last executing test programs: 1m14.516833988s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 1m1.403589022s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 50.452304605s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 37.73728061s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 22.831933247s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 12.458941948s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1}, 0x20) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 3.169288301s ago: executing program 0 (id=2415): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}]}, 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000a0000001c0003800800010000000000080002ffa8ffffff080003"], 0x30}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.122332805s ago: executing program 2 (id=2416): r0 = socket$netlink(0x10, 0x3, 0xa) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x29, 0xd, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {0xffff, 0xc}, {0xd}}}, 0x24}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2b5}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x4}, {0x1, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x4bf}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9b1, 0x7, 0xc89f}, {{0x3, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x28, 0x7, 0x3}, {{0x2, 0x1}, {0x3, 0x0, 0x1}}}}]}]}]}}]}, 0x9c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001680)={@empty, @dev, 0x0}, &(0x7f00000016c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001780)={'syztnl0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x3ff, 0x5, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xb, 0xfe, [@multicast1, @broadcast]}, @generic={0x89, 0x10, "b09d910e1ab1e77405ac8c6c05b4"}, @timestamp={0x44, 0x20, 0x57, 0x0, 0x4, [0xd, 0x1, 0x8, 0x2, 0xa, 0x0, 0x0]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}], 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r13, 0x112, 0xc, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000018c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xc0, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5c}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x99}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0xc0}}, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @broadcast}, &(0x7f00000000c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5e}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48000}, 0x40008d4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)}, 0x2000c054) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000300)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, &(0x7f00000004c0)=""/184, 0xb8}, 0x2100) 2.804861595s ago: executing program 0 (id=2417): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x53}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x9, 0x7f, {{0x47, 0x4, 0x2, 0x4, 0x11c, 0x67, 0x0, 0x81, 0x0, 0x0, @remote, @local, {[@cipso={0x86, 0x16, 0x2, [{0x5, 0xa, "040b2f12fb650ca8"}, {0x1, 0x6, "c104d001"}]}, @timestamp_addr={0x44, 0x54, 0x21, 0x1, 0x1, [{@loopback, 0xd6}, {@private=0xa010100, 0x8}, {@multicast1, 0xfff}, {@empty, 0x5}, {@remote, 0x572}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa8fd}, {@empty, 0xe953}, {@multicast2, 0x8}, {@empty, 0x1d}, {@rand_addr=0x64010101, 0x7ff}]}, @lsrr={0x83, 0xb, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0xe, [{@remote}, {@empty, 0x5}, {@rand_addr=0x64010101, 0xd49}, {@loopback, 0x8}, {@multicast2, 0x81}]}, @timestamp_addr={0x44, 0x3c, 0x97, 0x1, 0x2, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffff7fd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@broadcast, 0x7}, {@remote, 0xe0d4}, {@loopback, 0x7fffffff}, {@loopback}]}, @lsrr={0x83, 0x7, 0xb5, [@multicast2]}, @timestamp={0x44, 0x24, 0xb4, 0x0, 0x4, [0xb, 0x6, 0x11, 0x7, 0x800, 0x4, 0x4d02, 0xfff]}]}}}}}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x7, 0x5, 0x1, 0x100, r1, 0x401, '\x00', r2, r3, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) (rerun: 64) socket(0x0, 0x0, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) (async, rerun: 32) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) recvmmsg(r6, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000000e1443eb0000000000001900080001"], 0x18}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000870a0000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.545412082s ago: executing program 0 (id=2419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) 2.052429336s ago: executing program 2 (id=2425): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1, &(0x7f0000000340)=""/12, 0xc}, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104001000000080000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x0) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0xf0, 0x5}, 0x2}, 0x18) 1.994927979s ago: executing program 1 (id=2426): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @any, 0xfffc, 0x2}, 0xe) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x890b, 0x0) 1.751300523s ago: executing program 1 (id=2427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0], 0x54}}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)=ANY=[], 0x11f8}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) r10 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r10) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="800f8f909edc706cc773d542bd000900", @ANYRES16=r11, @ANYBLOB="000426bd7000fbdbdf250c00000054000280140001000000000000000000000000000000000006000f000400000008000700f7ffffff08000800d400000006000f0000fe0000080003000200000014000100200100000000000000000000000000011800018014000300fe880000000000000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x9891) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x70bd29, 0x200004, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x22}]}, 0x3c}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x40}}, 0x50) 1.600185448s ago: executing program 3 (id=2429): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x1, 0xa, 0xffff, 0x7}, 0x10) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0xd}, 0x10}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x7fff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_lsm={0x1d, 0x19, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd478}, {}, {}, [@exit, @alu={0x4, 0x0, 0x5, 0x7, 0xa, 0x4, 0xfffffffffffffff0}, @generic={0xd, 0x8, 0xb, 0xc, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x0, 0x1, 0x7, 0x4, 0x40, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x14, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001340)=[{0x1, 0xff, 0x3, 0x6}, {0x2, 0x3, 0xe, 0x7}, {0x5, 0x4, 0x1, 0xa}], 0x10, 0x4, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001440)={r3, 0x8, 0xeaf1, 0x4}) r5 = accept4$packet(r4, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000014c0)=0x14, 0x80800) getsockname$packet(r5, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) bind$packet(r5, &(0x7f0000001580)={0x11, 0x17, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf, 0x80}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20000011) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001c00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001780)={0x404, 0x13, 0x20, 0x70bd2d, 0x25dfdbfe, {0x11, 0x4, 0x80, 0x1, {0x4e20, 0x4e20, [0x1, 0x0, 0xcf01, 0xaf8d], [0x8000, 0xd, 0xf3, 0x2], 0x0, [0x1, 0x6]}, 0x800, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "a39cd08f3421b7860764d04ec86389897be3ea56021a4abed6969e0ccdf8bccb282bacdd238a52fac71cc330f344980d1a96cea9c32b62ff339b3e5317baeaab676eff5ccff4658e85dee556f73b4ac0b6c3d840c0bd27acf47e0ac50c94c9bb09d85153fb14b7ee5d9e070f14ab008d14969c3df23673d3d4d63623dcfaa35a271f4d12572dbb7782602e47b1c1ff20284c20be48e8bbc3"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "f6b66bb46a68e4c797aa7399f87fd522064d6d71a550f6fe421a44fb6fc10028feedb0931617e6791dd9dd4c0badeca7979b1f1cbbc9ce99d34bddd46cea0494f55540f3479c71c96cedb99594c1836e9bcafebdbb22dc2e8ec9f5fbeb85dbf034b418646916f5a875c2420935ba5c2aa8782cc450bd65474df28c84c8115c8d85947cac6faa69c71b13198e2a4aec4118edc77e5130089b392cecde06bd75f7b48fc9f61531b278a616bc11319509afae51a20d70b1ce1c66bfdc216ce40799fe"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "d6d8470e28694d3d46db6daa4f1ba92360f93ea197951e016da12c0faf117a41268e66acda3763cc1898fc40fdb24e6d12"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "a9815fdc5cbab35df5a21664134fb75258605a09c305fa21d9bfc686070f00a6f03fde0b29e41fbf1e411d740dc2aa6da06805033196c5110869b7dde9792775f827f132bcbe0918f5bd040b8728edc8fac718a64e91406a816572653d7444c114b99dad80314bd2d9b522b28b6088766d953b858eea32b9b6793672d949337734704cc940677923407123d506b823e8d2383824d8f2e1eaa99991595ef940f9eaa0ee31648c2203227da7fd680bc7eb4683dab471ab954d3ddd2f49cc1388696d744751ee729da5d285a36d23ad6f3448"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "d5477c94aedead343646f9110499562c3e34755bc05a65c888629a7abbc3dd59d4a6a425c201ea2e4e1db7c3006b405a8242d2a169ea179a360cf34115a035fb731b1c4e0ae31e15c3e7221c64e21559f63691ad24240f1e1452f0ccf3a1c52112f69214f24a44e6866744c22d237fa91d3fc4e03a3d17c0d936f848197fdd7c5100b180ebcdd7141a8af07d845bb8f925321810e6fe35f41ae31b060b1e268142d01bcf67aefb22889e6b83eb19a5011933d35313bee5f71f1fcc0b6ce5fb3047bc13bd00a973a3277dc78d7817208e53b416864aeef3bbc367866aedee20aeff31b1479df85390a3dc7b38f318dbc18bf5b29f725302cde4"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "3002ec207830f2ecbfccc1cd259f265182639c628fae3c08f720775fe7d982eb8635da6ea2479f61233d80172943b2d90e0c4d4cbae2d4338037fecb0866"}]}, 0x404}, 0x1, 0x0, 0x0, 0x40005}, 0x20042085) getsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) sendmsg$inet(r5, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001d00)="8955dad3e4f99f17f5ffdbe459c2262ff03ee69f83ee90dd2a5969c2f0a46fb482deb70a82eab03c8de65bf04610fec82aef132604c11e4428973b9dee966edb09", 0x41}], 0x1, &(0x7f0000001dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x36}, @local}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x8, [{@local, 0x9267}]}, @cipso={0x86, 0x3e, 0x3, [{0x6, 0x9, "083c2bfd2ebcee"}, {0x5, 0xd, "4b66a5eea9b2816b0a5367"}, {0x7, 0xc, "47264ce97d9687f55c9d"}, {0x5, 0x6, "81c4ae42"}, {0x1, 0x10, "f186d507b247aaa8dfa1420b6782"}]}, @lsrr={0x83, 0x2b, 0x2b, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote, @private=0xa010101, @multicast1, @loopback, @empty, @multicast2, @local]}, @lsrr={0x83, 0xf, 0xdd, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @rr={0x7, 0x1f, 0x9c, [@dev={0xac, 0x14, 0x14, 0x34}, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @loopback, @remote, @multicast1]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x98, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @generic={0x83, 0x4, "9f7c"}, @cipso={0x86, 0x20, 0x3, [{0x1, 0x2}, {0x7, 0xd, "a599ce614dc5280cd61e83"}, {0x6, 0xb, "091e205cf1428479ab"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x180}, 0xc080) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x14, 0x11, &(0x7f0000001fc0)=@raw=[@alu={0x7, 0x1, 0x8, 0x4, 0x5, 0x10, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @generic={0x1, 0x6, 0x4, 0x2, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b9}}, @alu={0x4, 0x1, 0x9, 0x0, 0x5, 0x50, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x55}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8f1}], &(0x7f0000002080)='syzkaller\x00', 0x7, 0x0, &(0x7f00000020c0), 0x41000, 0x61, '\x00', r7, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002140)={0x4, 0x6, 0x1ff, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000002180)=[r4, 0xffffffffffffffff, r4, r4, r4, r4], 0x0, 0x10, 0x7, @void, @value}, 0x94) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000022c0)=@o_path={&(0x7f0000002280)='./file0\x00', 0x0, 0x8, r4}, 0x18) sendmsg$nl_route(r4, &(0x7f00000023c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)=@bridge_dellink={0x6c, 0x11, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x100}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000002400)=0x4, 0x4) r12 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r12, &(0x7f0000002440)="d374318a08625f159c94f760abeea298b5fc538f7b96e75dc8d55cba0e76431155f7988c74099b9cb64c73b521ea709324a6c2b731fe320101257c6f59f8e07dfe147a42b3d3fab8fd2078d0e19eab6778de82aadad263d6e97f4805344d5c2d13f5dc5dca80ae44c2e32564e35f1ef12f6ae64fc1ea6d20878ed6d3338f845cd94f4028c35133ddff1fa1abe17d3030b4caa74a", 0x94, 0x80, &(0x7f0000002500)={0x2, 0x4e24, @local}, 0x10) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000002540)) close(r1) r13 = socket$isdn(0x22, 0x3, 0x24) ioctl$BTRFS_IOC_SUBVOL_CREATE(r10, 0x5000940e, &(0x7f0000002580)={{r13}, "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"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000003840)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003800)={&(0x7f0000003600)={0x1cc, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0xc1, 0x3, "0eee374a1b816fba80b1e5b8c990f91dfa3291fe5e3244c24b7abf41ca38238e44811b4e66b072d4790770e99b958421433415d284d0c5f3afd594280a75b00f4af98fbd0a932ad3a083e97783d4a3556bd23dbb83d6405474c6693ba9b3b081d6031d46492efebafc98b322187a4f89372d9b3c3b273b8c37208269b2693d280630b27d70bb290fdc519af11ce5424d9f0ef9bb4b23c9bd935ba272b79dcf2e56ae64793f53757aacb36423476b8f044856f00f14bb6395da8e1a136e"}, @ETHTOOL_A_WOL_SOPASS={0xf3, 0x3, "aa45baa017f55cc9eb0ea386eff1505ba92531d879adbad77beee643697c3f80bd466e5183a57e274e725d5b78037807f760c73915b1c7d773934464c65372baa3a4f8223e3eef77104c54dd9f8d6360135adad59c43e638cf00b4a44c3d9637a18535665e74492da9ba02770b33473505ccfdade5ffaed0dba72e39f77593c7c19c6191b9236fc2645869e6ce80d637fc3a0f68fe492f4daa55b9ec4f6cd8e8d716da2bc809afcd22184a0758c2ba063e0fde612e53d136e783f29e7d2ded344f99f26b6a6add8e7e777955d59a803388ed9acf7434f4261606cf9a8e3b86652a0fa18c39ae8318664b067d1252ea"}]}, 0x1cc}}, 0x8000) 1.411141935s ago: executing program 3 (id=2430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r1, 0x12) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000600)='/', 0x1}, {&(0x7f0000001880)="2777f918280f781e683877432c603fed01afb315d5239da03f90df5df01854d91f6012d36c6d758e038220b1706d2aa5ec8ee69e", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0x0, 'syz0\x00', @bcast, 0x1, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.339829572s ago: executing program 2 (id=2431): r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000) r1 = socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x19c, 0x5, 0x7, 0x3, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2}, [@nested={0x10, 0x16, 0x0, 0x1, [@generic="f11df2441754e0608a24c39b"]}, @nested={0x10, 0x135, 0x0, 0x1, [@typed={0x9, 0x53, 0x0, 0x0, @str='syz0\x00'}]}, @generic="8148be82817ec0a362477fbe3174f1517c37b21e663b09b87baa6bae0ece202aed706c3701ca6790d103fec371fb536089f635acd413d967b586bc72ec47de67d26f8d86acf51bca0d23f3243778eed845423ce78b17619fbc9f2928ef267a79a3285f36032666debc6cefc97066356d1a049971a6a40ff71586a969d196ff9f27d4cdcbecbe486fe92942c5346f97796441bc045c10267bd4cc5effed8129042441f4ccd264841d3bd3831730b0dc160dba022f0aa3c1216959b31fbbed5a58b6d22b16f8da2d1e9ff841135abaf3", @generic="f246cae1bf2b02da940f096246cc0d258fdf2c59d3e354078be9e6f491910f959d0412422c99c2b6c173640d9f3942bcae506ed95a90ac6c0f9527dc59092a401324b6efd4308d0611038635dd4fa1ac8912512c4ac627283ad579ecb766be6c2ec5a840642d4be1aeab7aff1b7f36397014aaebbf76ccfe79a3c53c2ccd7ae47962f097acf7468c521306c5de04262b", @typed={0x8, 0xeb, 0x0, 0x0, @uid=r3}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) r4 = accept(r1, 0x0, &(0x7f00000004c0)) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) (async) socket$alg(0x26, 0x5, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x44800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000680)={'veth0_to_batadv\x00', 0x200}) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000800)=0x120204, 0x4) close(r0) (async) connect$bt_l2cap(r4, &(0x7f0000000840)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800, 0x2}, 0xe) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000f40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000f00)={&(0x7f00000008c0)={0x630, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5f4, 0x3, 0x0, 0x1, [{0x35c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x52, 0x1, "9b7eb68150e1184aabcf4a91ca08414589e672d0c5b4f15c36ee295d1deab5e1c8144fc9d1b86547b808c5eb9b6f88afeff023cc0920d5b85fde1a22256ec0dcba4e55f5277d3e31d78a56727b7d"}]}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "3025fdf415e88650ecf86f2ddc8fdf4b9b58396b3cd09fafa2a96784eb122afb4bc503490a79fe0a8abc65823b5e2ed6d72366511f7f37ee7c28b01cf0b8ef5fbcf066d8398d7a20fcd2"}, @NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "f68d6c7f43c343b4e9d4db61a6b1e29b5e867d0e05940bdb94e1096a5fef99b8f8170403116ad167aee7c0c26a214858b3b1143399d8d4f034"}, @NFTA_DATA_VALUE={0xb3, 0x1, "e704f3985750d2bfcfd67b950d3b296aecf63dc0685f16840460715e11e8cc43399d75c468cfe797f16e085a19523472cba4d1e57a94ee45aa7b27e848a6ba368dc149febbdf1f8176923d2819e65a6b76c23f1cdfdfe9caf679e8c646a865fa6cd94920da4789d1c83a296e38e651cc18e68559305a25e34c4484fbc6693ea76a8cf8d5c723958eb243f2b5d4a63b8774a27ca92599689899389aa23db39de7a84231a5b9e86bb1d469e3a5edff7f"}, @NFTA_DATA_VALUE={0x2d, 0x1, "c3df213bd6d17fb46e30e34f15b6b39234e73d17a8ddd128d50d860c96b8dfde950b05796f857a5bbd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "c1bd63924a03430b2bba8e731014a5544597984af0b46aa42c670727fc645b89eca9cb23c8bb0b1fae39e396fd946519488d3b7a22c50271326749bf9386df6b95f3613613032a5f4c5f86d763b533198ecd2e21741e14a8122008a45171e7e8a25114408ad97de7bb4b29e308874a8a0a8782922016aab08d9b76e30c561d0938ed23a02dd1c7aae38aa9ecaade7c14ab1a1b5e434c603dec32d58859bb6541bb77f5137b02ca67a06696a3ba06ca9160e41fd60912a86f76e9aad587cd9e492e0f469f55e0442a9e3ae221dfad44846cb0737066c077d3897e8e37b46cfe5a97a55709eb8ce26973e8f0d79554e9f31276c7f282fe64"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "06cc4190b08a6e7ed127fae981b6eb487ae64e3be7b231fb1203914565f44c9864dcc0d20f23bfa4b5feac7b26dcb2ae83d3d57616a4cb3f1eafc84f8c57647d111e17f6c3b79c3245a63931c826caf7980e6a5bd41072368da9b2e345fa8a1d587a284f41508b32c1d47690a4a35dbbf45dc4e88f2b2289bb8e887d0552dfa75a2eef1ac665c2a92a623c1ca42e927586d5068c7c1dcb1ca07ed2a42b8864dcf07f554beb42e7ef676bf42f38c94635ecefef9802a0d10f8e22cc519910984eee09e1d919f1c2cf71d423a0f95812ecfbe4083c21f922e626d0ed07a0984b423eb12dbe87235b54"}, @NFTA_DATA_VALUE={0xe5, 0x1, "11f5832776f7a2eedd725434fd686d163e884e86c201c8202730991d3648bd842daf6e1363f9708e207a834b977f63dd7311d113454725cdff0aeb79bb448d560eab3076815b2e55a0be8b8670c3e332576f93c0283a4452ae87973b29c0114abbf7c7146123227d450f425a4c8e7660bf14e74c780e883b189a33f1053bcfefc5aee6138548fd7b342130553990d831dfd7ddb960351af675e11d416df313f8b316bb5d594e6625eb9a0cdf9555aa725cb3e9a5e9ae9e9c25706d1265ba467d9da466cafc3d07366ccaf7efb67f39bf4cd8560399a0259d16b41be53fd6898633"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd}]}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa6}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x630}}, 0x42) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f80)="b21a20f5abb4d19af51e8f193d8d92692e9e6e7f5a22967b41361aeb29cb4727d243a4624428692e8e676bda97f27f4ec510b66cf566dd8afa4636d4c062f4706f29128662b726f37edd148c67d845dd216a03d7af59deaaecd6ef2ed2863e9a27d5c5736c572fcb4ce6bf08e4df62d2741c33e65b13c75af3821e6bac2fa5d543291cf7ea8a624b722e2a1d7dd216625e849e78f39067faa128a5257d355333ddcee48be1e9d2c4ec15e0e09ed754be47d24c4be50a4564a1d5270314a0ce0b7f62cebca7abb8747b4d407ead2dc1c422a5", 0xd2}, {&(0x7f0000001080)="c13dc7b89f0c0214ea0c7cab708fa0b592c4fb7323d4ed74c9896dcdceb9a5a345066f3dd895f6769a4b139a8c8ed487be3b8952423a6388f9d7ac06a4205bc49b797f8109a4d716b9c1b49a84d8ff588c026e58fa9650051f40294413b197763ddb7fe9ebc1b941bdde195aa4a60c1668c39173a030e4735d8865de818fcccddf55cb5a49d951949e4410d5102082106fa6b700ef708f54709df3b60c159bfdf38b68470cb74bc4887a104cc46d6b327087388a3bc7639400fe5015255f4bb90118c009b3", 0xc5}, {&(0x7f0000001180)="6b8c157106fb2e1067914ff937f88c9308ce062dffa12b225e47afa21ce0ce80a1da9dce8d3307005403e37ad0605d8603bd273a6facc0d3b0df3471da43ef39bbea98636208085fc9df3ef6e77a5378d573a662cee46234f130521852f98b1a03763d83d1f63fbd5778c833477da7a40895624bd7d05c18ea6875", 0x7b}, {&(0x7f0000001200)="9a2442300249cadb8a8be023a30928ef3943d4d9abd37755386ce36c651a0b2b0d2bec56d4b929a5abe2eeb2a0b3bc40ddbf45150f5ba0b604888bd2b954c8a0eea384303a7ffe763b809e7a4ae9ea6217df260873ae44907ba5a7eae7ed1bda995b9c976f375a6e59c4662119d0b2e74f3d44d73f21033062d210fa827fc00f88c688716d7927acc103e0f5979d1d401297c149ad8074ddaa87ee117e26e966cb13d2a2f5dcf3720e83512993966225c4ade3734eba01748f1ac7aff765983c0c8d2bd900505666964b", 0xca}], 0x4, &(0x7f0000001340)="9bf7c0c2501d491d01dafc98c7c480669c0cf788cb0950754659c64b06b51d67f93297626fc1be10cf1cdc4a03bb199d5a4a9248731315c51a937708d05ee3c2c50778c8e50753a7a2d3a04cc9a8dc42162b03244f50851c63180bca30dee089eef8", 0x62, 0x8000}, 0x4000000) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001440), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4044) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r11 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, 0x1407, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}]}, 0x30}}, 0x20000010) r12 = socket(0x1f, 0x800, 0x2) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001640)={"6c458d282b399aadc6294f6c187e7a01", 0x0, 0x0, {0x5}, {0x8, 0x1}, 0x80000001, [0xd95, 0x4, 0xfffffffffffffe01, 0x14f, 0x1, 0xfff, 0x7fffffffffffffff, 0x4, 0x40, 0xffffffffffffffff, 0x0, 0x2, 0x7fff, 0x4, 0x1b4, 0x879]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001740)={{r12}, r13, 0x10, @unused=[0x6, 0xe61c, 0x5, 0xffffffffffffffff], @name="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"}) 1.338847873s ago: executing program 1 (id=2432): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x800000}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7a8e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10f3f, 0x5, 0xfc9e, 0x3ff, 0x9, 0x5, 0x0, 0x80000001, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f0000000100)='\x00', 0x1c) splice(r4, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r10}, 0x38) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="8000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.094845385s ago: executing program 2 (id=2433): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETNOCSUM(r0, 0x8914, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x332}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20801) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r10, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000500)=0xf06, 0x8) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r12, @ANYBLOB="080004000001000008000a00", @ANYRES32=r12], 0x4c}}, 0x0) 979.273432ms ago: executing program 3 (id=2434): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000002c0)=0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private2, @in=@multicast2}}, {{@in=@local}}}, &(0x7f00000001c0)=0x103) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000d4ede048d02209130000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0xfffffe84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 877.129983ms ago: executing program 1 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003b0007010000000000000000047c0000040000000c00018006000600800a00000c00028005000600"], 0x30}}, 0xc000) syz_emit_ethernet(0x1046, &(0x7f0000000900)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1010, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ni={0x8c, 0x0, 0x0, 0xfffd, 0x7, 0xff, "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"}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'netdevsim0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 873.537451ms ago: executing program 0 (id=2436): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x23, 0x4, 0xcbc9) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) 680.458238ms ago: executing program 3 (id=2437): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfa69, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) pipe(&(0x7f0000000680)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711173000000000085108000024710200400567031c8a19356280000000000009500a5e4ff000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 654.876728ms ago: executing program 0 (id=2438): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x96, &(0x7f00000002c0), &(0x7f0000000080)=0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x2, 0x5, 0x510, 0x120, 0x210, 0xffffffff, 0x0, 0x350, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x0, 0x4}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv4=@multicast1, @icmp_id, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@remote, @port, @gre_key}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "954f"}}, @common=@eui64={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv6=@empty, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xa, 0x98, 0x8, 0x7fff}, {0x21f2, 0xff, 0x5, 0x1}, {0x5, 0x2, 0xb7, 0xf7}, {0xc8, 0x2, 0x2, 0xed}, {0x7fff, 0x80, 0x6, 0xfffffff7}, {0x8, 0x7, 0xda, 0x8000}, {0x6, 0x10, 0xe, 0x9}]}, 0x10) 476.651196ms ago: executing program 0 (id=2439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x4, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0x84) 87.187507ms ago: executing program 2 (id=2440): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x303a406d171d269d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0000000100001000000000000000000647262675f70725f686d61635f7368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbe98e7f199c10847"], 0xe0}}, 0x0) 86.474089ms ago: executing program 3 (id=2441): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003580)={0x60, r0, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffc}, {0x6}, {0x5, 0x12, 0xff}, {0x6}, {0x8}}]}, 0x60}}, 0x0) 80.003441ms ago: executing program 1 (id=2442): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2c, 0x84, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r8, 0x423a8000) close(r8) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) listen(r0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="000000000000000000003f0000000c00990000000000000000003c005e80080005000000000008000300000000000800090000000000100001000000000000000000000000000800070000000000080001"], 0x5c}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) 79.455102ms ago: executing program 2 (id=2443): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0xfffc, @broadcast, 'macvlan1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async, rerun: 64) shutdown(r2, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x324) 78.197247ms ago: executing program 3 (id=2444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x0, 0x4, 0x40000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0xb, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x9, 0x11cd, 0x592}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="1a6f547df683972ce155e7507cc4b91542be07449cda7c1f061299635619c165db448536edd343e4e0eb7882937f40b67f60e5e046f12241fce18fab52e5f8158ad72c18ab030669e9d2c5660fbc10f365cdd021038e041ab95f3df3cdd1449a44765d4950ace2b6465e655aec70012a09d6a00554fb2cf237870bd55131c170db10aedea06756f0d29d07230002cbfc8eba3b8e8b8301253a4b9805423db0e7bcd47352b5", 0xa5}, {&(0x7f0000000540)="10ce774d1bc97872bf5bc3619ceb0df90695634683f1b95f9f", 0x19}], 0x2, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x4000000}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000640)="7482576d937e7992f70cbd0f4cfb7d0242020d88c1b4647b800a65c7328e30bb7ae2c146ec8e383c7ee0fcee086bc3eb9a94b0f7a698aa32d16627f8c3414c5c914458a8af1e6100f201f86eb89dce65f4c1d14bbbb48c68e268f6610b03a1ff184c07ea1a25ad987cc458be5cc88c44dd7683f36705c9ce42a6828ef3d50a720e741fdd1844c1d0a10a02d15a29488051721b2ef21c04024eea22c0c3287ff93532e0e519bf616b36312997d36a027d62fd39d8d8d5d7748d5c3100d8a2aa", 0xbf}, {&(0x7f0000000700)="8aeb2b3002f043b82bcbd3f5c738266638867a510ec817aabc486ca85e7b3c6bbc8dc3d4521ec8bd2dbe6e18b53454b3207017d0dcf131a8a41ec02f12f2eecd94c2095aad524444015c435a82859ca6", 0x50}, {&(0x7f0000000840)="0ba7851d837050508725059019f0d16d3e3013841f3c4032f73bfd6695eaa5dd05061247fb678040aabd506690193a57c570848d148ab8e713fbf1a479cccfa84a1ec771a0d43d7abbb42f8ee6250975304a712a7c2a963bf96a5b5bb077f44a46cac707d0424f41f3f56d99c5c7ffb8211a0b8c49ea1f686ff51185a8d776f7d9aa9c142741f0a49d0e296ccaf4aeae33d2836234ca69b1e56a7cdac5de33ca12d4ec4362", 0xa5}, {&(0x7f0000000900)="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", 0x1000}], 0x4, 0x0, 0x0, 0xa840}, {0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001f80)="5ccadcff070d935054942783c3b712890967a766ad92f1484fc23ee90d7827c51998d03786b857229ff0d5d52eebbec2b4431a117198a2cd59754d18c3530c861c1bd7627c326013f316f6f0433395799f83f421e33867526033ccd50f8ecf55156c6063752d7757ded15231916c8262e67d87aeaf721b5d608a42af935faeee16e244faec3dc7565e690e5e2c0ce59d6975b1d7582c", 0x96}, {&(0x7f0000002040)="2918aa56c4cf358ee95e7d56fc502c", 0xf}, {&(0x7f0000002080)="4de9ca80b521b5a4d4030a21968df12d2872c6ac240226bd737e27cfba0bd921bb6bcfe0016278c317", 0x29}, {&(0x7f00000020c0)="d96d162a2429ed1058c8f93c3b0f4da9cb6555fb35d38f00d2dce563d9da03537786754e6000375e9b039773a30be31677a7a73f9745aa7f60c6f59f94468db7d771bb74c9552df23247b1fc0b9ba60263d829f3116b793825a2d1a09f2721cf4c3d6053204e3cf87b9fbb76e774370afadb28c576488058f721e858c0003d88c14df553603be89f760515ae252e64fac4d2e35b1f31deb804ddd322a242eee6388844d76ccca3314c33e3f5854a4b6a9a", 0xb1}, {&(0x7f0000002180)="64e65742cad547ae05b5fa76cda602fff71ba59edc670e37976b37f38219a10b155717f0de20f8381aa1a7791083842358", 0x31}], 0x5, 0x0, 0x0, 0x20000000}], 0x3, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r5, 0x4010744d, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000002300)=ANY=[@ANYBLOB="180000000000000000000000000000001811000034fc0a2ecd79818bf4af67cff18f11a74f48b3e958603c8f35ca8a5a823daf604228360151ae4c749e78311e2a5fa0f313184407ed3486ff5860e0972b16acddef67af937720edf0d5d3a6341763357380d2f9d363f3e734ea469eb72d546d8c073f0e18b41a3b858a550638f0e68ad3eac89176ab92540adc850e2d2e35849d56098003368ad017b5c1fde860ce948edc55747917184e71a8deac7c5bb720ac498610cc689859a4d2", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9b, &(0x7f00000002c0)=""/155, 0x40f00, 0x0, '\x00', r7, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x1, 0x33e7, 0xb}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0x2, 0x8}, {0x3, 0x5, 0xa, 0x8}, {0x3, 0x1, 0x3, 0x7}, {0x4, 0x3, 0x3}], 0x10, 0x5f3, @void, @value}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00150000000000002c00128009000100626f6e64000000001c00028005000c000200000008000b00", @ANYRES32=0x0, @ANYBLOB="0500010005"], 0x4c}}, 0x0) 0s ago: executing program 1 (id=2445): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x37}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="f5cb03c34bf6", {0x8, 0x40}}, @tdls_chsw_resp={0xc, 0x6, {0x66, {0x65, 0x12, {@random="cbddf0f5065e", @device_b, @broadcast}}, {0x68, 0x4, {0xc9e, 0x5}}}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x40080) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x700, 0x8ca, 0x0, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@generic={0x0, 0x8, "60521475a144"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0xe4, 0x2, 0x912, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x80, 0xffffffff, 0x6}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'hsr0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={0x5c8, r2, 0x100, 0x3966, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r5}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x385}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa7}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc72}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbdb}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x6, 0x8, 0x4f}, {0x1000, 0x3, 0x81, 0x10000}, {0x7, 0x8d, 0x5, 0xc}, {0x3, 0x3, 0x2, 0x1648}, {0x1e0a, 0x3, 0x9}, {0x0, 0x9, 0x8, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_genetlink_get_family_id$auto(&(0x7f0000000d00)='priority\x00', r0) sendmsg$autorun(r0, &(0x7f0000000dc0)=@policy448={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r13, 0x300, 0x70bd25, 0x25dfdbfb, {0x19}, [@RTA_IIF={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40891) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f00)={'ip6gre0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', r8, 0x2f, 0x2, 0x2, 0x1, 0x50, @dev={0xfe, 0x80, '\x00', 0x21}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8727, 0x1, 0x1d}}) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xac, r14, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000001080)) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000010c0)={0xe5}, 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={r12}, 0x4) (async) r16 = accept4$rose(r0, &(0x7f0000001140)=@short={0xb, @dev, @null, 0x1, @rose}, &(0x7f0000001180)=0x1c, 0x80000) sendto(r16, &(0x7f00000011c0)="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", 0x1000, 0x0, &(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x80) (async) r17 = accept$packet(r0, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002280)=0x14) getsockopt$IP_SET_OP_GET_BYINDEX(r17, 0x1, 0x53, &(0x7f00000022c0)={0x7, 0x7, 0x4}, &(0x7f0000002300)=0x28) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r18) kernel console output (not intermixed with test programs): 48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.016524][T10373] RSP: 002b:00007f0a33395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.025009][T10373] RAX: ffffffffffffffda RBX: 00007f0a32735f80 RCX: 00007f0a3257e719 [ 191.033035][T10373] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 191.041054][T10373] RBP: 00007f0a33395090 R08: 0000000000000000 R09: 0000000000000000 [ 191.049112][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.057156][T10373] R13: 0000000000000000 R14: 00007f0a32735f80 R15: 00007ffe8940b8b8 [ 191.065202][T10373] [ 191.085348][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1355'. [ 191.417763][T10398] dccp_xmit_packet: Payload too large (65475) for featneg. [ 191.553064][ T7317] IPVS: starting estimator thread 0... [ 191.677520][T10408] IPVS: using max 15 ests per chain, 36000 per kthread [ 191.795680][T10418] netlink: 'syz.2.1366': attribute type 3 has an invalid length. [ 192.119516][T10426] geneve2: entered promiscuous mode [ 192.126367][T10426] geneve2: entered allmulticast mode [ 192.708904][ T5150] Bluetooth: hci1: command tx timeout [ 192.744876][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 192.787948][T10100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.820258][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 192.832080][T10470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1378'. [ 192.847625][T10470] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 193.382639][T10495] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1387'. [ 193.413872][T10495] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1387'. [ 194.561520][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.810134][T10100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.821245][T10100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.832584][T10100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.849237][T10478] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.862135][T10481] netlink: 'syz.1.1380': attribute type 2 has an invalid length. [ 195.123244][T10508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1390'. [ 195.123857][ T7331] IPVS: starting estimator thread 0... [ 195.259421][T10515] IPVS: using max 18 ests per chain, 43200 per kthread [ 195.282775][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.389923][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.461516][T10531] netlink: 'syz.2.1395': attribute type 3 has an invalid length. [ 195.462244][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.476512][T10227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.515024][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.516934][T10531] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1395'. [ 195.522227][T10227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.551393][T10536] geneve2: entered promiscuous mode [ 195.610022][T10536] geneve2: entered allmulticast mode [ 195.642237][T10100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.653632][T10100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.040093][T10564] syzkaller0: entered promiscuous mode [ 196.045635][T10564] syzkaller0: entered allmulticast mode [ 196.106073][T10564] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 196.341453][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.403398][T10591] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 196.628904][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 196.635908][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 196.800436][ T7331] hid-generic 0005:07C0:FFF9.0002: item fetching failed at offset 0/1 [ 196.810170][ T7331] hid-generic 0005:07C0:FFF9.0002: probe with driver hid-generic failed with error -22 [ 197.096687][T10100] veth0_vlan: entered promiscuous mode [ 197.125140][T10100] veth1_vlan: entered promiscuous mode [ 197.150747][T10100] veth0_macvtap: entered promiscuous mode [ 197.163862][T10100] veth1_macvtap: entered promiscuous mode [ 197.180324][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.191439][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.201918][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.212768][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.223203][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.233821][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.245494][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.257724][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.268664][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.279122][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.289747][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.299679][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.310556][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.321770][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.331990][T10100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.341724][T10100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.350655][T10100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.359572][T10100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.477992][T10636] netlink: 628 bytes leftover after parsing attributes in process `syz.0.1415'. [ 197.549136][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 197.572374][T10636] set match dimension is over the limit! [ 197.589789][T10225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.601442][T10225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.673590][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.696154][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.961037][T10655] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1419'. [ 198.289428][T10684] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1425'. [ 198.331934][T10686] netlink: zone id is out of range [ 198.361117][T10688] netlink: zone id is out of range [ 198.460900][T10686] netlink: set zone limit has 4 unknown bytes [ 198.534764][T10688] netlink: set zone limit has 4 unknown bytes [ 198.624217][T10225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.805582][T10225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.119137][T10225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.244908][T10225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.367717][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 199.629115][T10225] bridge_slave_1: left allmulticast mode [ 199.634829][T10225] bridge_slave_1: left promiscuous mode [ 199.674670][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.727939][T10225] bridge_slave_0: left allmulticast mode [ 199.733689][T10225] bridge_slave_0: left promiscuous mode [ 199.747813][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.950403][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.983228][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.998034][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.020556][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.028629][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.035956][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.403312][T10225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.415087][T10225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.426673][T10225] bond0 (unregistering): Released all slaves [ 200.541612][T10751] lo speed is unknown, defaulting to 1000 [ 200.930617][T10780] tipc: Enabling of bearer rejected, failed to enable media [ 201.150253][T10751] chnl_net:caif_netlink_parms(): no params data found [ 201.240326][T10800] veth1_macvtap: left promiscuous mode [ 201.256141][T10800] macsec0: entered promiscuous mode [ 201.290327][T10800] macsec0: entered allmulticast mode [ 201.328996][T10806] veth1_macvtap: entered promiscuous mode [ 201.334813][T10806] veth1_macvtap: entered allmulticast mode [ 201.358239][T10806] macsec0: left promiscuous mode [ 201.366380][T10806] macsec0: left allmulticast mode [ 201.371797][T10806] veth1_macvtap: left allmulticast mode [ 201.524182][T10225] hsr_slave_0: left promiscuous mode [ 201.552967][T10225] hsr_slave_1: left promiscuous mode [ 201.626312][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.648198][T10225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.669172][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.676681][T10225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.735409][T10225] veth1_macvtap: left promiscuous mode [ 201.748002][T10225] veth0_macvtap: left promiscuous mode [ 201.759208][T10225] veth1_vlan: left promiscuous mode [ 201.776741][T10225] veth0_vlan: left promiscuous mode [ 202.151682][ T5150] Bluetooth: hci1: command tx timeout [ 202.333757][T10225] team0 (unregistering): Port device team_slave_1 removed [ 202.381213][T10225] team0 (unregistering): Port device team_slave_0 removed [ 203.110983][T10842] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 203.147876][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.170217][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.186806][T10751] bridge_slave_0: entered allmulticast mode [ 203.204591][T10751] bridge_slave_0: entered promiscuous mode [ 203.214150][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.253791][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.275679][T10853] netlink: 'syz.1.1458': attribute type 3 has an invalid length. [ 203.282382][T10751] bridge_slave_1: entered allmulticast mode [ 203.294375][T10853] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 203.301487][T10751] bridge_slave_1: entered promiscuous mode [ 203.313450][T10853] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1458'. [ 203.661089][T10867] netlink: 'syz.0.1460': attribute type 3 has an invalid length. [ 203.689977][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.724529][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.943345][T10751] team0: Port device team_slave_0 added [ 204.025378][T10751] team0: Port device team_slave_1 added [ 204.135575][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 204.177057][T10885] netlink: 'syz.1.1465': attribute type 3 has an invalid length. [ 204.184982][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1465'. [ 204.209235][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.227640][ T5150] Bluetooth: hci1: command tx timeout [ 204.237250][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.331650][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.383029][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.428091][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.501750][T10905] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1469'. [ 204.505756][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.557165][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1470'. [ 204.562591][T10905] netlink: 'syz.1.1469': attribute type 10 has an invalid length. [ 204.588333][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1469'. [ 204.712260][T10751] hsr_slave_0: entered promiscuous mode [ 204.754603][T10751] hsr_slave_1: entered promiscuous mode [ 204.771464][T10751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.783424][T10751] Cannot create hsr debugfs directory [ 204.804053][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 204.814363][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 204.824288][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 204.920758][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1474'. [ 205.014734][T10925] syz.2.1476[10925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.014846][T10925] syz.2.1476[10925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.036227][T10925] syz.2.1476[10925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.050882][T10925] syz.2.1476[10925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.242970][T10936] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 205.551462][T10956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.907998][T10971] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 205.923990][T10751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.935222][T10751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.956534][T10751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.977096][T10751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.113393][T10975] ebt_limit: overflow, try lower: 0/0 [ 206.211793][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.258769][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.292187][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.299428][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.309595][ T5150] Bluetooth: hci1: command tx timeout [ 206.332776][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.340034][T10231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.864321][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.138098][T11024] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 207.241771][T11024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.392704][T11043] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 207.712175][T10751] veth0_vlan: entered promiscuous mode [ 207.765843][T10751] veth1_vlan: entered promiscuous mode [ 207.896633][T10751] veth0_macvtap: entered promiscuous mode [ 207.937781][T10751] veth1_macvtap: entered promiscuous mode [ 207.996567][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.037628][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.064947][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.086193][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.107849][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.119194][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.131062][T10751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.142668][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.153388][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.163648][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.174633][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.184763][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.195768][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.208971][T10751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.330726][T10751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.347098][T10751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.366089][T10751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.366530][T11090] __nla_validate_parse: 2 callbacks suppressed [ 208.366548][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 208.385232][T10751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.391936][ T5150] Bluetooth: hci1: command tx timeout [ 208.404894][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1512'. [ 208.717772][ T7819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.725625][ T7819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.814113][T10225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.833421][T10225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.886988][T11102] tipc: Invalid UDP bearer configuration [ 208.887034][T11102] tipc: Enabling of bearer rejected, failed to enable media [ 208.999074][T11110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.396515][T11131] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.510082][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 209.520468][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 209.771652][T11151] vxcan1: tx address claim with dlc 1 [ 209.794414][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 209.817808][T11153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1532'. [ 210.067704][T10225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.160150][ T9308] wlan1: Trigger new scan to find an IBSS to join [ 210.241492][T10225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.433535][T10225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.525307][T10225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.632806][T10225] bridge_slave_1: left allmulticast mode [ 210.640570][T10225] bridge_slave_1: left promiscuous mode [ 210.647722][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.658142][T10225] bridge_slave_0: left allmulticast mode [ 210.663827][T10225] bridge_slave_0: left promiscuous mode [ 210.670051][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.806311][T11167] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1538'. [ 210.818663][T11163] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1535'. [ 210.820301][T11167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.879030][T11171] netlink: 'syz.0.1535': attribute type 3 has an invalid length. [ 211.126924][T11184] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1540'. [ 211.185167][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.206913][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.227499][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.240672][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.250874][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.260148][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.411065][T10225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.425339][T10225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.437846][T10225] bond0 (unregistering): Released all slaves [ 211.457150][T11173] tun0: tun_chr_ioctl cmd 1074025681 [ 211.472868][T11183] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 211.485709][T11181] tap0: tun_chr_ioctl cmd 2148553947 [ 211.605533][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 211.733730][T11191] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.828263][T11185] lo speed is unknown, defaulting to 1000 [ 211.850649][T11199] xt_CT: No such helper "syz1" [ 212.256844][T10225] hsr_slave_0: left promiscuous mode [ 212.284781][T10225] hsr_slave_1: left promiscuous mode [ 212.310212][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.339790][T10225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.358321][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.366243][T10225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.436400][T10225] veth1_macvtap: left promiscuous mode [ 212.446528][T10225] veth0_macvtap: left promiscuous mode [ 212.452659][T10225] veth1_vlan: left promiscuous mode [ 212.461320][T10225] veth0_vlan: left promiscuous mode [ 213.113157][ T11] wlan1: Trigger new scan to find an IBSS to join [ 213.197886][T10225] team0 (unregistering): Port device team_slave_1 removed [ 213.247052][T10225] team0 (unregistering): Port device team_slave_0 removed [ 213.351087][ T5150] Bluetooth: hci1: command tx timeout [ 213.805644][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 213.825329][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'. [ 213.835369][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 213.887811][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 213.935275][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 214.106573][T11268] tipc: Started in network mode [ 214.117291][T11268] tipc: Node identity ac14140f, cluster identity 4711 [ 214.124650][T11268] tipc: New replicast peer: 255.255.255.255 [ 214.181454][T11268] tipc: Enabled bearer , priority 10 [ 214.212468][T11185] chnl_net:caif_netlink_parms(): no params data found [ 214.458110][T11286] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 214.460353][T11275] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 214.468789][T11286] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.1562'. [ 214.511985][T11286] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 214.526297][T11286] netlink: 'syz.3.1562': attribute type 2 has an invalid length. [ 214.545129][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 214.577115][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.590240][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.620792][T11185] bridge_slave_0: entered allmulticast mode [ 214.652080][T11185] bridge_slave_0: entered promiscuous mode [ 214.704817][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.725936][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.738952][T11185] bridge_slave_1: entered allmulticast mode [ 214.748227][T11185] bridge_slave_1: entered promiscuous mode [ 214.843273][T11185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.871733][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 214.874039][T11185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.993561][T11185] team0: Port device team_slave_0 added [ 215.035976][T11310] dvmrp0: entered allmulticast mode [ 215.058222][T11185] team0: Port device team_slave_1 added [ 215.136889][T11185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.153355][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.182773][ T7325] tipc: Node number set to 2886997007 [ 215.194781][T11185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.246821][T11185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.254954][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.289720][T11185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.427583][ T5150] Bluetooth: hci1: command tx timeout [ 215.441057][T11321] netlink: 'syz.2.1570': attribute type 4 has an invalid length. [ 215.458368][T11321] openvswitch: netlink: Missing key (keys=40040, expected=2000) [ 215.474776][T11185] hsr_slave_0: entered promiscuous mode [ 215.510332][T11185] hsr_slave_1: entered promiscuous mode [ 215.543317][T11185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.558263][T11185] Cannot create hsr debugfs directory [ 215.911695][T11339] can: request_module (can-proto-3) failed. [ 215.928823][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 216.148096][T10225] wlan1: Trigger new scan to find an IBSS to join [ 216.181419][T11361] netlink: 'syz.0.1580': attribute type 9 has an invalid length. [ 216.204323][T11361] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1580'. [ 216.707145][T11383] netlink: 'syz.1.1586': attribute type 21 has an invalid length. [ 216.858525][T11394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 217.162381][T11407] xt_nfacct: accounting object `syz0' does not exists [ 217.203854][T11410] IPv6: sit1: Disabled Multicast RS [ 217.204527][T11407] xt_nfacct: accounting object `syz0' does not exists [ 217.426634][T11420] xt_CT: No such helper "snmp_trap" [ 217.521710][ T5150] Bluetooth: hci1: command tx timeout [ 217.621299][T11185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.713368][T11185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.759704][T11447] Cannot find add_set index 0 as target [ 217.783029][T11185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.804896][T11185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.002563][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.093223][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.135445][T11452] netlink: 'syz.1.1606': attribute type 2 has an invalid length. [ 218.181762][T11466] netlink: 'syz.1.1606': attribute type 2 has an invalid length. [ 218.275323][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.282534][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.329041][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.336220][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.819381][T11185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.088259][ T7819] wlan1: Creating new IBSS network, BSSID 9e:b5:76:95:b2:5e [ 219.201103][T11523] __nla_validate_parse: 9 callbacks suppressed [ 219.201126][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1624'. [ 219.343251][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 219.381538][T11529] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 219.588214][ T5150] Bluetooth: hci1: command tx timeout [ 219.639800][T11185] veth0_vlan: entered promiscuous mode [ 219.665871][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1630'. [ 219.726973][T11185] veth1_vlan: entered promiscuous mode [ 219.733705][T11551] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1633'. [ 219.826838][T11185] veth0_macvtap: entered promiscuous mode [ 219.910802][T11185] veth1_macvtap: entered promiscuous mode [ 220.017792][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.035052][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.051350][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.069515][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.093951][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.116339][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.167132][T11185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.201334][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.235859][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.283497][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.313762][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.324651][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.335375][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.346690][T11185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.376171][T11587] netlink: set zone limit has 8 unknown bytes [ 220.451938][T11592] netlink: 988 bytes leftover after parsing attributes in process `syz.0.1640'. [ 220.460971][T11185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.461030][T11185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.461062][T11185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.461095][T11185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.559710][T11573] tap0: tun_chr_ioctl cmd 1074025677 [ 220.565842][T11573] tap0: linktype set to 65534 [ 220.826877][T10225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.828215][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.843938][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.858711][T10225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.990553][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 221.012333][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 221.028829][T11609] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1645'. [ 221.118537][T11609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.248094][T11627] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 221.277686][T11627] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1649'. [ 221.674185][ T7819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.746284][T11638] IPVS: length: 186 != 8 [ 221.846252][ T7819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.019176][ T7819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.216963][ T7819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.356574][ T7819] bridge_slave_1: left allmulticast mode [ 222.363277][ T7819] bridge_slave_1: left promiscuous mode [ 222.369231][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.385269][ T7819] bridge_slave_0: left allmulticast mode [ 222.394135][ T7819] bridge_slave_0: left promiscuous mode [ 222.406249][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.052904][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.070733][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.091644][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.101632][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.112124][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.119805][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.520925][ T7819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.558584][ T7819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.611018][ T7819] bond0 (unregistering): Released all slaves [ 223.680775][T11687] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1656'. [ 223.758349][T11700] lo speed is unknown, defaulting to 1000 [ 224.333802][T11711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.354863][T11711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.376600][T11711] bond0 (unregistering): (slave team0): Releasing backup interface [ 224.395815][T11711] bond0 (unregistering): Released all slaves [ 224.755293][ T7819] hsr_slave_0: left promiscuous mode [ 224.791301][ T7819] hsr_slave_1: left promiscuous mode [ 224.818677][ T7819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.838006][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.870192][ T7819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.891247][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.991976][ T7819] veth1_macvtap: left promiscuous mode [ 225.005610][ T7819] veth0_macvtap: left promiscuous mode [ 225.012591][ T7819] veth1_vlan: left promiscuous mode [ 225.020449][ T7819] veth0_vlan: left promiscuous mode [ 225.197784][ T5150] Bluetooth: hci1: command tx timeout [ 225.363509][T11775] xt_nat: multiple ranges no longer supported [ 225.935182][ T7819] team0 (unregistering): Port device team_slave_1 removed [ 226.058687][ T7819] team0 (unregistering): Port device team_slave_0 removed [ 226.700667][T11802] xfrm1: entered allmulticast mode [ 226.769767][T11700] chnl_net:caif_netlink_parms(): no params data found [ 227.144822][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.163551][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.174305][T11700] bridge_slave_0: entered allmulticast mode [ 227.204061][T11700] bridge_slave_0: entered promiscuous mode [ 227.238898][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.285783][ T5150] Bluetooth: hci1: command tx timeout [ 227.296005][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.339376][T11700] bridge_slave_1: entered allmulticast mode [ 227.367119][T11700] bridge_slave_1: entered promiscuous mode [ 227.569746][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.594940][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.679077][T11700] team0: Port device team_slave_0 added [ 227.788756][T11861] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 227.800702][T11861] __nla_validate_parse: 3 callbacks suppressed [ 227.800725][T11861] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1697'. [ 227.885151][T11869] ip6t_srh: unknown srh invflags 5F00 [ 227.937119][T11700] team0: Port device team_slave_1 added [ 228.090525][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.107371][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.135329][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 228.155714][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.181897][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 228.204447][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.220704][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.257534][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.482648][T11906] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1708'. [ 228.532662][T11700] hsr_slave_0: entered promiscuous mode [ 228.597941][T11700] hsr_slave_1: entered promiscuous mode [ 228.626236][T11700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.655024][T11700] Cannot create hsr debugfs directory [ 228.906267][T11933] veth0: entered promiscuous mode [ 228.948950][T11933] veth0: left promiscuous mode [ 229.040015][T11942] unknown channel width for channel at 909000KHz? [ 229.077128][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.170381][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 229.193487][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.253443][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.354310][ T5150] Bluetooth: hci1: command tx timeout [ 229.409289][T11958] gretap0: entered promiscuous mode [ 229.415159][T11958] vlan2: entered promiscuous mode [ 229.418357][T11937] syz.2.1711 (11937) used greatest stack depth: 17488 bytes left [ 229.421643][T11958] vlan2: entered allmulticast mode [ 229.433379][T11958] gretap0: entered allmulticast mode [ 229.636387][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 231.427492][ T5150] Bluetooth: hci1: command tx timeout [ 231.568197][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 231.589023][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1723'. [ 231.621849][T11984] bridge3: entered promiscuous mode [ 231.668730][T11984] bridge3: entered allmulticast mode [ 231.708486][T11984] team0: Port device bridge3 added [ 231.775928][T12001] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 231.952559][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 232.190434][T12009] "syz.2.1731" (12009) uses obsolete ecb(arc4) skcipher [ 232.231871][T12020] "syz.2.1731" (12020) uses obsolete ecb(arc4) skcipher [ 232.647891][T11700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.705606][T11700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.735692][T11700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.780965][T12055] ipt_REJECT: TCP_RESET invalid for non-tcp [ 232.787997][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.929940][T11700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.255106][T11700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.274855][T11700] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.293989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.301193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.362187][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.369476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.495712][T11700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.552265][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 233.863986][T12107] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.895376][T12108] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1757'. [ 234.014004][T12113] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 234.047309][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1758'. [ 234.270496][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.839559][T12161] tipc: Started in network mode [ 234.844904][T12161] tipc: Node identity , cluster identity 4711 [ 234.851688][T12161] tipc: Failed to obtain node identity [ 234.859163][T12161] tipc: Enabling of bearer rejected, failed to enable media [ 234.936675][T11700] veth0_vlan: entered promiscuous mode [ 234.972056][T11700] veth1_vlan: entered promiscuous mode [ 235.005637][T11700] veth0_macvtap: entered promiscuous mode [ 235.016786][T11700] veth1_macvtap: entered promiscuous mode [ 235.033179][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.043741][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.053878][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.065128][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.075405][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.086228][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.098709][T11700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.139501][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.167296][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.184019][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.188574][T12171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1770'. [ 235.221504][T12177] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1773'. [ 235.231131][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.247307][T12177] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 235.255932][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.285258][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.343217][T11700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.423865][T11700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.460640][T11700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.478288][T11700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.500785][T11700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.767304][T10225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.775191][T10225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.853945][ T9308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.882433][ T9308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.964888][T12209] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.070550][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1782'. [ 236.129051][T12173] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 236.412862][T12235] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1785'. [ 236.540685][T12239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1786'. [ 236.640708][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.849873][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.943607][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.462816][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.643035][T12260] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1790'. [ 237.828958][ T61] bridge_slave_1: left allmulticast mode [ 237.847367][ T61] bridge_slave_1: left promiscuous mode [ 237.853196][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.888357][ T61] bridge_slave_0: left allmulticast mode [ 237.916953][ T61] bridge_slave_0: left promiscuous mode [ 237.927906][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.003312][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1795'. [ 238.146229][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.165140][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.176529][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.191751][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.208255][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.217478][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.718622][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.731538][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.744416][ T61] bond0 (unregistering): Released all slaves [ 238.915745][T12301] __nla_validate_parse: 1 callbacks suppressed [ 238.915765][T12301] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1798'. [ 238.994792][T12283] lo speed is unknown, defaulting to 1000 [ 239.594970][T12283] chnl_net:caif_netlink_parms(): no params data found [ 239.649557][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 239.687534][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1808'. [ 239.753767][T12341] netlink: 'syz.2.1807': attribute type 4 has an invalid length. [ 239.860372][T12356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1810'. [ 239.890969][ T61] hsr_slave_0: left promiscuous mode [ 239.941059][ T61] hsr_slave_1: left promiscuous mode [ 239.982550][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.996509][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.010636][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.030911][T12371] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1813'. [ 240.042327][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.083671][ T61] veth1_macvtap: left promiscuous mode [ 240.097825][ T61] veth0_macvtap: left promiscuous mode [ 240.110359][ T61] veth1_vlan: left promiscuous mode [ 240.122767][ T61] veth0_vlan: left promiscuous mode [ 240.314543][ T5150] Bluetooth: hci1: command tx timeout [ 240.658933][ T61] team0 (unregistering): Port device team_slave_1 removed [ 240.704631][ T61] team0 (unregistering): Port device team_slave_0 removed [ 241.394910][T12391] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1817'. [ 241.467133][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 241.487412][T12394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.516035][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.551866][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.567954][T12283] bridge_slave_0: entered allmulticast mode [ 241.595166][T12283] bridge_slave_0: entered promiscuous mode [ 241.639433][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.646604][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.680294][T12283] bridge_slave_1: entered allmulticast mode [ 241.688300][T12283] bridge_slave_1: entered promiscuous mode [ 241.821197][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.870385][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.053978][T12283] team0: Port device team_slave_0 added [ 242.130005][T12283] team0: Port device team_slave_1 added [ 242.205785][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'. [ 242.228926][T12442] netlink: 'syz.1.1827': attribute type 3 has an invalid length. [ 242.253269][T12442] netlink: 'syz.1.1827': attribute type 3 has an invalid length. [ 242.274635][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.336541][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.365924][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.397794][ T5150] Bluetooth: hci1: command tx timeout [ 242.433283][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.438139][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 242.461335][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.477847][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.504279][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.619216][T12283] hsr_slave_0: entered promiscuous mode [ 242.638467][T12283] hsr_slave_1: entered promiscuous mode [ 242.667129][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.675506][T12283] Cannot create hsr debugfs directory [ 243.209826][T12490] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 243.238039][T12490] netlink: 'syz.0.1839': attribute type 3 has an invalid length. [ 243.256393][T12490] NCSI netlink: No device for ifindex 813332851 [ 243.755525][T12526] x_tables: duplicate underflow at hook 2 [ 243.929923][T12533] __nla_validate_parse: 2 callbacks suppressed [ 243.929946][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1846'. [ 244.081206][T12535] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1847'. [ 244.120179][T12531] x_tables: duplicate underflow at hook 2 [ 244.408538][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'. [ 244.419363][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'. [ 244.467657][ T5150] Bluetooth: hci1: command tx timeout [ 244.558190][T12559] netlink: 'syz.2.1851': attribute type 11 has an invalid length. [ 244.607999][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 244.776803][T12283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.785240][T12561] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1852'. [ 244.827867][T12283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.926336][T12283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.003688][T12283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.016020][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 245.348808][T12603] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.358416][T12603] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.367406][T12603] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.376162][T12603] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.400587][T12606] tipc: Disabling bearer [ 245.474776][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.556229][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.601204][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.608438][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.637877][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.645184][T12596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.648060][T12616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.670918][T12616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.891206][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 245.900239][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1865'. [ 246.246317][T12646] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1870'. [ 246.348212][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.588939][ T5150] Bluetooth: hci1: command tx timeout [ 247.072480][T12693] lo speed is unknown, defaulting to 1000 [ 247.330786][T12283] veth0_vlan: entered promiscuous mode [ 247.386378][T12283] veth1_vlan: entered promiscuous mode [ 247.790741][T12283] veth0_macvtap: entered promiscuous mode [ 247.840500][T12283] veth1_macvtap: entered promiscuous mode [ 248.002581][T12753] netlink: 'syz.0.1889': attribute type 29 has an invalid length. [ 248.039804][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.071556][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.088914][T12757] unsupported nla_type 40 [ 248.107301][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.138674][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.169733][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.202386][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.254341][T12765] Cannot find add_set index 1 as target [ 248.262455][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.292308][T12753] netlink: 'syz.0.1889': attribute type 29 has an invalid length. [ 248.321375][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.369292][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.402316][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.428057][T12773] netlink: 'syz.2.1894': attribute type 9 has an invalid length. [ 248.443191][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.480668][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.481301][T12773] dccp_invalid_packet: P.Data Offset(100) too large [ 248.514478][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.543978][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.591893][T12283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.617929][T12283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.626703][T12283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.665691][T12283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.924469][T12596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.952958][T12596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.016050][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.057680][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.191629][T12806] netlink: 'syz.1.1905': attribute type 12 has an invalid length. [ 249.241244][T12806] __nla_validate_parse: 7 callbacks suppressed [ 249.241268][T12806] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1905'. [ 249.366590][T12817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1906'. [ 249.458731][T12817] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1906'. [ 249.576253][T12824] bridge0: port 4(vlan1) entered blocking state [ 249.589852][T12824] bridge0: port 4(vlan1) entered disabled state [ 249.596656][T12824] vlan1: entered allmulticast mode [ 249.640492][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1910'. [ 249.684425][T12824] vlan1: left allmulticast mode [ 249.798024][ T1124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.994567][ T1124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.098857][ T1124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.201065][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.408025][ T1124] bridge_slave_1: left allmulticast mode [ 250.413765][ T1124] bridge_slave_1: left promiscuous mode [ 250.429447][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.443583][ T1124] bridge_slave_0: left allmulticast mode [ 250.458154][ T1124] bridge_slave_0: left promiscuous mode [ 250.464035][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.812708][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.840224][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.849849][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.867559][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.875808][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.884981][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.184255][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.196915][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.214969][ T1124] bond0 (unregistering): Released all slaves [ 251.242999][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 251.268703][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 251.509050][T12596] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.632127][T12868] lo speed is unknown, defaulting to 1000 [ 251.705959][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 251.716095][T12884] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1917'. [ 251.985406][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 252.008794][T12900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1922'. [ 252.023116][T12900] vlan3: entered allmulticast mode [ 252.080576][T12906] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 252.226220][ T1124] hsr_slave_0: left promiscuous mode [ 252.284926][ T1124] hsr_slave_1: left promiscuous mode [ 252.312666][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.331549][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.361059][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.375701][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.507796][ T1124] veth1_macvtap: left promiscuous mode [ 252.513401][ T1124] veth0_macvtap: left promiscuous mode [ 252.537044][ T1124] veth1_vlan: left promiscuous mode [ 252.562003][ T1124] veth0_vlan: left promiscuous mode [ 252.949182][ T5150] Bluetooth: hci1: command tx timeout [ 253.223913][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 253.271594][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 253.813965][T12868] chnl_net:caif_netlink_parms(): no params data found [ 254.109451][T12868] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.135453][T12868] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.148171][T12868] bridge_slave_0: entered allmulticast mode [ 254.170039][T12868] bridge_slave_0: entered promiscuous mode [ 254.200239][T12868] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.226400][T12868] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.247704][T12868] bridge_slave_1: entered allmulticast mode [ 254.270060][T12868] bridge_slave_1: entered promiscuous mode [ 254.289928][T12972] __nla_validate_parse: 4 callbacks suppressed [ 254.289947][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 254.326613][T12972] netlink: 'syz.0.1935': attribute type 30 has an invalid length. [ 254.369447][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 254.381107][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 254.400743][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 254.441383][T12973] netlink: 'syz.0.1935': attribute type 30 has an invalid length. [ 254.466525][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 254.670495][T12868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.692661][T12868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.793756][T12868] team0: Port device team_slave_0 added [ 254.818766][T12868] team0: Port device team_slave_1 added [ 254.924891][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 254.958749][T13012] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1945'. [ 254.979227][T12868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.986238][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.026867][T12868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.038103][ T5150] Bluetooth: hci1: command tx timeout [ 255.078717][T12868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.085730][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.115596][T12868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.273584][T13024] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 255.300532][T13024] netlink: 'syz.3.1949': attribute type 2 has an invalid length. [ 255.360871][T12868] hsr_slave_0: entered promiscuous mode [ 255.387811][T12868] hsr_slave_1: entered promiscuous mode [ 255.397382][T12868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.414044][T13036] netlink: 'syz.1.1951': attribute type 8 has an invalid length. [ 255.415941][T12868] Cannot create hsr debugfs directory [ 255.476137][T13036] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1951'. [ 255.583897][T13040] netlink: 'syz.2.1954': attribute type 10 has an invalid length. [ 255.723716][T13046] Cannot find set identified by id 752 to match [ 256.660656][T12868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.687729][T12868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.751129][T12868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.779690][T12868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.864887][T13110] vlan2: left allmulticast mode [ 256.887646][T13110] erspan0: left allmulticast mode [ 256.894106][T13110] veth5: left allmulticast mode [ 256.916806][T13110] bridge3: left allmulticast mode [ 256.939984][T13117] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 256.968296][T13115] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 257.108531][ T5150] Bluetooth: hci1: command tx timeout [ 257.120293][T13114] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 257.141690][T13114] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 257.309940][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 257.371626][T12868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.449740][T12868] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.462252][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 257.510083][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.517377][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.566002][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.573266][T10224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.710900][T13161] sctp: [Deprecated]: syz.0.1978 (pid 13161) Use of int in maxseg socket option. [ 257.710900][T13161] Use struct sctp_assoc_value instead [ 257.961528][T13172] macvtap0: entered promiscuous mode [ 257.976704][T13172] macvtap0: left promiscuous mode [ 258.304818][T12868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.525654][T13206] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 258.805669][T12868] veth0_vlan: entered promiscuous mode [ 258.841319][T12868] veth1_vlan: entered promiscuous mode [ 258.922820][T12868] veth0_macvtap: entered promiscuous mode [ 258.953957][T12868] veth1_macvtap: entered promiscuous mode [ 259.034780][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.046438][T13223] FAULT_INJECTION: forcing a failure. [ 259.046438][T13223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.077916][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.088770][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.095962][T13223] CPU: 0 UID: 0 PID: 13223 Comm: syz.3.1988 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 259.110026][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.113014][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.120098][T13223] Call Trace: [ 259.120114][T13223] [ 259.120126][T13223] dump_stack_lvl+0x241/0x360 [ 259.120171][T13223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.120199][T13223] ? __pfx__printk+0x10/0x10 [ 259.120231][T13223] ? snprintf+0xda/0x120 [ 259.120265][T13223] should_fail_ex+0x3b0/0x4e0 [ 259.120296][T13223] _copy_to_user+0x31/0xb0 [ 259.120333][T13223] simple_read_from_buffer+0xca/0x150 [ 259.120373][T13223] proc_fail_nth_read+0x1e9/0x250 [ 259.120411][T13223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.120452][T13223] ? rw_verify_area+0x55e/0x6f0 [ 259.120486][T13223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.191338][T13223] vfs_read+0x1fc/0xb70 [ 259.195590][T13223] ? fdget_pos+0x24e/0x320 [ 259.200024][T13223] ? __pfx_vfs_read+0x10/0x10 [ 259.204730][T13223] ? __fget_files+0x3f3/0x470 [ 259.209427][T13223] ? fdget_pos+0x24e/0x320 [ 259.213858][T13223] ksys_read+0x183/0x2b0 [ 259.218115][T13223] ? __pfx_ksys_read+0x10/0x10 [ 259.222918][T13223] ? do_syscall_64+0x100/0x230 [ 259.227700][T13223] ? do_syscall_64+0xb6/0x230 [ 259.232392][T13223] do_syscall_64+0xf3/0x230 [ 259.236917][T13223] ? clear_bhb_loop+0x35/0x90 [ 259.241616][T13223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.247524][T13223] RIP: 0033:0x7f5388b7d15c [ 259.251950][T13223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 259.271574][T13223] RSP: 002b:00007f53899bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.280007][T13223] RAX: ffffffffffffffda RBX: 00007f5388d35f80 RCX: 00007f5388b7d15c [ 259.287991][T13223] RDX: 000000000000000f RSI: 00007f53899bd0a0 RDI: 0000000000000004 [ 259.295991][T13223] RBP: 00007f53899bd090 R08: 0000000000000000 R09: 0000000000000000 [ 259.303974][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.311956][T13223] R13: 0000000000000000 R14: 00007f5388d35f80 R15: 00007fff95901748 [ 259.319954][T13223] [ 259.325911][T13228] netlink: 'syz.1.1987': attribute type 4 has an invalid length. [ 259.337946][ T5150] Bluetooth: hci1: command tx timeout [ 259.367676][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.417569][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.430277][T13228] __nla_validate_parse: 4 callbacks suppressed [ 259.430299][T13228] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1987'. [ 259.491211][T12868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.508552][T13228] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 259.590903][T13240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1989'. [ 259.626065][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.688411][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.736805][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.768414][T13247] netlink: 'syz.0.1992': attribute type 3 has an invalid length. [ 259.770696][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.801674][T12868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.822536][T12868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.852031][T12868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.871912][T13243] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 259.903881][T12868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.913012][T12868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.922013][T12868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.931267][T12868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.128926][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.146570][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.165132][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 260.179424][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.192849][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.336687][T13266] ipt_rpfilter: unknown options [ 260.561871][T12596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.679751][T12596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.728914][T13280] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 260.955545][T12596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.035331][T12596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.184276][T12596] bridge_slave_1: left allmulticast mode [ 261.196608][T12596] bridge_slave_1: left promiscuous mode [ 261.206875][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.225402][T12596] bridge_slave_0: left allmulticast mode [ 261.234742][T12596] bridge_slave_0: left promiscuous mode [ 261.249617][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.899487][T13312] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 262.136712][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.147722][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.157143][T12596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.157931][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.177002][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.186611][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.195641][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.205172][T12596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.218107][T12596] bond0 (unregistering): Released all slaves [ 262.269500][T13311] netlink: 'syz.2.2004': attribute type 21 has an invalid length. [ 262.287483][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 262.299996][T13325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2008'. [ 262.313765][T13326] tipc: Started in network mode [ 262.321740][T13326] tipc: Node identity aaaaaaaaaa16, cluster identity 4711 [ 262.339749][T13326] tipc: Enabled bearer , priority 10 [ 262.462526][T13331] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 262.584670][T13322] lo speed is unknown, defaulting to 1000 [ 262.710667][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 262.746690][T13345] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.878119][T13343] sit2: entered promiscuous mode [ 262.900251][T13343] sit2: entered allmulticast mode [ 263.003329][T12596] hsr_slave_0: left promiscuous mode [ 263.033770][T12596] hsr_slave_1: left promiscuous mode [ 263.051630][T12596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.068152][T12596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.098587][T12596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.106075][T12596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.172776][T12596] veth1_macvtap: left promiscuous mode [ 263.181771][T13375] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 263.190765][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 263.198522][T12596] veth0_macvtap: left promiscuous mode [ 263.204244][T12596] veth1_vlan: left promiscuous mode [ 263.209823][T13375] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 263.217976][T12596] veth0_vlan: left promiscuous mode [ 263.223820][T13375] netlink: 126012 bytes leftover after parsing attributes in process `syz.2.2021'. [ 263.458906][ T7331] tipc: Node number set to 12364458 [ 263.931637][T12596] team0 (unregistering): Port device team_slave_1 removed [ 263.979755][T12596] team0 (unregistering): Port device team_slave_0 removed [ 264.231815][ T5150] Bluetooth: hci1: command tx timeout [ 264.904408][T13322] chnl_net:caif_netlink_parms(): no params data found [ 265.064542][T13420] tipc: Started in network mode [ 265.080331][T13420] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 265.105182][T13420] tipc: Enabling of bearer rejected, failed to enable media [ 265.300424][T13437] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2034'. [ 265.609544][T13438] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2032'. [ 265.622853][T13322] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.634944][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.647065][T13322] bridge_slave_0: entered allmulticast mode [ 265.671373][T13322] bridge_slave_0: entered promiscuous mode [ 265.690286][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.706446][T13322] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.726426][T13322] bridge_slave_1: entered allmulticast mode [ 265.730937][T13454] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 265.741504][T13322] bridge_slave_1: entered promiscuous mode [ 265.744711][T13454] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2035'. [ 265.774922][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 265.804407][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 265.821958][T13454] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2035'. [ 265.867018][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 265.997874][T13457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2036'. [ 266.029415][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.058955][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.145568][T13470] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 266.163271][T13467] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2040'. [ 266.171726][T13470] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 266.190136][T13467] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 266.193060][T13322] team0: Port device team_slave_0 added [ 266.235603][T13322] team0: Port device team_slave_1 added [ 266.307882][ T5150] Bluetooth: hci1: command tx timeout [ 266.355859][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.368218][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.408258][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.447092][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 266.503912][T13481] gretap1: entered promiscuous mode [ 266.528864][T13481] gretap1: entered allmulticast mode [ 266.567737][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.574737][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.588210][T13487] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 266.698442][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.951058][T13322] hsr_slave_0: entered promiscuous mode [ 266.979895][T13322] hsr_slave_1: entered promiscuous mode [ 267.013315][T13322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.027845][T13322] Cannot create hsr debugfs directory [ 267.100043][T13530] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 267.188948][T13511] : entered promiscuous mode [ 267.889251][T13543] macvlan0: entered allmulticast mode [ 267.894942][T13543] veth1_vlan: entered allmulticast mode [ 267.939441][T13544] veth1_vlan: left allmulticast mode [ 268.237425][T13544] macvlan0 (unregistering): left allmulticast mode [ 268.264955][T13546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.279935][T13546] team0: Port device bond0 added [ 268.388192][ T5150] Bluetooth: hci1: command tx timeout [ 268.403987][T13573] netlink: 'syz.2.2058': attribute type 21 has an invalid length. [ 268.492056][T13579] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 268.735678][T13585] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 268.788587][T13585] team0: Port device netdevsim0 added [ 268.811755][T13592] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.827348][T13592] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.836286][T13592] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.848475][T13592] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.861185][T13592] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.882435][T13592] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.907565][T13592] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.917746][T13592] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.927968][T13592] geneve2: entered promiscuous mode [ 268.933324][T13592] geneve2: entered allmulticast mode [ 269.580444][T13628] sctp: [Deprecated]: syz.1.2075 (pid 13628) Use of int in max_burst socket option. [ 269.580444][T13628] Use struct sctp_assoc_value instead [ 269.600306][T13627] C: entered promiscuous mode [ 269.613256][T13322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.648453][T13626] C: left promiscuous mode [ 269.653110][T13322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.694057][T13322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.716382][T13322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.799075][T13636] netlink: 'syz.0.2078': attribute type 4 has an invalid length. [ 269.827682][T13636] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 269.962380][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.016205][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.051321][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.058538][T10223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.108438][T13648] netlink: 'syz.0.2081': attribute type 4 has an invalid length. [ 270.125012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.132277][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.180390][T13648] netlink: 'syz.0.2081': attribute type 4 has an invalid length. [ 270.391817][T13660] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 270.477753][ T5150] Bluetooth: hci1: command tx timeout [ 270.504965][T13669] __nla_validate_parse: 140 callbacks suppressed [ 270.504988][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2084'. [ 270.595826][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 270.645501][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.732088][T13677] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 270.774622][T13677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2087'. [ 270.863327][T13682] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 270.874001][T13682] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2087'. [ 270.886789][T13690] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2090'. [ 270.936367][T13682] workqueue: Failed to create a rescuer kthread for wq "phy4-mac-cmds": -EINTR [ 271.250561][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2094'. [ 271.287574][T13665] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.574513][T13322] veth0_vlan: entered promiscuous mode [ 271.671167][T13322] veth1_vlan: entered promiscuous mode [ 271.744137][T13709] Bluetooth: MGMT ver 1.23 [ 271.798415][T13322] veth0_macvtap: entered promiscuous mode [ 271.831438][T13714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2093'. [ 271.858390][T13322] veth1_macvtap: entered promiscuous mode [ 271.919687][T13734] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2096'. [ 271.950788][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.978502][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.998496][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.009911][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.021232][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.033620][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.048742][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.114502][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.171839][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.207143][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.232214][T13748] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 272.235536][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.252263][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.254824][T13748] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2099'. [ 272.263024][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.264767][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.292616][T13750] ipt_REJECT: ECHOREPLY no longer supported. [ 272.326989][T13322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.347051][T13322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.356837][T13322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.375851][T13322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.548321][ T5150] Bluetooth: hci1: command tx timeout [ 272.624400][T10223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.648037][T10223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.741656][T10224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.765178][T13770] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.769314][T10224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.371333][T12596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.535320][T12596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.620838][T12596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.818013][T12596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.988818][T12596] bridge_slave_1: left allmulticast mode [ 273.994538][T12596] bridge_slave_1: left promiscuous mode [ 274.005058][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.019838][T12596] bridge_slave_0: left allmulticast mode [ 274.025652][T12596] bridge_slave_0: left promiscuous mode [ 274.032822][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.581266][T12596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.593013][T12596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.606881][T12596] bond0 (unregistering): Released all slaves [ 274.999485][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 275.186728][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.213246][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.227631][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.238441][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.248397][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.266943][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.320815][T13871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.577294][T12596] hsr_slave_0: left promiscuous mode [ 275.599235][T12596] hsr_slave_1: left promiscuous mode [ 275.634602][T12596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.655776][T12596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.670169][T12596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.695499][T12596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.704333][T13892] openvswitch: netlink: Flow key attr not present in new flow. [ 275.777959][T12596] veth1_macvtap: left promiscuous mode [ 275.783569][T12596] veth0_macvtap: left promiscuous mode [ 275.801511][T12596] veth1_vlan: left promiscuous mode [ 275.806954][T12596] veth0_vlan: left promiscuous mode [ 276.405743][T12596] team0 (unregistering): Port device team_slave_1 removed [ 276.455023][T12596] team0 (unregistering): Port device team_slave_0 removed [ 276.876895][T13892] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 276.917141][T13895] team0: Port device bond0 removed [ 276.924520][T13895] bridge_slave_0: left allmulticast mode [ 276.942140][T13895] bridge_slave_0: left promiscuous mode [ 276.958519][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.976910][T13895] bridge_slave_1: left allmulticast mode [ 276.982910][T13895] bridge_slave_1: left promiscuous mode [ 276.989847][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.009757][T13895] bond0: (slave bond_slave_0): Releasing backup interface [ 277.029707][T13895] bond0: (slave bond_slave_1): Releasing backup interface [ 277.060353][T13895] team0: Port device team_slave_0 removed [ 277.076771][T13895] team0: Port device team_slave_1 removed [ 277.092410][T13895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.101942][T13895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.129409][T13895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.148434][T13895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.167846][T13895] team0: Port device bridge3 removed [ 277.194015][T13907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'. [ 277.265177][T13864] lo speed is unknown, defaulting to 1000 [ 277.437316][ T5861] Bluetooth: hci1: command tx timeout [ 277.542071][T13930] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.2137'. [ 277.725857][T13941] xt_connbytes: Forcing CT accounting to be enabled [ 277.832953][T13864] chnl_net:caif_netlink_parms(): no params data found [ 278.219817][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 278.265963][T13864] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.274038][T13864] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.300282][T13864] bridge_slave_0: entered allmulticast mode [ 278.320761][T13864] bridge_slave_0: entered promiscuous mode [ 278.340272][T13864] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.364019][T13864] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.380416][T13864] bridge_slave_1: entered allmulticast mode [ 278.399385][T13864] bridge_slave_1: entered promiscuous mode [ 278.558122][T13991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2150'. [ 278.595942][T13864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.621036][T13864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.739352][T13998] xt_CONNSECMARK: invalid mode: 0 [ 278.771641][T13864] team0: Port device team_slave_0 added [ 278.793311][T13864] team0: Port device team_slave_1 added [ 278.989514][T13864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.016814][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.095461][T13864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.133527][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 279.143252][T14015] bridge_slave_1: left allmulticast mode [ 279.150455][T14015] bridge_slave_1: left promiscuous mode [ 279.156380][T14015] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.195761][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 279.308079][T13864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.327365][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.398038][T13864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.446461][T14035] netlink: 'syz.0.2161': attribute type 9 has an invalid length. [ 279.473080][T14035] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.2161'. [ 279.478448][T14036] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2162'. [ 279.517388][ T5861] Bluetooth: hci1: command tx timeout [ 279.532043][T14032] 8021q: VLANs not supported on lo [ 279.573186][T13864] hsr_slave_0: entered promiscuous mode [ 279.604705][T13864] hsr_slave_1: entered promiscuous mode [ 279.632189][T13864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.639690][T14041] netlink: 4088 bytes leftover after parsing attributes in process `syz.1.2163'. [ 279.641528][T13864] Cannot create hsr debugfs directory [ 279.675910][T14043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2164'. [ 279.696562][T14031] pim6reg1: entered promiscuous mode [ 279.707983][T14031] pim6reg1: entered allmulticast mode [ 279.891452][T14052] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 279.899428][T14052] netlink: 'syz.2.2166': attribute type 4 has an invalid length. [ 280.413284][T14076] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 280.776726][T14099] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.059558][T14113] bridge0: port 4(syz_tun) entered blocking state [ 281.097458][T14113] bridge0: port 4(syz_tun) entered disabled state [ 281.127850][T14113] syz_tun: entered allmulticast mode [ 281.141980][T14113] syz_tun: entered promiscuous mode [ 281.357905][T13864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.400889][T13864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.473414][T13864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.520529][T13864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.569732][T14129] IPv6: sit3: Disabled Multicast RS [ 281.599247][ T5861] Bluetooth: hci1: command tx timeout [ 281.894173][T13864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.961137][T13864] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.016940][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.024180][T10223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.081157][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.088414][T10224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.123514][T14164] netlink: 'syz.3.2200': attribute type 72 has an invalid length. [ 282.449177][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.536357][T14185] netlink: 'syz.2.2203': attribute type 13 has an invalid length. [ 282.545412][T14185] netlink: 'syz.2.2203': attribute type 58 has an invalid length. [ 282.565637][T14185] __nla_validate_parse: 9 callbacks suppressed [ 282.565660][T14185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2203'. [ 282.653776][T14186] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.661015][T14186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.764076][T14195] netlink: zone id is out of range [ 282.822688][T14195] netlink: set zone limit has 4 unknown bytes [ 282.874736][T14203] netlink: 'syz.1.2206': attribute type 21 has an invalid length. [ 282.928271][T14203] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2206'. [ 282.992634][T14203] netlink: 'syz.1.2206': attribute type 4 has an invalid length. [ 283.026312][T14210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2206'. [ 283.038288][T14203] netlink: 'syz.1.2206': attribute type 5 has an invalid length. [ 283.084484][T14203] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2206'. [ 283.252263][T13864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.509419][T10224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.685501][ T5861] Bluetooth: hci1: command tx timeout [ 283.979463][T13864] veth0_vlan: entered promiscuous mode [ 284.021247][T13864] veth1_vlan: entered promiscuous mode [ 284.101289][T13864] veth0_macvtap: entered promiscuous mode [ 284.130646][T14262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2216'. [ 284.178094][T13864] veth1_macvtap: entered promiscuous mode [ 284.238245][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.305280][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.321768][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.353398][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.389354][T13864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.414853][T14276] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.428815][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.466169][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.475686][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.486658][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.508888][T14276] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.517285][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.528864][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.544284][T14276] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.559266][T13864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.585976][T13864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.595754][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.617907][T14276] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.627574][T13864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.636741][T13864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.657308][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.677591][T13864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.691557][T14276] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.729474][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.767614][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.788558][T14276] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.897718][T12596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.905607][T12596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.085655][T14292] syzkaller0: entered promiscuous mode [ 285.097566][T14292] syzkaller0: entered allmulticast mode [ 285.120819][T12599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.170661][T12599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.416356][T10224] syzkaller0: tun_net_xmit 48 [ 287.514414][T14320] syzkaller1: entered promiscuous mode [ 287.520785][T14320] syzkaller1: entered allmulticast mode [ 287.882406][T14358] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 287.935126][T14358] __nla_validate_parse: 29 callbacks suppressed [ 287.935150][T14358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2238'. [ 287.970412][ T1124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.253125][ T1124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.339814][ T1124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.417006][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.543211][ T1124] bridge_slave_1: left allmulticast mode [ 288.550172][ T1124] bridge_slave_1: left promiscuous mode [ 288.555891][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.565742][ T1124] bridge_slave_0: left allmulticast mode [ 288.572151][ T1124] bridge_slave_0: left promiscuous mode [ 288.578771][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.955470][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.967586][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.979244][ T1124] bond0 (unregistering): Released all slaves [ 289.262584][ T1124] hsr_slave_0: left promiscuous mode [ 289.270597][ T1124] hsr_slave_1: left promiscuous mode [ 289.347102][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.376179][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.598244][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.637349][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.638590][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.656078][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.674635][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.685072][ T5150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.693061][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.708822][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.792775][T14386] netlink: 'syz.2.2241': attribute type 3 has an invalid length. [ 289.802959][ T1124] veth1_macvtap: left promiscuous mode [ 289.804462][T14386] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 289.816771][T14386] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.2241'. [ 289.824626][ T1124] veth0_macvtap: left promiscuous mode [ 289.854478][ T1124] veth1_vlan: left promiscuous mode [ 289.861086][ T1124] veth0_vlan: left promiscuous mode [ 290.195365][T14387] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 290.502962][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 290.562217][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 291.074917][T14398] netlink: 'syz.3.2244': attribute type 30 has an invalid length. [ 291.088914][T14398] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 291.219091][T14389] lo speed is unknown, defaulting to 1000 [ 291.362295][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2247'. [ 291.410817][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2247'. [ 291.531276][T14433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.587703][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 291.760115][T14389] chnl_net:caif_netlink_parms(): no params data found [ 291.767676][ T5150] Bluetooth: hci1: command tx timeout [ 291.922215][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.942286][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.955004][T14389] bridge_slave_0: entered allmulticast mode [ 291.968569][T14389] bridge_slave_0: entered promiscuous mode [ 291.978696][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.991384][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.007836][T14389] bridge_slave_1: entered allmulticast mode [ 292.024202][T14389] bridge_slave_1: entered promiscuous mode [ 292.209537][T14467] net_ratelimit: 26 callbacks suppressed [ 292.209559][T14467] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 292.265800][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.293195][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.406117][T14389] team0: Port device team_slave_0 added [ 292.463029][T14389] team0: Port device team_slave_1 added [ 292.573484][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.586940][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.614877][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.653255][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.675001][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.760171][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.842695][T14503] netlink: 'syz.1.2263': attribute type 10 has an invalid length. [ 292.921000][T14485] ip6t_REJECT: ECHOREPLY is not supported [ 292.966670][T14389] hsr_slave_0: entered promiscuous mode [ 292.982314][T14389] hsr_slave_1: entered promiscuous mode [ 292.993122][T14389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.001914][T14389] Cannot create hsr debugfs directory [ 293.356987][T14522] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 293.835277][ T5150] Bluetooth: hci1: command tx timeout [ 294.019707][T14566] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 294.048989][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2277'. [ 294.069129][T14566] bridge0: port 1(dummy0) entered blocking state [ 294.079128][T14566] bridge0: port 1(dummy0) entered disabled state [ 294.085895][T14566] dummy0: entered allmulticast mode [ 294.118545][T14566] dummy0: entered promiscuous mode [ 294.311229][T14583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 294.420523][T14389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.555916][T14389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.583637][T14600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2285'. [ 294.611968][T14592] pim6reg: entered allmulticast mode [ 294.626710][T14389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.696330][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 294.698963][T14389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.020562][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.076795][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.150278][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.157539][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.186897][T14624] ebtables: ebtables: counters copy to user failed while replacing table [ 295.213247][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.220477][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.364559][T14389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.396767][T14644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.668178][T14657] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 295.676591][T14657] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.2298'. [ 295.687795][T14657] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 295.789059][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.909359][ T5150] Bluetooth: hci1: command tx timeout [ 296.133527][T14693] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 296.221554][T14694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2304'. [ 296.299142][T14701] netlink: 'syz.1.2305': attribute type 2 has an invalid length. [ 296.386167][T14705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2307'. [ 296.396930][T14706] ip6t_srh: unknown srh invflags A757 [ 296.414119][T14705] nbd: illegal input index 61504 [ 296.463327][T14713] netlink: 'syz.3.2308': attribute type 3 has an invalid length. [ 296.495084][T14713] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2308'. [ 296.535593][T14389] veth0_vlan: entered promiscuous mode [ 296.601619][T14389] veth1_vlan: entered promiscuous mode [ 296.723840][T14389] veth0_macvtap: entered promiscuous mode [ 296.733342][T14389] veth1_macvtap: entered promiscuous mode [ 296.749822][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.760456][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.771123][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.781749][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.794095][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.804490][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.815258][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.825329][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.836416][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.849756][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.860942][T14389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.870110][T14389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.878922][T14389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.888024][T14389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.969802][T14738] netlink: 'syz.0.2314': attribute type 9 has an invalid length. [ 296.992481][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2311'. [ 297.039383][T14738] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.2314'. [ 297.132420][T14744] netlink: 'syz.2.2316': attribute type 3 has an invalid length. [ 297.188777][T14744] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2316'. [ 297.266099][T14751] Cannot find add_set index 0 as target [ 297.279014][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.286893][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.585976][T14765] netlink: 'syz.3.2320': attribute type 2 has an invalid length. [ 297.651805][T12599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.672035][T12599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.739424][T14780] IPv6: Can't replace route, no match found [ 298.373917][T14806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.735340][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.859013][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.225840][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.394532][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.538200][ T61] bridge_slave_1: left allmulticast mode [ 299.543904][ T61] bridge_slave_1: left promiscuous mode [ 299.549887][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.559084][ T61] bridge_slave_0: left allmulticast mode [ 299.564825][ T61] bridge_slave_0: left promiscuous mode [ 299.572113][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.904614][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.917590][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.930023][ T61] bond0 (unregistering): Released all slaves [ 300.209962][T14831] __nla_validate_parse: 1 callbacks suppressed [ 300.209983][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'. [ 300.445971][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 300.532619][ T61] hsr_slave_0: left promiscuous mode [ 300.607435][ T61] hsr_slave_1: left promiscuous mode [ 300.637780][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.658303][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.698605][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.731668][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.752637][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.772464][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.791846][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.803796][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.813321][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 300.822781][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.857983][ T61] veth1_macvtap: left promiscuous mode [ 300.863582][ T61] veth0_macvtap: left promiscuous mode [ 300.870321][ T61] veth1_vlan: left promiscuous mode [ 300.875682][ T61] veth0_vlan: left promiscuous mode [ 301.547401][ T61] team0 (unregistering): Port device team_slave_1 removed [ 301.592029][ T61] team0 (unregistering): Port device team_slave_0 removed [ 302.032062][T14860] netlink: 'syz.3.2339': attribute type 4 has an invalid length. [ 302.087658][T14867] netlink: 'syz.3.2339': attribute type 4 has an invalid length. [ 302.261692][T14868] lo speed is unknown, defaulting to 1000 [ 302.335735][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 302.351046][T14897] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2349'. [ 302.394993][T14903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2352'. [ 302.755565][T14868] chnl_net:caif_netlink_parms(): no params data found [ 302.868002][ T5861] Bluetooth: hci1: command tx timeout [ 303.152185][T14868] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.164508][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.176068][T14868] bridge_slave_0: entered allmulticast mode [ 303.201897][T14868] bridge_slave_0: entered promiscuous mode [ 303.230605][T14868] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.255200][T14868] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.298488][T14868] bridge_slave_1: entered allmulticast mode [ 303.305834][T14868] bridge_slave_1: entered promiscuous mode [ 303.362126][T14959] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2364'. [ 303.491326][T14868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.520580][T14958] netlink: 'syz.1.2362': attribute type 3 has an invalid length. [ 303.547864][T14968] xt_l2tp: wrong L2TP version: 0 [ 303.574352][T14968] xt_l2tp: wrong L2TP version: 0 [ 303.589205][T14868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.739418][T14868] team0: Port device team_slave_0 added [ 303.783934][T14868] team0: Port device team_slave_1 added [ 303.925982][T14868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.940038][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.995647][T14997] netlink: 'syz.1.2372': attribute type 1 has an invalid length. [ 304.018051][T14868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.054567][T14868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.067844][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.143773][T14868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.391492][T14868] hsr_slave_0: entered promiscuous mode [ 304.438738][T14868] hsr_slave_1: entered promiscuous mode [ 304.471255][T14868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.489931][T14868] Cannot create hsr debugfs directory [ 304.589363][T15024] syz_tun: entered promiscuous mode [ 304.648383][T15024] syz_tun: left promiscuous mode [ 304.744659][T15027] vlan1: entered promiscuous mode [ 304.947447][ T5861] Bluetooth: hci1: command tx timeout [ 305.064279][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 305.129456][T15056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.946500][T15109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 306.060353][T15109] input: failed to attach handler evdev to device input5, error: -4 [ 306.468988][T15139] netlink: 'syz.0.2399': attribute type 2 has an invalid length. [ 306.532880][T15130] netdevsim netdevsim1: Direct firmware load for €U failed with error -2 [ 306.570338][T15130] netdevsim netdevsim1: Falling back to sysfs fallback for: €U [ 306.789470][T15145] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 306.823675][T15145] netlink: 'syz.0.2403': attribute type 2 has an invalid length. [ 306.846792][T15145] netlink: 'syz.0.2403': attribute type 2 has an invalid length. [ 306.870520][T15145] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 306.902223][T15145] netlink: 'syz.0.2403': attribute type 2 has an invalid length. [ 307.032880][ T5861] Bluetooth: hci1: command tx timeout [ 307.044945][T14868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.091337][T14868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.108663][T15156] netlink: 'syz.2.2405': attribute type 12 has an invalid length. [ 307.151830][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2406'. [ 307.165511][T15156] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 307.186467][T14868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.214209][T14868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.228708][T15156] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 307.278854][T15156] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 307.302316][T15168] netlink: 'syz.3.2408': attribute type 12 has an invalid length. [ 307.311386][T15168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2408'. [ 307.320731][T15156] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2405'. [ 307.334015][T15151] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 307.347527][T15151] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 307.355647][T15151] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2405'. [ 307.389303][T15168] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2408'. [ 307.442551][T15168] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 307.468126][T15177] IPVS: Error connecting to the multicast addr [ 307.621300][T14868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.679430][T14868] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.735955][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.743165][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.820807][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.828048][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.871773][T15196] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 307.897965][T15196] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.2415'. [ 307.930819][T15196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2415'. [ 307.955812][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 307.977672][T15196] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 308.569230][T14868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.821336][T15241] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2424'. [ 309.048583][T15255] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.057643][T15255] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.066536][T15255] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.092535][T15255] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.109437][T15255] geneve2: entered promiscuous mode [ 309.115065][T15255] geneve2: entered allmulticast mode [ 309.140492][ T5861] Bluetooth: hci1: command tx timeout [ 309.255452][T15255] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.267265][T15255] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.276733][T15255] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.286729][T15255] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.297993][T15267] IPVS: set_ctl: invalid protocol: 59 172.20.20.67:20003 [ 309.402958][T15264] tipc: Enabling of bearer rejected, failed to enable media [ 309.505744][T14868] veth0_vlan: entered promiscuous mode [ 309.559734][T14868] veth1_vlan: entered promiscuous mode [ 309.623333][T14868] veth0_macvtap: entered promiscuous mode [ 309.640592][T14868] veth1_macvtap: entered promiscuous mode [ 309.685237][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.734771][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.753968][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.765169][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.777993][T14868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.788265][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.798811][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.808773][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.819625][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.831776][T14868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.910080][T14868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.919526][T14868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.929704][T14868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.939223][T14868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.177548][T15308] openvswitch: netlink: Actions may not be safe on all matching packets [ 310.223070][T15309] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 310.398865][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.406795][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.543439][T10223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.598724][T10223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.657115][T15325] netlink: 'syz.2.2440': attribute type 11 has an invalid length. [ 310.951073][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2444'. [ 310.970262][T15119] ================================================================== [ 310.978495][T15119] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 310.986048][T15119] Read of size 8 at addr ffff88805adac060 by task khidpd_046dfff9/15119 [ 310.994423][T15119] [ 310.996789][T15119] CPU: 0 UID: 0 PID: 15119 Comm: khidpd_046dfff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 311.008022][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.018214][T15119] Call Trace: [ 311.021529][T15119] [ 311.024489][T15119] dump_stack_lvl+0x241/0x360 [ 311.029206][T15119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.034537][T15119] ? __pfx__printk+0x10/0x10 [ 311.039174][T15119] ? _printk+0xd5/0x120 [ 311.043469][T15119] ? __virt_addr_valid+0x183/0x530 [ 311.048627][T15119] ? __virt_addr_valid+0x183/0x530 [ 311.053780][T15119] print_report+0x169/0x550 [ 311.058333][T15119] ? __virt_addr_valid+0x183/0x530 [ 311.063494][T15119] ? __virt_addr_valid+0x183/0x530 [ 311.068647][T15119] ? __virt_addr_valid+0x45f/0x530 [ 311.073894][T15119] ? __phys_addr+0xba/0x170 [ 311.078531][T15119] ? __mutex_lock+0x6c0/0xd70 [ 311.083530][T15119] kasan_report+0x143/0x180 [ 311.088265][T15119] ? __mutex_lock+0x6c0/0xd70 [ 311.093001][T15119] __mutex_lock+0x6c0/0xd70 [ 311.097559][T15119] ? __mutex_lock+0x52a/0xd70 [ 311.102318][T15119] ? l2cap_unregister_user+0x6a/0x1c0 [ 311.107748][T15119] ? __pfx___mutex_lock+0x10/0x10 [ 311.112819][T15119] ? __pfx___timer_delete_sync+0x10/0x10 [ 311.118510][T15119] l2cap_unregister_user+0x6a/0x1c0 [ 311.124060][T15119] hidp_session_thread+0x450/0x490 [ 311.129308][T15119] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 311.135601][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 311.141286][T15119] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 311.147230][T15119] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 311.153532][T15119] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 311.159925][T15119] ? __kthread_parkme+0x169/0x1d0 [ 311.165026][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 311.170714][T15119] kthread+0x2f0/0x390 [ 311.174831][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 311.180529][T15119] ? __pfx_kthread+0x10/0x10 [ 311.185164][T15119] ret_from_fork+0x4b/0x80 [ 311.189723][T15119] ? __pfx_kthread+0x10/0x10 [ 311.194390][T15119] ret_from_fork_asm+0x1a/0x30 [ 311.199220][T15119] [ 311.202292][T15119] [ 311.204619][T15119] Allocated by task 14868: [ 311.209038][T15119] kasan_save_track+0x3f/0x80 [ 311.213725][T15119] __kasan_kmalloc+0x98/0xb0 [ 311.218324][T15119] __kmalloc_noprof+0x1fc/0x400 [ 311.223185][T15119] hci_alloc_dev_priv+0x27/0x2030 [ 311.228225][T15119] vhci_create_device+0x116/0x6a0 [ 311.233298][T15119] vhci_write+0x3cf/0x490 [ 311.237648][T15119] vfs_write+0xaeb/0xd30 [ 311.241903][T15119] ksys_write+0x183/0x2b0 [ 311.246235][T15119] do_syscall_64+0xf3/0x230 [ 311.250747][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.256652][T15119] [ 311.258980][T15119] Freed by task 14868: [ 311.263230][T15119] kasan_save_track+0x3f/0x80 [ 311.267920][T15119] kasan_save_free_info+0x40/0x50 [ 311.272964][T15119] __kasan_slab_free+0x59/0x70 [ 311.277731][T15119] kfree+0x1a0/0x440 [ 311.281638][T15119] hci_release_dev+0x1525/0x16b0 [ 311.286594][T15119] bt_host_release+0x83/0x90 [ 311.291195][T15119] device_release+0x99/0x1c0 [ 311.295795][T15119] kobject_put+0x22f/0x480 [ 311.300255][T15119] vhci_release+0x88/0xd0 [ 311.304631][T15119] __fput+0x23f/0x880 [ 311.308635][T15119] task_work_run+0x24f/0x310 [ 311.313246][T15119] do_exit+0xa2f/0x28e0 [ 311.317424][T15119] do_group_exit+0x207/0x2c0 [ 311.322059][T15119] __x64_sys_exit_group+0x3f/0x40 [ 311.327111][T15119] x64_sys_call+0x2634/0x2640 [ 311.331830][T15119] do_syscall_64+0xf3/0x230 [ 311.336358][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.342295][T15119] [ 311.344636][T15119] Last potentially related work creation: [ 311.350367][T15119] kasan_save_stack+0x3f/0x60 [ 311.355055][T15119] __kasan_record_aux_stack+0xac/0xc0 [ 311.360450][T15119] insert_work+0x3e/0x330 [ 311.364823][T15119] __queue_work+0xb66/0xf50 [ 311.369354][T15119] queue_work_on+0x1c2/0x380 [ 311.374055][T15119] process_scheduled_works+0xa63/0x1850 [ 311.379698][T15119] worker_thread+0x870/0xd30 [ 311.384303][T15119] kthread+0x2f0/0x390 [ 311.388405][T15119] ret_from_fork+0x4b/0x80 [ 311.392836][T15119] ret_from_fork_asm+0x1a/0x30 [ 311.397615][T15119] [ 311.399939][T15119] Second to last potentially related work creation: [ 311.406517][T15119] kasan_save_stack+0x3f/0x60 [ 311.411285][T15119] __kasan_record_aux_stack+0xac/0xc0 [ 311.416667][T15119] insert_work+0x3e/0x330 [ 311.421016][T15119] __queue_work+0xc8b/0xf50 [ 311.425556][T15119] call_timer_fn+0x18e/0x650 [ 311.430159][T15119] __run_timer_base+0x695/0x8e0 [ 311.435026][T15119] run_timer_softirq+0xb7/0x170 [ 311.439885][T15119] handle_softirqs+0x2c5/0x980 [ 311.444658][T15119] __irq_exit_rcu+0xf4/0x1c0 [ 311.449273][T15119] irq_exit_rcu+0x9/0x30 [ 311.453524][T15119] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 311.459170][T15119] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.465194][T15119] [ 311.467524][T15119] The buggy address belongs to the object at ffff88805adac000 [ 311.467524][T15119] which belongs to the cache kmalloc-8k of size 8192 [ 311.481591][T15119] The buggy address is located 96 bytes inside of [ 311.481591][T15119] freed 8192-byte region [ffff88805adac000, ffff88805adae000) [ 311.495478][T15119] [ 311.497806][T15119] The buggy address belongs to the physical page: [ 311.504223][T15119] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805ada8000 pfn:0x5ada8 [ 311.514352][T15119] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 311.522857][T15119] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 311.531371][T15119] page_type: f5(slab) [ 311.535359][T15119] raw: 00fff00000000240 ffff88801ac42280 ffffea0000c48610 ffffea000172e810 [ 311.543945][T15119] raw: ffff88805ada8000 0000000000020001 00000001f5000000 0000000000000000 [ 311.552535][T15119] head: 00fff00000000240 ffff88801ac42280 ffffea0000c48610 ffffea000172e810 [ 311.561215][T15119] head: ffff88805ada8000 0000000000020001 00000001f5000000 0000000000000000 [ 311.569895][T15119] head: 00fff00000000003 ffffea00016b6a01 ffffffffffffffff 0000000000000000 [ 311.578661][T15119] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 311.587341][T15119] page dumped because: kasan: bad access detected [ 311.593765][T15119] page_owner tracks the page as allocated [ 311.599479][T15119] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5507, tgid 5507 (dhcpcd), ts 299949658140, free_ts 299743441859 [ 311.620333][T15119] post_alloc_hook+0x1f3/0x230 [ 311.625119][T15119] get_page_from_freelist+0x303f/0x3190 [ 311.630674][T15119] __alloc_pages_noprof+0x292/0x710 [ 311.635875][T15119] alloc_pages_mpol_noprof+0x3e8/0x680 [ 311.641427][T15119] alloc_slab_page+0x6a/0x120 [ 311.646112][T15119] allocate_slab+0x5a/0x2f0 [ 311.650621][T15119] ___slab_alloc+0xcd1/0x14b0 [ 311.655307][T15119] __slab_alloc+0x58/0xa0 [ 311.659645][T15119] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 311.666072][T15119] kmalloc_reserve+0x111/0x2a0 [ 311.670852][T15119] __alloc_skb+0x1f3/0x440 [ 311.675276][T15119] netlink_dump+0x1f7/0xd80 [ 311.679789][T15119] netlink_recvmsg+0x6bb/0x11d0 [ 311.684647][T15119] sock_recvmsg+0x22f/0x280 [ 311.689166][T15119] ____sys_recvmsg+0x1c6/0x480 [ 311.693937][T15119] __sys_recvmsg+0x2e6/0x3d0 [ 311.698535][T15119] page last free pid 61 tgid 61 stack trace: [ 311.704601][T15119] free_unref_page+0xcfb/0xf20 [ 311.709385][T15119] __put_partials+0xeb/0x130 [ 311.713992][T15119] put_cpu_partial+0x17c/0x250 [ 311.718757][T15119] __slab_free+0x2ea/0x3d0 [ 311.723184][T15119] qlist_free_all+0x9a/0x140 [ 311.727778][T15119] kasan_quarantine_reduce+0x14f/0x170 [ 311.733244][T15119] __kasan_slab_alloc+0x23/0x80 [ 311.738099][T15119] __kmalloc_cache_noprof+0x132/0x2c0 [ 311.743487][T15119] netdevice_event+0x37d/0x950 [ 311.748262][T15119] notifier_call_chain+0x19f/0x3e0 [ 311.753386][T15119] unregister_netdevice_many_notify+0xedd/0x1da0 [ 311.759724][T15119] cleanup_net+0x75d/0xcc0 [ 311.764167][T15119] process_scheduled_works+0xa63/0x1850 [ 311.769726][T15119] worker_thread+0x870/0xd30 [ 311.774331][T15119] kthread+0x2f0/0x390 [ 311.778412][T15119] ret_from_fork+0x4b/0x80 [ 311.782840][T15119] [ 311.785165][T15119] Memory state around the buggy address: [ 311.790822][T15119] ffff88805adabf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.798884][T15119] ffff88805adabf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.806941][T15119] >ffff88805adac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.815017][T15119] ^ [ 311.822231][T15119] ffff88805adac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.830392][T15119] ffff88805adac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.838465][T15119] ================================================================== [ 311.848784][T15119] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.856011][T15119] CPU: 0 UID: 0 PID: 15119 Comm: khidpd_046dfff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 311.867225][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.877308][T15119] Call Trace: [ 311.880594][T15119] [ 311.883529][T15119] dump_stack_lvl+0x241/0x360 [ 311.888226][T15119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.893527][T15119] ? __pfx__printk+0x10/0x10 [ 311.898134][T15119] ? vscnprintf+0x5d/0x90 [ 311.902571][T15119] panic+0x349/0x880 [ 311.906477][T15119] ? check_panic_on_warn+0x21/0xb0 [ 311.911687][T15119] ? __pfx_panic+0x10/0x10 [ 311.916132][T15119] ? mark_lock+0x9a/0x360 [ 311.920476][T15119] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 311.926378][T15119] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 311.932282][T15119] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.938642][T15119] ? print_report+0x502/0x550 [ 311.943348][T15119] check_panic_on_warn+0x86/0xb0 [ 311.948333][T15119] ? __mutex_lock+0x6c0/0xd70 [ 311.953033][T15119] end_report+0x77/0x160 [ 311.957302][T15119] kasan_report+0x154/0x180 [ 311.961838][T15119] ? __mutex_lock+0x6c0/0xd70 [ 311.966533][T15119] __mutex_lock+0x6c0/0xd70 [ 311.971122][T15119] ? __mutex_lock+0x52a/0xd70 [ 311.975837][T15119] ? l2cap_unregister_user+0x6a/0x1c0 [ 311.981234][T15119] ? __pfx___mutex_lock+0x10/0x10 [ 311.986285][T15119] ? __pfx___timer_delete_sync+0x10/0x10 [ 311.991936][T15119] l2cap_unregister_user+0x6a/0x1c0 [ 311.997337][T15119] hidp_session_thread+0x450/0x490 [ 312.002464][T15119] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 312.008369][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 312.014013][T15119] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 312.019916][T15119] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 312.026170][T15119] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 312.032437][T15119] ? __kthread_parkme+0x169/0x1d0 [ 312.037493][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 312.043143][T15119] kthread+0x2f0/0x390 [ 312.047333][T15119] ? __pfx_hidp_session_thread+0x10/0x10 [ 312.052975][T15119] ? __pfx_kthread+0x10/0x10 [ 312.057582][T15119] ret_from_fork+0x4b/0x80 [ 312.062017][T15119] ? __pfx_kthread+0x10/0x10 [ 312.066704][T15119] ret_from_fork_asm+0x1a/0x30 [ 312.071578][T15119] [ 312.074792][T15119] Kernel Offset: disabled [ 312.079125][T15119] Rebooting in 86400 seconds..