816b8d1be93f542d0c9bd9f104d22bd89feaf495f8ddce47e28d0a45c2411c202b4b0a2ef88cb715c44f18e3d54a177453f76813ce150b7bccbb8e02901b884f1fa17a0553f540e9c250bf3b159152f1196de41c84b3d24077138314cc8fec14fdd223fc92e8ea61a9dcfd7a7f3b00ee1aa13abddd4b0c937c83110fc4eebdd6695704511ff9dd528d52b4fd8cd611160fbd8fb52b09ebb148b77c9a169bd63e37db1cb34e2a78be9195928a1776d6eee7ff73aa449997cf4a5b670830b415b859903ff19c5f63bbb05395f2dd065039805485ceb67409ff8b25caa5e0e245d16b01907656606775c519a1493c470f2acb6f122ca6f92a0d238b04295f79a4e85eca78ae0254dee9ce6bd1a1025b01df72c8920335ec2ef43fbac58e5ad032b646fcac92b9527031339564e6d5b55ad2a09ea3f7be142a1d6b90cb9866270706060255f723237ff157bf09409e6d13812436ded30d7a0b1a81e2be9522fac028e2fd0c5997a16391d2bcefd2a99d75a660ab044c0332414697a9c12414564030fd29d96e5da85a5dbe521a205f5ecdd44e0def5c7189c1c78566dacd1c8a9d9a2a6ff58b93958e95fa88663a7457897bfb2af7370ee228b5c16543c5f6cef409893f0fdd0ffd699256b2c09b2780b66975f7c04d59b335775ceb6555e2aec4bbfd6d7108cc8ecf52f685039ab691a4cd28f3e6021fed2cd454c3908cd1a660a5fd91b54d734ce16f63c4d1bb85756b438f09663772f25254e950d9cccff92bb04dd33bf00db63c738a166cbbfeec94ec8493e72631453fbd6efb004042b0ea80e1b72d6dd3c8965673ecf3c592e1d0d0e655bd13afde4e72d0f643a240502894fcb152c80251a717a65be3b3675ec35003e792f52755e9562edd02a213b5cda0e16ad9fcd8ca481585a09d967e2bcaa438554da773691427194c64aa3bd79ddd75c8034351c26384283491e05e7f7bb7081e8c7a4f65e5f5b97d9d32ca607c874e1f179a2fe943d282ceefc300f7ad0eaac3eced181c80e62577b29579e5571fb07a58e0372715b2ca01d8f23c03c4d4698d229c12b840181a632f1a268cdfdca835b7343c989bbe79e75db803a89548a5714c09d71b0c3bcacadd127f9b2db4e3bf0af286e6be12a87f43a6d32022ac14d391e27407b5b79954bc4d9e34ce0ffe251a3d9698bb04c700444c9741eba5e003d3c456fdd5c9d17806434f37ca2fab6f03bf787ec81cdea2a7560d522f9b6d9ec488b43145e6d26bea3e83aa051a5cb07a4c5797971cfb83c3e8677e887e4f95529800f2d7a3a6414903bd8531d0a68e5c70caf35a7be6129cf3175f68c214449b00bd6cdcf576d6d9c4db1ea86ea40468241bb2f7b8b2994036c04006dd32426b2acc612fdb8c53f2f4194138aa3884224a85727a4f384f9801e437b9952dafd6da6a08ee9b2994cef57cd99dff445f08b631914e3aa070ada371b008cb079f7cb616555e6d23cdbd4476f7a21e87b54e5c0740bd62ee9b560493360493aca40c54b5bc5e0afe1dd52645a7dc201985ec6e71436aac4c9cef72ef3301e703e4273a2ab36d0fc8679d15e2f7f7e947a5515711386d399eb3339bc8ba7b5939019686b1cac3a16da87f774f29027d7e999ec24ef0a4cffd3f27d92b289699be33e6bb818754f6080bc40699420f7a256cf32660a7595b90aa16dbe59e56183653a20c4f19662b6229c4dd533fe46583671cad62647483415a8a4113ae7eac4637099f89f5092695b53b63fc9de0f8480c3f33e51476b58c19fa612fe3f5610f862ba5a3a999839bacf9d3e982053f5d20e338acdd8d06dfcb852d64f880a60dc0d9481c179707b83db37803fe3746ea1f299caf6a27e12c0380be3c14065cd2649266789826e2daa120dff9fa45b51e0594337bcb7f281cc700112a1a7c45ad3c21ff26b16b751f6bb7060fbf1faa2ccb1863d2b671e6f7261f90ce7830ad6a83bf38622d7438047bc5a336e66f5f1844041d6d6fed7c20b15f429771d51741108c02d9f4a83e14b98cb61de92884bec8717d544c9c1bf65c485b5884f7ef8df9315a2436712ad3a6ed6603bfbdf1773a131a7b073644ce197fc23f72db51f447ffc0deb84b46ff3b990deb28b8cb6cb0735127111204aa699d92d2850c308daa944036ccc82cf6c51db7e651c4abff6bf6f6990e157fa62"}}}}}, &(0x7f0000001840)={0x1, 0x2, [0x455, 0x83b, 0x5ab, 0x344]}) (async) sendto$inet(r7, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 2.579930568s ago: executing program 4 (id=539): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="002204", 0x3) write$binfmt_misc(r4, 0x0, 0x50) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x1) write$binfmt_elf64(r4, 0x0, 0x48) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0xfdef, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10, @private1, 0x3ff, 0x2}, 0x20) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x0) 2.545854081s ago: executing program 0 (id=540): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000001400)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000280)={0x1, &(0x7f00000003c0)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x208000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x2, &(0x7f0000001480)=@raw=[@map_fd={0x18, 0xb}], &(0x7f00000014c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001540)=[{0x4, 0x5, 0x8, 0xc}], 0x10, 0x8}, 0x90) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000001640)=r5) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000003c0)=""/4098, 0x0, 0x62}, 0x90) 2.138893924s ago: executing program 1 (id=541): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 1.903851644s ago: executing program 0 (id=542): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x110, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@dev, @broadcast, 0x0, 0x0, 0x4, 0x0, {@mac=@multicast}, {@mac=@random="35132fb7b4d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x110, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@dev, @broadcast, 0x0, 0x0, 0x4, 0x0, {@mac=@multicast}, {@mac=@random="35132fb7b4d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r8, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f0000000e00000700000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000001400040076657468315f746f5f687372000000000c0017800400060004000500"], 0x44}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r10 = socket$alg(0x26, 0x5, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) tee(r10, r10, 0x7, 0x0) (async) tee(r10, r10, 0x7, 0x0) socket$kcm(0x2, 0x2, 0x2) (async) socket$kcm(0x2, 0x2, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xb4) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="040000d1", @ANYRES16=r2, @ANYBLOB="00022abd7000fcdbdf250500000005001200090000000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) 1.850870328s ago: executing program 1 (id=543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a010400000000000000000255180018000480140001800c000100626974776973650004000280140000001100010000000000000000000000000a"], 0x54}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2}}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x589c, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}, @hopopts={{0x18, 0x29, 0x36, {0x32}}}], 0x30}}], 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000200)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x1d8, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfd, 0x9}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@icmp={{0x28}, {0x11, 'h/'}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @random="8b804de7ccff"}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000640)={r6, 0x1, 0x6, @link_local}, 0x10) listen(r3, 0xfff) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="000000000400", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 1.547007051s ago: executing program 4 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff77) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000080)='signal_generate\x00', r7}, 0x10) r9 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6cd06734", @ANYRESHEX=0x0, @ANYBLOB="00d980bd7000fbdbdf250500000008000500ff7f000008000500e6ffffff0500070003000000080005000ff1000050000180140002006272696467655f736c6176655f30000008000300010000000800030001000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRESDEC=r5, @ANYRESOCT=r8, @ANYBLOB="7459236fdd57d2655c", @ANYRES32=0x0, @ANYRES16=r7], 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8091) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r11, @ANYRESOCT=r6, @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00bdc246d9dd413cfb738ca499ad2651f533b1faabffb92ec2825cb02c7f44f19985c10e9835a207500d68728fcfa887612c40281958d594d80494dc92dc69ce55eae5c630eaccb7537e011c7b1454c79e547246162c3c735dca65bab831a35a8513068b7bc7d7c0f7eadd18f156a6d96f1a66a10d7d43db3f36b717600759f6248f5d64cd57ddf805259292e0e7659190a1ddfb10c53393e19079fc288cf2b68e50e7cfaed6305a85f99a021f74a89280d9fcfa3e6cd5c4983b7dda25054aa38267f1450099ac8841962009", @ANYRES16=r12, @ANYBLOB="200029bd7000fedbdf255c00000008006b00b400000008006b005a0000002c006b0037000000"], 0x2c}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e220800180076795fb2"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$binfmt_script(r13, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r13, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000da00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007090000f8ffffffb702000008000000b703000000000000850000002500000095"], &(0x7f0000000040)='syzkaller\x00', 0xd}, 0x90) 1.239893535s ago: executing program 1 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000240)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'pim6reg\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 1.066005348s ago: executing program 0 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@struct={0x6, 0x4, 0x0, 0x4, 0x0, 0xf1a4, [{0xa, 0x3, 0x3daa}, {0xf, 0x1, 0x8}, {0x0, 0x5}, {0x1, 0x5, 0x8}]}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0x4, [{0xc, 0x5, 0xc90f}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000f80)=""/4096, 0x96, 0x1000, 0x0, 0x200}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x47, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7], 0x0, 0x1, 0x63, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000002300), &(0x7f0000002340)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000220000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r12], 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303f4001c005a8018000002"], 0x44}}, 0x0) 1.028483647s ago: executing program 4 (id=547): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x8916, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000001c0)={0x2b}) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback}}}], 0x20}}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r7, 0x114, 0x271a, 0x0, 0x20000008) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @multicast1, {[@rr={0x7, 0x3, 0xd0}]}}}}}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000300)={0xef, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x43, 0x0, 0xfe, 0x0, 0x4, 0x8}, 0xe) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x2, 0x0, @loopback}, 0x1c) close(r5) 784.015425ms ago: executing program 2 (id=548): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180300000019d448bc842ac0b10000001801000011af000000000000002020207b1af8ff00000000bfbd00000000000007010000f863e2e6967827ccc0f0bc1a76d2bee0b4caf73bec7f1f178ef1534e328790e0266d5e1873214d399a3212284c4e07f9ee8ddd7667b203f15e470148ecf6f4a1da6fbb57bd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 717.949393ms ago: executing program 0 (id=549): socket$netlink(0x10, 0x3, 0x0) unshare(0x10000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a000802003bd70c9b97e46abd00"/24], 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/7, 0x7) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000f1400022dbd7000d244df25080001000100000008004500636d61000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x4040881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x3ff}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000880)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000071410022dbd7000fedbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x845) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000c00)={r3, 0x80, "b754ef08b9af266b0cf939116dba13a464877024763d1270df356178795d18ce10f1695265afc79d15c1d7b60a8ffafc2e700431b22e062101ded33dfa541d8ab56ef4b07640b737030aee748701a32d100c05ebd201bfd7286bc2226d0ab0faef286b10dd566958e58b66f73e7c5d07938315b4d06f51f9a00c998a782a4912"}, &(0x7f0000000140)=0x88) sendfile(r8, r6, 0x0, 0xffefffff) 708.390942ms ago: executing program 1 (id=550): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d809f2e2ff", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x300, 0xf8, 0x300, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xffffffff, 0xffffffff, 0xff000000, 0xff], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'caif0\x00', 'syzkaller0\x00', {0xff}, {}, 0x3a, 0x8, 0x3, 0xd}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x0, 0x7], 0x8, 0x1, 0x4, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast1, @mcast1, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @empty, @mcast2]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x100) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x39000000, @remote}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d40a0000", @ANYRES16=r7, @ANYBLOB="390229bd7000fcdbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="c4005a80a8000380140003003f00a700fdff070001010800ffff0800290002004e541d380a1d082c4b400b56013e110e25523a1a38114b21353b4847382919504a2126111f00000014000300000008000300960007008c000900760214000500fafffcfffcff020008003f00010001000f0001004800481b0030011b24362400050007000200000014000500880cff7f030008000100070055064f47050006000000000005000400020000001800028014000300ff03080092ff3a00000100080400ff07f8005a800c"], 0xad4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x20000800) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 583.777121ms ago: executing program 2 (id=551): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r2, 0x0, 0x10b, &(0x7f0000000540)='\xf9\xcd\x0fx\xb4\r\x18D/\x15\x92\t\xafNH\\\x8e\xe7\r\xb9f\xc4\xa1\xb8~\x99\x91t\t\xce\xd8\xa0\x01\xf6Aci\xb6)Cje^\xf1\xab\x7f\xe2\xb0\x1a\xed/\x9eTJ\xb02\xc0\x83G\xa1\xb2\x98\x92\xd9Dx\x01\xf3]\xcd\xfd\xe9+q\xea\x88@\xd2O\xf1abc\x8f\x97\xaf\xf7\xc3\xc6<*\b@QEI\x88o \xb8\x82W\x8d45K@\x15\x91\xe3\x00\xd9\x92%\b\xe7\xd3\x8c3\x9c\xdd~\x80P\x8eV\xaaX6\x13\x033I\xf7\x8b\x86\x0f\xc8\x80I\x00\x8b\x88\xb3\x11>A\xc3V\x8d~Q\xb6\xc3\xbe\x98Uy\xb8(A\x0eu$\xc4`\xe5\xfb\xcc\xe0\xba\x06\xf7\xe8*}\x98\x8c\xd8/b\x8d\xac3\xc1\xb9\x97G\xb5\xb4Xi_\xdb;]\x1f\x84\xb4\xeb\x89\xc8\xcb\x11\x94\xc1\x15c<\xdf\xb0-\xc0\x0f21\xcc\x86\x9dUs\xe7x\xedH\x9d\xbc\"\xcf\xc2\xe7\xc1c+e\'\xdd\xaf@\xb68\xfe\xd1\xfej \xa2G=\xe6@<\xe2\xb6\x8e\x18\bj\xbeM}\xbd\xc6\xadS\xd4\x1c'}, 0x30) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff13"], 0x30}}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r5, 0xffffffffffffffff, 0x1f, 0x0, 0x0, @link_id}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100000000852600000000000085180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) 462.161209ms ago: executing program 4 (id=552): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080083de357e0000000000119078ac1414bbac141407000000000000006a03a9000000000000"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) r1 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40000c4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) r5 = socket(0x22, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x7fb10727dd89, 0x0) close(r6) r7 = socket(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f0000000340), &(0x7f0000000340)=@tcp=r7}, 0x20) recvmmsg(r7, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/2, 0x2}], 0x1}}], 0x408, 0x40, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0x39, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x24004090}, 0x811) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000540)=ANY=[@ANYBLOB="c4c70000000000000006c125049258dd7730ed476070c779370b1471cd57f65d0562622a60700da26c8dabe33fa349ff439fcca00c759e3520e09753f747d9bd78da986129ad68f13f458bf6c0e91e871e8b80d027358828b97719bdb0539df3b00c030bce493e1bf2414cef6502c19447d32270a13f81e996c5d5b9f52c639620faa8"], 0x262) syz_emit_ethernet(0x2e, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020002000000011c97800000000000000008903aa0000004e200008907878e5db5af4c4a0804b952b83ede79252e0038fb7243f5d4bff7bb1d4834c693fc5e987f1af135e6d3cd3337281bcada4847fa731fbeaba239617c664cef210b3274e2013274205b4a2dadd9748a042285419a53b1bcd86dd1353baccc468eb21ec9b5307785c"], 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000a40)=ANY=[@ANYBLOB="18193e00505050505050ffffffffffff50505050505011080802110000010802110000015100889a4b98fa4ea5f27b52c8d718410d98a9e539dd20503e335dd3d553356673a313f51a66be062d88ba80e6f44fef34884f2743360dcc9a1bc75343b78450610a6433c429ab0cab444361ca00fa982a7ec200080211000000080211000000011eec00080211000001ffffffffffff1f00fc130be6bcad38a2f1380def5dc144595cd6f2569771dbdc22543f6f23e5b0000000"], 0xb8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r9, 0x56) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) 261.935821ms ago: executing program 1 (id=553): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) 260.235199ms ago: executing program 2 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'bridge_slave_1\x00'}}) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r6, 0x2) listen(r5, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x200000, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000300110800450000380000000000019001ac1414aa03049078120002282500000000000000003300007f000001ac1e0001000022ebffff0000"], 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r10, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], &(0x7f0000000380)='GPL\x00', 0x401, 0x72, &(0x7f0000000440)=""/114, 0x41100, 0x2, '\x00', r9, 0x0, r13, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r11], &(0x7f0000000600)=[{0x4, 0x5, 0xd, 0x9}, {0x4, 0x5, 0x8, 0x3}, {0x5, 0x3, 0x5, 0x3}], 0x10, 0x4}, 0x90) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x6, 0x3ff, {{0x37, 0x4, 0x2, 0x38, 0xdc, 0x67, 0x0, 0xfb, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4, 0x3}, @ssrr={0x89, 0x17, 0xc0, [@private=0xa010102, @local, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x66, [@multicast1, @multicast2, @multicast2, @private=0xa010100]}, @cipso={0x86, 0x45, 0x3, [{0x2, 0xb, "a8cfa80b86c1013927"}, {0x7, 0x12, "dbb9c6d471f65660260d46bb5c17c8a9"}, {0x1, 0x11, "de16866a3b03ccefab364d6e710dab"}, {0x6, 0x5, "b423ee"}, {0x0, 0x6, "06911ce2"}, {0x0, 0x6, "1ffe98a9"}]}, @ssrr={0x89, 0xb, 0xa8, [@broadcast, @loopback]}, @rr={0x7, 0x1f, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x82, 0x10, "9d07144abfa262e6bd46c6c353ff"}, @rr={0x7, 0x17, 0x39, [@broadcast, @multicast2, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0x15}, 0x4) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 64) getsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x21, 0x20000841, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 68.438748][ T5219] cgroup: Unknown subsys name 'net' [ 68.642213][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.387531][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.865490][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.872190][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.948108][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.970936][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.979175][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.987870][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.996904][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.006129][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.041922][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.046796][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.057011][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.057713][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.072597][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.080416][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.080777][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.092186][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.098502][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.104026][ T5248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.109149][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.117350][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.124208][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.131223][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.136798][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.151969][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.162906][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.163275][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.183620][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.199805][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.214133][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.223468][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.235254][ T5250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.242921][ T5250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.738743][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 73.859048][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 74.003732][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 74.086065][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 74.098005][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.106370][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.113969][ T5237] bridge_slave_0: entered allmulticast mode [ 74.121547][ T5237] bridge_slave_0: entered promiscuous mode [ 74.155354][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.162562][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.169961][ T5229] bridge_slave_0: entered allmulticast mode [ 74.177631][ T5229] bridge_slave_0: entered promiscuous mode [ 74.219590][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.227117][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.235291][ T5237] bridge_slave_1: entered allmulticast mode [ 74.242851][ T5237] bridge_slave_1: entered promiscuous mode [ 74.250962][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.258155][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.269646][ T5229] bridge_slave_1: entered allmulticast mode [ 74.276881][ T5229] bridge_slave_1: entered promiscuous mode [ 74.299078][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 74.362294][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.406470][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.447820][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.489542][ T5229] team0: Port device team_slave_0 added [ 74.516549][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.534200][ T5229] team0: Port device team_slave_1 added [ 74.609806][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.617123][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.625538][ T5232] bridge_slave_0: entered allmulticast mode [ 74.632829][ T5232] bridge_slave_0: entered promiscuous mode [ 74.641893][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.649143][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.656880][ T5238] bridge_slave_0: entered allmulticast mode [ 74.664252][ T5238] bridge_slave_0: entered promiscuous mode [ 74.672951][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.680113][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.687431][ T5238] bridge_slave_1: entered allmulticast mode [ 74.694929][ T5238] bridge_slave_1: entered promiscuous mode [ 74.733515][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.740499][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.766512][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.779892][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.787335][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.795388][ T5232] bridge_slave_1: entered allmulticast mode [ 74.803121][ T5232] bridge_slave_1: entered promiscuous mode [ 74.824930][ T5237] team0: Port device team_slave_0 added [ 74.865521][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.872619][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.899230][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.940021][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.951278][ T5237] team0: Port device team_slave_1 added [ 74.972101][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.979272][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.986986][ T5235] bridge_slave_0: entered allmulticast mode [ 74.994771][ T5235] bridge_slave_0: entered promiscuous mode [ 75.003513][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.010671][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.018034][ T5235] bridge_slave_1: entered allmulticast mode [ 75.025698][ T5235] bridge_slave_1: entered promiscuous mode [ 75.057594][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.069683][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.107304][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.114727][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.140907][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.182414][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.219691][ T5238] team0: Port device team_slave_0 added [ 75.227239][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.235528][ T5240] Bluetooth: hci0: command tx timeout [ 75.237913][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.267652][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.291032][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.302052][ T5240] Bluetooth: hci2: command tx timeout [ 75.302089][ T5233] Bluetooth: hci4: command tx timeout [ 75.302161][ T5249] Bluetooth: hci1: command tx timeout [ 75.307979][ T5250] Bluetooth: hci3: command tx timeout [ 75.336174][ T5238] team0: Port device team_slave_1 added [ 75.384678][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.415919][ T5232] team0: Port device team_slave_0 added [ 75.436990][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.444088][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.470403][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.490799][ T5229] hsr_slave_0: entered promiscuous mode [ 75.498086][ T5229] hsr_slave_1: entered promiscuous mode [ 75.536234][ T5235] team0: Port device team_slave_0 added [ 75.544320][ T5232] team0: Port device team_slave_1 added [ 75.550853][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.558296][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.584831][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.620520][ T5235] team0: Port device team_slave_1 added [ 75.675202][ T5237] hsr_slave_0: entered promiscuous mode [ 75.682313][ T5237] hsr_slave_1: entered promiscuous mode [ 75.688924][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.696863][ T5237] Cannot create hsr debugfs directory [ 75.726942][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.734183][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.760419][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.774463][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.781743][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.807976][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.878724][ T5238] hsr_slave_0: entered promiscuous mode [ 75.885515][ T5238] hsr_slave_1: entered promiscuous mode [ 75.892282][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.899868][ T5238] Cannot create hsr debugfs directory [ 75.919871][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.926983][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.953276][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.966609][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.973671][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.999754][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.100960][ T5232] hsr_slave_0: entered promiscuous mode [ 76.111133][ T5232] hsr_slave_1: entered promiscuous mode [ 76.118204][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.125936][ T5232] Cannot create hsr debugfs directory [ 76.337290][ T5235] hsr_slave_0: entered promiscuous mode [ 76.348083][ T5235] hsr_slave_1: entered promiscuous mode [ 76.355108][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.362933][ T5235] Cannot create hsr debugfs directory [ 76.603311][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.617738][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.628258][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.644431][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.814961][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.826788][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.850249][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.862491][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.958445][ T5238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.997168][ T5238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.009226][ T5238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.042619][ T5238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.128297][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.143735][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.164826][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.180611][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.196900][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.278759][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.303940][ T5240] Bluetooth: hci0: command tx timeout [ 77.338638][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.350426][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.366178][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.377500][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.385177][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.392470][ T5249] Bluetooth: hci1: command tx timeout [ 77.394452][ T5250] Bluetooth: hci3: command tx timeout [ 77.397892][ T5249] Bluetooth: hci4: command tx timeout [ 77.406921][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.408863][ T5240] Bluetooth: hci2: command tx timeout [ 77.415975][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.445052][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.476881][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.626611][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.674750][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.697000][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.704294][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.714737][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.722080][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.814920][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.832948][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.900920][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.908163][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.940823][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.967508][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.974811][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.027899][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.035159][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.096775][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.103998][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.157719][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.256313][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.270775][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.315869][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.323207][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.380281][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.387527][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.413207][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.549627][ T5237] veth0_vlan: entered promiscuous mode [ 78.639672][ T5237] veth1_vlan: entered promiscuous mode [ 78.674312][ T5229] veth0_vlan: entered promiscuous mode [ 78.720280][ T5229] veth1_vlan: entered promiscuous mode [ 78.910859][ T5237] veth0_macvtap: entered promiscuous mode [ 78.920443][ T5229] veth0_macvtap: entered promiscuous mode [ 78.934718][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.957715][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.969995][ T5237] veth1_macvtap: entered promiscuous mode [ 78.981112][ T5229] veth1_macvtap: entered promiscuous mode [ 79.044077][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.080530][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.136962][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.151316][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.169063][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.180894][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.212873][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.226173][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.238822][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.250896][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.260262][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.269495][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.278387][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.303036][ T5232] veth0_vlan: entered promiscuous mode [ 79.323356][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.340193][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.349779][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.358935][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.383179][ T5240] Bluetooth: hci0: command tx timeout [ 79.400976][ T5235] veth0_vlan: entered promiscuous mode [ 79.432772][ T5232] veth1_vlan: entered promiscuous mode [ 79.462823][ T5249] Bluetooth: hci4: command tx timeout [ 79.462842][ T5233] Bluetooth: hci3: command tx timeout [ 79.462886][ T5233] Bluetooth: hci1: command tx timeout [ 79.468376][ T5240] Bluetooth: hci2: command tx timeout [ 79.488331][ T5235] veth1_vlan: entered promiscuous mode [ 79.662551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.672128][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.709525][ T5232] veth0_macvtap: entered promiscuous mode [ 79.748348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.761232][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.793568][ T5232] veth1_macvtap: entered promiscuous mode [ 79.820478][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.837983][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.859966][ T5235] veth0_macvtap: entered promiscuous mode [ 79.882906][ T5235] veth1_macvtap: entered promiscuous mode [ 79.895743][ T5238] veth0_vlan: entered promiscuous mode [ 79.918736][ T5238] veth1_vlan: entered promiscuous mode [ 79.969689][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.980925][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.989154][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.996583][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.014604][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.025978][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.038657][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.060884][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.078154][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.089015][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.099950][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.112725][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.126825][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.140954][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.179436][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.192603][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.206951][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.220854][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.238046][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.279758][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.302918][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.314498][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.325631][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.336788][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.348183][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.368427][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.393946][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.409246][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.429995][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.439608][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.481045][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.512034][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.533177][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.555677][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.655686][ T5238] veth0_macvtap: entered promiscuous mode [ 80.704720][ T5238] veth1_macvtap: entered promiscuous mode [ 80.878890][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.900031][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.913931][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.924850][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.935754][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.948151][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.965653][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.979061][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.992214][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.075406][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.095936][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.110725][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.131907][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.162557][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.181539][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.209461][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.234823][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.249118][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.259251][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.283922][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.293710][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.309528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.321741][ T5238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.330664][ T5238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.347192][ T5238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.358771][ T5238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.461968][ T5240] Bluetooth: hci0: command tx timeout [ 81.542372][ T5240] Bluetooth: hci2: command tx timeout [ 81.542919][ T5250] Bluetooth: hci1: command tx timeout [ 81.547882][ T5249] Bluetooth: hci3: command tx timeout [ 81.553701][ T5233] Bluetooth: hci4: command tx timeout [ 81.699637][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.738804][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.907965][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.941667][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.055566][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.080901][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.104616][ T5341] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 82.148584][ T5341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.191642][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.199516][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399022][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.442645][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.814846][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 82.842655][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 82.910277][ T5351] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.923098][ T5346] can: request_module (can-proto-0) failed. [ 82.951339][ T5356] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 82.969052][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.987476][ T5351] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 83.009813][ T5351] macvlan2: entered allmulticast mode [ 83.032874][ T5351] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 83.079271][ T5358] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 83.191516][ T5358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.243043][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.377165][ T5373] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 83.502312][ T5373] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.535640][ T5373] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.972721][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 84.010111][ T5284] IPVS: starting estimator thread 0... [ 84.131735][ T5392] IPVS: using max 17 ests per chain, 40800 per kthread [ 84.945344][ T5405] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 85.227988][ T5409] tipc: Started in network mode [ 85.251685][ T5409] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 85.265878][ T5409] tipc: Enabled bearer , priority 10 [ 85.317934][ T5409] tipc: Resetting bearer [ 85.492673][ T5409] tipc: Disabling bearer [ 85.813196][ T5420] Bluetooth: MGMT ver 1.23 [ 85.855327][ T5420] Bluetooth: hci3: unsupported parameter 64512 [ 85.887434][ T5428] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 85.893405][ T5420] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 86.334092][ T5441] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 86.410313][ T5452] dccp_close: ABORT with 32 bytes unread [ 86.799687][ T5467] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.817310][ T5467] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.830871][ T5467] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.884443][ T5467] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.914886][ T5467] geneve2: entered promiscuous mode [ 86.927894][ T5467] geneve2: entered allmulticast mode [ 87.040691][ T5478] pim6reg1: entered promiscuous mode [ 87.051935][ T5478] pim6reg1: entered allmulticast mode [ 87.146606][ T5484] netlink: 88 bytes leftover after parsing attributes in process `syz.2.41'. [ 87.216216][ T5484] netlink: 192 bytes leftover after parsing attributes in process `syz.2.41'. [ 87.583276][ T5497] bond0: entered promiscuous mode [ 87.588451][ T5497] bond_slave_0: entered promiscuous mode [ 87.605665][ T5497] bond_slave_1: entered promiscuous mode [ 87.616332][ T5497] team0: entered promiscuous mode [ 87.636118][ T5497] team_slave_0: entered promiscuous mode [ 87.650691][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 87.656717][ T5497] team_slave_1: entered promiscuous mode [ 87.705558][ T5497] bond0: left promiscuous mode [ 87.720363][ T5497] bond_slave_0: left promiscuous mode [ 87.727219][ T5501] xt_HMARK: spi-set and port-set can't be combined [ 87.730945][ T5497] bond_slave_1: left promiscuous mode [ 87.756152][ T5497] team0: left promiscuous mode [ 87.765462][ T5497] team_slave_0: left promiscuous mode [ 87.779152][ T5497] team_slave_1: left promiscuous mode [ 88.087893][ T5516] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 88.626364][ T5541] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 88.647336][ T5540] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.60'. [ 88.667886][ T5541] netlink: 'syz.2.61': attribute type 4 has an invalid length. [ 88.680460][ T5540] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.60'. [ 88.697406][ T5541] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.61'. [ 88.749435][ T5546] netlink: 596 bytes leftover after parsing attributes in process `syz.2.61'. [ 89.041889][ T29] audit: type=1107 audit(1724495182.963:2): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O]kBEhO+,*| [ 89.745976][ T5574] dump_stack_lvl+0x241/0x360 [ 89.750795][ T5574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.756033][ T5574] ? __pfx__printk+0x10/0x10 [ 89.760678][ T5574] ? __pfx_lock_release+0x10/0x10 [ 89.765757][ T5574] should_fail_ex+0x3b0/0x4e0 [ 89.770479][ T5574] _copy_from_user+0x2f/0xe0 [ 89.775473][ T5574] copy_msghdr_from_user+0xae/0x680 [ 89.780735][ T5574] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.786614][ T5574] __sys_recvmsg+0x252/0x3e0 [ 89.791259][ T5574] ? __pfx___sys_recvmsg+0x10/0x10 [ 89.796450][ T5574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.802821][ T5574] ? do_syscall_64+0x100/0x230 [ 89.807626][ T5574] ? do_syscall_64+0xb6/0x230 [ 89.812343][ T5574] do_syscall_64+0xf3/0x230 [ 89.816889][ T5574] ? clear_bhb_loop+0x35/0x90 [ 89.821612][ T5574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.827550][ T5574] RIP: 0033:0x7f97f3979e79 [ 89.831998][ T5574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.851641][ T5574] RSP: 002b:00007f97f47aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 89.860077][ T5574] RAX: ffffffffffffffda RBX: 00007f97f3b15f80 RCX: 00007f97f3979e79 [ 89.868065][ T5574] RDX: 0000000040020123 RSI: 0000000020000280 RDI: 0000000000000005 [ 89.876052][ T5574] RBP: 00007f97f47aa090 R08: 0000000000000000 R09: 0000000000000000 [ 89.884038][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.892024][ T5574] R13: 0000000000000000 R14: 00007f97f3b15f80 R15: 00007ffc1421bae8 [ 89.900022][ T5574] [ 90.069437][ T5591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 90.465056][ T5596] bond0: entered promiscuous mode [ 90.470538][ T5596] bond_slave_0: entered promiscuous mode [ 90.480068][ T5596] bond_slave_1: entered promiscuous mode [ 90.489466][ T5596] batadv0: entered promiscuous mode [ 90.591557][ T5599] bond0: left promiscuous mode [ 90.596698][ T5599] bond_slave_0: left promiscuous mode [ 90.613256][ T5599] bond_slave_1: left promiscuous mode [ 90.629471][ T5599] batadv0: left promiscuous mode [ 91.057897][ T5623] FAULT_INJECTION: forcing a failure. [ 91.057897][ T5623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.097697][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz.3.86 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 91.108455][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.118594][ T5623] Call Trace: [ 91.121911][ T5623] [ 91.124871][ T5623] dump_stack_lvl+0x241/0x360 [ 91.129600][ T5623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.134940][ T5623] ? __pfx__printk+0x10/0x10 [ 91.139606][ T5623] ? snprintf+0xda/0x120 [ 91.143903][ T5623] should_fail_ex+0x3b0/0x4e0 [ 91.148630][ T5623] _copy_to_user+0x2f/0xb0 [ 91.153104][ T5623] simple_read_from_buffer+0xca/0x150 [ 91.158573][ T5623] proc_fail_nth_read+0x1ec/0x260 [ 91.163751][ T5623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.169351][ T5623] ? rw_verify_area+0x520/0x6b0 [ 91.174253][ T5623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.179850][ T5623] vfs_read+0x204/0xbc0 [ 91.184068][ T5623] ? __pfx_lock_release+0x10/0x10 [ 91.189155][ T5623] ? __pfx_vfs_read+0x10/0x10 [ 91.193886][ T5623] ? __fget_files+0x29/0x470 [ 91.198523][ T5623] ? __fget_files+0x3f6/0x470 [ 91.203258][ T5623] ksys_read+0x1a0/0x2c0 [ 91.207553][ T5623] ? __pfx_ksys_read+0x10/0x10 [ 91.212363][ T5623] ? do_syscall_64+0x100/0x230 [ 91.217169][ T5623] ? do_syscall_64+0xb6/0x230 [ 91.221899][ T5623] do_syscall_64+0xf3/0x230 [ 91.226446][ T5623] ? clear_bhb_loop+0x35/0x90 [ 91.231169][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.237105][ T5623] RIP: 0033:0x7f97f39788bc [ 91.241565][ T5623] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 91.261299][ T5623] RSP: 002b:00007f97f47aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.269847][ T5623] RAX: ffffffffffffffda RBX: 00007f97f3b15f80 RCX: 00007f97f39788bc [ 91.277886][ T5623] RDX: 000000000000000f RSI: 00007f97f47aa0a0 RDI: 0000000000000007 [ 91.285982][ T5623] RBP: 00007f97f47aa090 R08: 0000000000000000 R09: 0000000000000000 [ 91.293992][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.302347][ T5623] R13: 0000000000000000 R14: 00007f97f3b15f80 R15: 00007ffc1421bae8 [ 91.310557][ T5623] [ 92.083130][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 92.197522][ T5669] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 92.348522][ T8] cfg80211: failed to load regulatory.db [ 92.365926][ T5674] netlink: 'syz.1.102': attribute type 10 has an invalid length. [ 92.389560][ T5674] team0: Device ipvlan1 failed to register rx_handler [ 92.519192][ T5679] Zero length message leads to an empty skb [ 93.355873][ T5717] syz.1.112 uses obsolete (PF_INET,SOCK_PACKET) [ 93.952324][ T5733] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 94.001738][ T5733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.118'. [ 94.045646][ T5733] bridge0: port 3(batadv0) entered blocking state [ 94.132102][ T5733] bridge0: port 3(batadv0) entered disabled state [ 94.154004][ T5733] batadv0: entered allmulticast mode [ 94.180391][ T5733] batadv0: entered promiscuous mode [ 94.204269][ T5733] bridge0: port 3(batadv0) entered blocking state [ 94.211315][ T5733] bridge0: port 3(batadv0) entered forwarding state [ 94.240344][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 94.370922][ T5736] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 94.458552][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.468583][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.643377][ T5751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.121'. [ 95.072361][ T5768] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 95.105141][ T5768] team0: Device ipvlan1 failed to register rx_handler [ 95.132989][ T5774] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 95.205654][ T5774] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 95.689827][ T5807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 96.096165][ T5819] netlink: 'syz.3.142': attribute type 32 has an invalid length. [ 96.229379][ T5825] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 96.353041][ T5829] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 96.361040][ T5822] xt_CT: No such helper "netbios-ns" [ 96.397958][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.408341][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 96.456316][ T5835] netlink: 'syz.3.147': attribute type 12 has an invalid length. [ 96.464336][ T5835] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.147'. [ 96.496294][ T5835] xt_TCPMSS: Only works on TCP SYN packets [ 96.517281][ T5838] sock: sock_timestamping_bind_phc: sock not bind to device [ 96.816532][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 96.948588][ T5855] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 96.965566][ T5855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.154'. [ 96.977269][ T5855] bridge0: port 3(syz_tun) entered blocking state [ 96.985949][ T5855] bridge0: port 3(syz_tun) entered disabled state [ 97.008555][ T5855] syz_tun: entered allmulticast mode [ 97.028467][ T5855] syz_tun: entered promiscuous mode [ 97.039115][ T5855] bridge0: port 3(syz_tun) entered blocking state [ 97.045791][ T5855] bridge0: port 3(syz_tun) entered forwarding state [ 97.762604][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 98.152219][ T5905] xt_TCPMSS: Only works on TCP SYN packets [ 98.273879][ T5915] sctp: [Deprecated]: syz.2.167 (pid 5915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.273879][ T5915] Use struct sctp_sack_info instead [ 98.662752][ T5900] IPVS: Scheduler module ip_vs_sip not found [ 98.824031][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 99.501763][ T5983] __nla_validate_parse: 1 callbacks suppressed [ 99.501786][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 99.581825][ T5992] warning: `syz.2.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.812963][ T5998] netlink: 'syz.4.181': attribute type 11 has an invalid length. [ 99.844567][ T6001] netlink: 'syz.0.182': attribute type 33 has an invalid length. [ 99.925059][ T6004] sch_fq: defrate 0 ignored. [ 100.054360][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.182'. [ 100.085569][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.182'. [ 100.395372][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 100.441181][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 100.687929][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 101.382102][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 102.500187][ T6108] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 102.648074][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 102.698182][ T6114] netlink: 'syz.0.217': attribute type 3 has an invalid length. [ 102.826327][ T5233] Bluetooth: hci4: command tx timeout [ 104.114412][ T6168] Bluetooth: MGMT ver 1.23 [ 104.137498][ T6168] Bluetooth: MGMT ver 1.23 [ 104.160450][ T6168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 104.213593][ T6172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.235'. [ 105.252450][ T6223] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 105.597021][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 105.697072][ T6231] netlink: 'syz.3.251': attribute type 10 has an invalid length. [ 105.829699][ T6231] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 105.852982][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 106.129023][ T5322] IPVS: starting estimator thread 0... [ 106.143587][ T6268] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 106.182151][ T5233] Bluetooth: hci0: command tx timeout [ 106.252126][ T6270] IPVS: using max 15 ests per chain, 36000 per kthread [ 106.802075][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.831702][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.871114][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.891334][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.952365][ T6310] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 106.978180][ T6310] netlink: 224 bytes leftover after parsing attributes in process `syz.0.270'. [ 107.803235][ T6338] netlink: 'syz.0.281': attribute type 178 has an invalid length. [ 107.973566][ T6349] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.151941][ T6353] netlink: 'syz.4.286': attribute type 2 has an invalid length. [ 108.237848][ T6354] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 108.258763][ T6354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.671069][ T6378] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 108.694129][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.294'. [ 109.279790][ T6402] ɶƣ0GCTw: entered promiscuous mode [ 109.314923][ T6406] netlink: 288 bytes leftover after parsing attributes in process `syz.4.302'. [ 109.354434][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'. [ 110.488221][ T6458] netlink: 'syz.2.316': attribute type 5 has an invalid length. [ 110.700481][ T6460] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 111.690561][ T6506] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20003 [ 111.730519][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 111.923640][ T6512] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.951962][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 112.480848][ T6537] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.340'. [ 112.608434][ T6528] veth0_vlan: left promiscuous mode [ 112.847269][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 112.977919][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 113.275538][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.309751][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 113.535266][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.581900][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 113.777567][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.798012][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 113.823649][ T6579] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.879513][ T6569] bridge0: port 3(syz_tun) entered disabled state [ 113.939180][ T6569] syz_tun (unregistering): left allmulticast mode [ 113.973910][ T6569] syz_tun (unregistering): left promiscuous mode [ 113.992061][ T6569] bridge0: port 3(syz_tun) entered disabled state [ 114.078847][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 114.102907][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.134571][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.174199][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.192321][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.201198][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.214406][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.222943][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.230576][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.230861][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 114.256637][ T6582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.356'. [ 114.429626][ T6595] xt_policy: too many policy elements [ 114.432434][ T6573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.681042][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 114.762848][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 114.776049][ T12] bridge_slave_1: left allmulticast mode [ 114.785220][ T6602] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.364'. [ 114.822282][ T12] bridge_slave_1: left promiscuous mode [ 114.829343][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.895507][ T12] bridge_slave_0: left allmulticast mode [ 114.901282][ T12] bridge_slave_0: left promiscuous mode [ 114.941648][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.566878][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.580590][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.596143][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 115.608926][ T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 115.624788][ T12] bond0 (unregistering): Released all slaves [ 115.877434][ T12] ɶƣ0GCTw: left promiscuous mode [ 116.341815][ T5233] Bluetooth: hci2: command tx timeout [ 116.450823][ T12] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 116.560474][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 116.710889][ T12] hsr_slave_0: left promiscuous mode [ 116.769091][ T12] hsr_slave_1: left promiscuous mode [ 116.788747][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.796939][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.816654][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.832012][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.880581][ T12] veth1_macvtap: left promiscuous mode [ 116.904948][ T12] veth0_macvtap: left promiscuous mode [ 116.928002][ T12] veth1_vlan: left promiscuous mode [ 116.942551][ T12] veth0_vlan: left promiscuous mode [ 116.992194][ T6678] __nla_validate_parse: 4 callbacks suppressed [ 116.992215][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.380'. [ 117.796504][ T12] team0 (unregistering): Port device team_slave_1 removed [ 117.837553][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.421701][ T5233] Bluetooth: hci2: command tx timeout [ 118.770678][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 118.814354][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.848583][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.867360][ T6588] bridge_slave_0: entered allmulticast mode [ 118.893573][ T6588] bridge_slave_0: entered promiscuous mode [ 118.924357][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.944460][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.952476][ T6588] bridge_slave_1: entered allmulticast mode [ 118.960127][ T6588] bridge_slave_1: entered promiscuous mode [ 119.239532][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.302336][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.321672][ T6722] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 119.352548][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 119.476255][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.541258][ T6722] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.638480][ T6729] can: request_module (can-proto-5) failed. [ 119.835087][ T6588] team0: Port device team_slave_0 added [ 119.885536][ T6588] team0: Port device team_slave_1 added [ 119.979932][ T12] IPVS: stop unused estimator thread 0... [ 120.103830][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.139495][ T6749] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.139826][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.261996][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.284820][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.301315][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.381924][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.502773][ T5233] Bluetooth: hci2: command tx timeout [ 120.551959][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 120.797390][ T6767] netlink: 'syz.0.403': attribute type 3 has an invalid length. [ 120.833293][ T6767] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.403'. [ 121.078939][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 121.096803][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 121.166564][ T6771] ipvlan2: entered allmulticast mode [ 121.175995][ T6771] veth0_vlan: entered allmulticast mode [ 121.225211][ T6588] hsr_slave_0: entered promiscuous mode [ 121.240696][ T6588] hsr_slave_1: entered promiscuous mode [ 121.267450][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.280142][ T6588] Cannot create hsr debugfs directory [ 121.591879][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 122.581488][ T5233] Bluetooth: hci2: command tx timeout [ 123.806595][ T6588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.905714][ T6588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.002361][ T6588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.091660][ T6588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.416264][ T6910] tipc: Enabling of bearer rejected, failed to enable media [ 124.745752][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 124.766403][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 124.846858][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.039560][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.084439][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.091710][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.172308][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.179634][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.818461][ T6962] netlink: 116 bytes leftover after parsing attributes in process `syz.1.450'. [ 126.543825][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.854270][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 127.013358][ T7006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.457'. [ 127.035497][ T6588] veth0_vlan: entered promiscuous mode [ 127.078119][ T7006] netlink: 67 bytes leftover after parsing attributes in process `syz.2.457'. [ 127.110645][ T6588] veth1_vlan: entered promiscuous mode [ 127.203077][ T7006] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 127.253867][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.336206][ T6588] veth0_macvtap: entered promiscuous mode [ 127.408056][ T6588] veth1_macvtap: entered promiscuous mode [ 127.515459][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.566156][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.582338][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.608710][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.640223][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.674163][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.706373][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.744227][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.790427][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.840867][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.871266][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.888541][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.899457][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.915685][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.937109][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.948247][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.965758][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.003383][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.079054][ T6588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.123454][ T6588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.164636][ T6588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.191552][ T6588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.223967][ T7057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.467'. [ 128.335665][ T7059] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 128.379663][ T7059] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 128.504460][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.537681][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.656509][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.693994][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.048944][ T7079] netlink: 19 bytes leftover after parsing attributes in process `syz.2.473'. [ 129.212923][ T7085] openvswitch: netlink: Message has 4 unknown bytes. [ 129.315916][ T7088] ieee802154 phy1 wpan1: encryption failed: -90 [ 129.403500][ T7096] ieee802154 phy1 wpan1: encryption failed: -90 [ 129.441060][ T7095] netlink: 'syz.4.477': attribute type 5 has an invalid length. [ 129.481065][ T7095] : entered promiscuous mode [ 129.708880][ T991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.915724][ T991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.079495][ T7123] trusted_key: syz.2.482 sent an empty control message without MSG_MORE. [ 130.277515][ T991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.347251][ T7128] netlink: 'syz.2.482': attribute type 46 has an invalid length. [ 130.366090][ T7128] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.482'. [ 130.531183][ T991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.974261][ T7158] netlink: 'syz.0.490': attribute type 21 has an invalid length. [ 131.022783][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.034949][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.042749][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 131.055264][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.074728][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.083077][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.090567][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.225442][ T7158] netlink: 'syz.0.490': attribute type 21 has an invalid length. [ 131.401916][ T7181] 8021q: VLANs not supported on ipvlan1 [ 131.486426][ T991] bridge_slave_1: left allmulticast mode [ 131.501547][ T991] bridge_slave_1: left promiscuous mode [ 131.507615][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.578467][ T991] bridge_slave_0: left allmulticast mode [ 131.588986][ T991] bridge_slave_0: left promiscuous mode [ 131.601216][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.610090][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 131.883691][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 131.897431][ T7201] x_tables: duplicate underflow at hook 2 [ 131.917391][ T7190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.496'. [ 132.719514][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.747730][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.767872][ T991] bond0 (unregistering): Released all slaves [ 133.051046][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'. [ 133.152377][ T5233] Bluetooth: hci2: command tx timeout [ 133.308316][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.921239][ T7260] ip6tnl0: entered promiscuous mode [ 134.135952][ T991] hsr_slave_0: left promiscuous mode [ 134.151736][ T991] hsr_slave_1: left promiscuous mode [ 134.245068][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.286329][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.334945][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.358389][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.426966][ T991] veth1_macvtap: left promiscuous mode [ 134.448094][ T991] veth0_macvtap: left promiscuous mode [ 134.474677][ T991] veth1_vlan: left promiscuous mode [ 134.480199][ T991] veth0_vlan: left promiscuous mode [ 135.029334][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 135.226296][ T5233] Bluetooth: hci2: command tx timeout [ 135.444652][ T991] team0 (unregistering): Port device team_slave_1 removed [ 135.536923][ T991] team0 (unregistering): Port device team_slave_0 removed [ 136.178719][ T7259] ip6tnl0: left promiscuous mode [ 136.346823][ T7292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.384670][ T7295] netlink: 'syz.2.512': attribute type 2 has an invalid length. [ 136.819796][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 137.301663][ T5233] Bluetooth: hci2: command tx timeout [ 137.407986][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.442612][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.466046][ T7165] bridge_slave_0: entered allmulticast mode [ 137.495480][ T7165] bridge_slave_0: entered promiscuous mode [ 137.551417][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.577178][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.588235][ T7165] bridge_slave_1: entered allmulticast mode [ 137.597629][ T7165] bridge_slave_1: entered promiscuous mode [ 137.689621][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.734404][ T7347] tipc: Started in network mode [ 137.741098][ T7347] tipc: Node identity 0e4595c70fae, cluster identity 4711 [ 137.756596][ T7347] tipc: Enabled bearer , priority 0 [ 137.776750][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.102210][ T7350] tipc: Resetting bearer [ 138.195123][ T7165] team0: Port device team_slave_0 added [ 138.226578][ T7165] team0: Port device team_slave_1 added [ 138.302877][ T7346] tipc: Resetting bearer [ 138.689648][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 138.902335][ T5320] tipc: Node number set to 32216519 [ 139.381592][ T5233] Bluetooth: hci2: command tx timeout [ 139.959160][ T7346] tipc: Disabling bearer [ 139.990453][ T7364] netlink: 'syz.1.524': attribute type 12 has an invalid length. [ 140.175979][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.202733][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.205068][ T7391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.530'. [ 140.261192][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.530'. [ 140.280946][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.379293][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.400076][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.491846][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.774028][ T7165] hsr_slave_0: entered promiscuous mode [ 140.796958][ T7165] hsr_slave_1: entered promiscuous mode [ 140.816321][ T7165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.853801][ T7165] Cannot create hsr debugfs directory [ 142.103917][ T7458] batadv0: entered promiscuous mode [ 142.111969][ T7403] tun0: tun_chr_ioctl cmd 1074812117 [ 142.356977][ T7455] batadv0: left promiscuous mode [ 142.780433][ T7477] macsec1: entered allmulticast mode [ 142.828749][ T7477] macvlan0: entered allmulticast mode [ 142.858165][ T7477] veth1_vlan: entered allmulticast mode [ 143.140222][ T7491] netlink: 2300 bytes leftover after parsing attributes in process `syz.1.550'. [ 143.197645][ T7165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.264925][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 143.265297][ T7165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.298331][ T7497] xt_TCPMSS: Only works on TCP SYN packets [ 143.344666][ T7165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.392713][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.463517][ T7165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.473075][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.704336][ C1] ------------[ cut here ]------------ [ 143.710849][ C1] WARNING: CPU: 1 PID: 7513 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 143.719688][ C1] Modules linked in: [ 143.723713][ C1] CPU: 1 UID: 0 PID: 7513 Comm: sed Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 143.733989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 143.744340][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 143.749333][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5b e1 81 f7 66 90 e8 54 e1 81 f7 31 ff 48 89 de ba 02 00 00 00 e8 75 94 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 143.769110][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 143.775484][ C1] RAX: c76b3c1c2073aa00 RBX: ffff8880608f9c80 RCX: ffffffff8170417a [ 143.783698][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: ffffffff8c606d40 [ 143.791844][ C1] RBP: 0000000000000001 R08: ffffffff937348df R09: 1ffffffff26e691b [ 143.799965][ C1] R10: dffffc0000000000 R11: fffffbfff26e691c R12: dffffc0000000000 [ 143.808330][ C1] R13: dffffc0000000000 R14: ffff888062ed8000 R15: ffff888016b1a080 [ 143.816707][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 143.825853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.832561][ C1] CR2: 00007f55740ab3b0 CR3: 000000001abb8000 CR4: 00000000003506f0 [ 143.840683][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.848903][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.857115][ C1] Call Trace: [ 143.860444][ C1] [ 143.863431][ C1] ? __warn+0x163/0x4e0 [ 143.867739][ C1] ? ip_rt_bug+0x2c/0x110 [ 143.872265][ C1] ? report_bug+0x2b3/0x500 [ 143.876928][ C1] ? ip_rt_bug+0x2c/0x110 [ 143.881480][ C1] ? handle_bug+0x3e/0x70 [ 143.885871][ C1] ? exc_invalid_op+0x1a/0x50 [ 143.890617][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 143.895802][ C1] ? mark_lock+0x9a/0x350 [ 143.900240][ C1] ? ip_rt_bug+0x2c/0x110 [ 143.904714][ C1] ip_push_pending_frames+0xbf/0x150 [ 143.910062][ C1] __icmp_send+0xf89/0x14e0 [ 143.914722][ C1] ? __icmp_send+0x59c/0x14e0 [ 143.919452][ C1] ? __pfx___icmp_send+0x10/0x10 [ 143.924521][ C1] ? validate_chain+0x11e/0x5900 [ 143.929513][ C1] ? mark_lock+0x9a/0x350 [ 143.933991][ C1] ? look_up_lock_class+0x77/0x160 [ 143.939173][ C1] ? mark_lock+0x9a/0x350 [ 143.943679][ C1] ipv4_link_failure+0x62f/0xa10 [ 143.948689][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 143.954304][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 143.959829][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 143.965398][ C1] arp_error_report+0x114/0x160 [ 143.970312][ C1] neigh_invalidate+0x244/0x470 [ 143.975280][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 143.980463][ C1] call_timer_fn+0x18e/0x650 [ 143.985162][ C1] ? call_timer_fn+0xc0/0x650 [ 143.989967][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 143.995708][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 144.000871][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.006620][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.012385][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.018156][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.023445][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 144.028736][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.034656][ C1] __run_timer_base+0x66a/0x8e0 [ 144.039584][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 144.045075][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.051696][ C1] run_timer_softirq+0xb7/0x170 [ 144.056675][ C1] handle_softirqs+0x2c4/0x970 [ 144.061560][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 144.066387][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 144.071853][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 144.077296][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 144.081988][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 144.087339][ C1] irq_exit_rcu+0x9/0x30 [ 144.092718][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 144.098428][ C1] [ 144.101578][ C1] [ 144.104632][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.110764][ C1] RIP: 0010:unwind_next_frame+0x1a6c/0x2a00 [ 144.116859][ C1] Code: 24 48 89 ee 4c 89 f2 e8 02 13 00 00 84 c0 0f 84 84 00 00 00 e8 95 49 52 00 49 89 df 48 8b 2c 24 e9 f2 02 00 00 48 8b 7c 24 18 <48> 8d 5f 02 48 83 c7 03 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 144.137700][ C1] RSP: 0018:ffffc90003fc70c8 EFLAGS: 00000246 [ 144.143874][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 144.151943][ C1] RDX: 0000000000000003 RSI: ffffffff8e7a3e20 RDI: ffffffff90a8a02e [ 144.159962][ C1] RBP: ffffffff90a8a032 R08: 0000000000000005 R09: ffffffff814140bf [ 144.168057][ C1] R10: 0000000000000003 R11: ffff888021745a00 R12: ffffc90003fc75c0 [ 144.176212][ C1] R13: dffffc0000000000 R14: ffffc90003fc71f0 R15: 1ffff920007f8e34 [ 144.184466][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 144.189930][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 144.195474][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.201256][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.207271][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.213635][ C1] arch_stack_walk+0x151/0x1b0 [ 144.218554][ C1] ? vm_area_dup+0x61/0x290 [ 144.223176][ C1] stack_trace_save+0x118/0x1d0 [ 144.228167][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 144.233368][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 144.239076][ C1] kasan_save_track+0x3f/0x80 [ 144.243954][ C1] ? kasan_save_track+0x3f/0x80 [ 144.248886][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 144.254026][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.259777][ C1] __kasan_slab_alloc+0x66/0x80 [ 144.264746][ C1] ? vm_area_dup+0x61/0x290 [ 144.269336][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.275022][ C1] vm_area_dup+0x61/0x290 [ 144.279581][ C1] __split_vma+0x1a9/0xc30 [ 144.284118][ C1] ? mark_lock+0x9a/0x350 [ 144.288800][ C1] ? __pfx___split_vma+0x10/0x10 [ 144.294051][ C1] do_vmi_align_munmap+0x433/0x18c0 [ 144.299435][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 144.305199][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 144.310415][ C1] ? mas_find+0x8c0/0xbb0 [ 144.315071][ C1] do_vmi_munmap+0x261/0x2f0 [ 144.319892][ C1] mmap_region+0x72f/0x2090 [ 144.324525][ C1] ? mark_lock+0x9a/0x350 [ 144.329050][ C1] ? __pfx_mmap_region+0x10/0x10 [ 144.334550][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 144.340873][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 144.345858][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 144.351452][ C1] do_mmap+0x8f9/0x1010 [ 144.355898][ C1] ? __pfx_do_mmap+0x10/0x10 [ 144.360566][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 144.366819][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 144.372031][ C1] ? security_mmap_file+0x178/0x1a0 [ 144.377305][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 144.382018][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 144.387187][ C1] ? __fget_files+0x29/0x470 [ 144.391889][ C1] ? __fget_files+0x3f6/0x470 [ 144.396636][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 144.401505][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 144.406341][ C1] do_syscall_64+0xf3/0x230 [ 144.410897][ C1] ? clear_bhb_loop+0x35/0x90 [ 144.415693][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.421725][ C1] RIP: 0033:0x7f5574325b74 [ 144.426257][ C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 144.446243][ C1] RSP: 002b:00007fff86ecde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.454847][ C1] RAX: ffffffffffffffda RBX: 00007fff86ecde98 RCX: 00007f5574325b74 [ 144.463001][ C1] RDX: 0000000000000005 RSI: 0000000000006000 RDI: 00007f5574080000 [ 144.471206][ C1] RBP: 00007fff86ece230 R08: 0000000000000003 R09: 0000000000003000 [ 144.479406][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f5574301ac0 [ 144.487526][ C1] R13: 00007fff86ece2b8 R14: 0000000000002ee0 R15: 0000000000000000 [ 144.495663][ C1] [ 144.498821][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.506138][ C1] CPU: 1 UID: 0 PID: 7513 Comm: sed Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 144.516339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 144.526610][ C1] Call Trace: [ 144.529926][ C1] [ 144.532841][ C1] dump_stack_lvl+0x241/0x360 [ 144.537581][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.542844][ C1] ? __pfx__printk+0x10/0x10 [ 144.547497][ C1] ? vscnprintf+0x5d/0x90 [ 144.551873][ C1] panic+0x349/0x860 [ 144.555814][ C1] ? __warn+0x172/0x4e0 [ 144.559979][ C1] ? __pfx_panic+0x10/0x10 [ 144.564453][ C1] __warn+0x346/0x4e0 [ 144.568470][ C1] ? ip_rt_bug+0x2c/0x110 [ 144.572899][ C1] report_bug+0x2b3/0x500 [ 144.577271][ C1] ? ip_rt_bug+0x2c/0x110 [ 144.581611][ C1] handle_bug+0x3e/0x70 [ 144.586473][ C1] exc_invalid_op+0x1a/0x50 [ 144.590994][ C1] asm_exc_invalid_op+0x1a/0x20 [ 144.595944][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 144.600977][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5b e1 81 f7 66 90 e8 54 e1 81 f7 31 ff 48 89 de ba 02 00 00 00 e8 75 94 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 144.621395][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 144.627583][ C1] RAX: c76b3c1c2073aa00 RBX: ffff8880608f9c80 RCX: ffffffff8170417a [ 144.635738][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: ffffffff8c606d40 [ 144.643720][ C1] RBP: 0000000000000001 R08: ffffffff937348df R09: 1ffffffff26e691b [ 144.651706][ C1] R10: dffffc0000000000 R11: fffffbfff26e691c R12: dffffc0000000000 [ 144.659691][ C1] R13: dffffc0000000000 R14: ffff888062ed8000 R15: ffff888016b1a080 [ 144.667710][ C1] ? mark_lock+0x9a/0x350 [ 144.672072][ C1] ip_push_pending_frames+0xbf/0x150 [ 144.677386][ C1] __icmp_send+0xf89/0x14e0 [ 144.682000][ C1] ? __icmp_send+0x59c/0x14e0 [ 144.686713][ C1] ? __pfx___icmp_send+0x10/0x10 [ 144.691656][ C1] ? validate_chain+0x11e/0x5900 [ 144.696615][ C1] ? mark_lock+0x9a/0x350 [ 144.700956][ C1] ? look_up_lock_class+0x77/0x160 [ 144.706099][ C1] ? mark_lock+0x9a/0x350 [ 144.710638][ C1] ipv4_link_failure+0x62f/0xa10 [ 144.715606][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 144.721088][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 144.726304][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 144.731836][ C1] arp_error_report+0x114/0x160 [ 144.736711][ C1] neigh_invalidate+0x244/0x470 [ 144.741869][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 144.747006][ C1] call_timer_fn+0x18e/0x650 [ 144.751624][ C1] ? call_timer_fn+0xc0/0x650 [ 144.756335][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.761983][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 144.767128][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.772773][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.778485][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.784133][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.789371][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 144.794610][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 144.800279][ C1] __run_timer_base+0x66a/0x8e0 [ 144.805167][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 144.810690][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.817333][ C1] run_timer_softirq+0xb7/0x170 [ 144.822352][ C1] handle_softirqs+0x2c4/0x970 [ 144.827183][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 144.831976][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 144.837383][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 144.842728][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 144.847550][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 144.852970][ C1] irq_exit_rcu+0x9/0x30 [ 144.857243][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 144.862902][ C1] [ 144.865887][ C1] [ 144.868998][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.875087][ C1] RIP: 0010:unwind_next_frame+0x1a6c/0x2a00 [ 144.881452][ C1] Code: 24 48 89 ee 4c 89 f2 e8 02 13 00 00 84 c0 0f 84 84 00 00 00 e8 95 49 52 00 49 89 df 48 8b 2c 24 e9 f2 02 00 00 48 8b 7c 24 18 <48> 8d 5f 02 48 83 c7 03 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 144.901190][ C1] RSP: 0018:ffffc90003fc70c8 EFLAGS: 00000246 [ 144.907279][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 144.915348][ C1] RDX: 0000000000000003 RSI: ffffffff8e7a3e20 RDI: ffffffff90a8a02e [ 144.923328][ C1] RBP: ffffffff90a8a032 R08: 0000000000000005 R09: ffffffff814140bf [ 144.931658][ C1] R10: 0000000000000003 R11: ffff888021745a00 R12: ffffc90003fc75c0 [ 144.939633][ C1] R13: dffffc0000000000 R14: ffffc90003fc71f0 R15: 1ffff920007f8e34 [ 144.947617][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 144.952935][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 144.958258][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.964580][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.970410][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.976741][ C1] arch_stack_walk+0x151/0x1b0 [ 144.981809][ C1] ? vm_area_dup+0x61/0x290 [ 144.986451][ C1] stack_trace_save+0x118/0x1d0 [ 144.991442][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 144.996505][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 145.001931][ C1] kasan_save_track+0x3f/0x80 [ 145.006651][ C1] ? kasan_save_track+0x3f/0x80 [ 145.011958][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 145.017099][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 145.022887][ C1] __kasan_slab_alloc+0x66/0x80 [ 145.027756][ C1] ? vm_area_dup+0x61/0x290 [ 145.032365][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 145.038120][ C1] vm_area_dup+0x61/0x290 [ 145.042468][ C1] __split_vma+0x1a9/0xc30 [ 145.047067][ C1] ? mark_lock+0x9a/0x350 [ 145.051440][ C1] ? __pfx___split_vma+0x10/0x10 [ 145.057114][ C1] do_vmi_align_munmap+0x433/0x18c0 [ 145.062355][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 145.068139][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 145.073217][ C1] ? mas_find+0x8c0/0xbb0 [ 145.077757][ C1] do_vmi_munmap+0x261/0x2f0 [ 145.082473][ C1] mmap_region+0x72f/0x2090 [ 145.087085][ C1] ? mark_lock+0x9a/0x350 [ 145.091556][ C1] ? __pfx_mmap_region+0x10/0x10 [ 145.096545][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 145.102925][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 145.107765][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 145.113282][ C1] do_mmap+0x8f9/0x1010 [ 145.117490][ C1] ? __pfx_do_mmap+0x10/0x10 [ 145.122131][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 145.128357][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 145.133626][ C1] ? security_mmap_file+0x178/0x1a0 [ 145.139148][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 145.143797][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 145.149215][ C1] ? __fget_files+0x29/0x470 [ 145.153845][ C1] ? __fget_files+0x3f6/0x470 [ 145.158641][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 145.163715][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 145.168897][ C1] do_syscall_64+0xf3/0x230 [ 145.173461][ C1] ? clear_bhb_loop+0x35/0x90 [ 145.178340][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.184435][ C1] RIP: 0033:0x7f5574325b74 [ 145.188894][ C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 145.208977][ C1] RSP: 002b:00007fff86ecde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 145.217411][ C1] RAX: ffffffffffffffda RBX: 00007fff86ecde98 RCX: 00007f5574325b74 [ 145.225669][ C1] RDX: 0000000000000005 RSI: 0000000000006000 RDI: 00007f5574080000 [ 145.233774][ C1] RBP: 00007fff86ece230 R08: 0000000000000003 R09: 0000000000003000 [ 145.242458][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f5574301ac0 [ 145.250546][ C1] R13: 00007fff86ece2b8 R14: 0000000000002ee0 R15: 0000000000000000 [ 145.258669][ C1] [ 145.262210][ C1] Kernel Offset: disabled [ 145.266705][ C1] Rebooting in 86400 seconds..