last executing test programs: 1m37.958096075s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 1m22.067233742s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 1m6.562404763s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 52.490855208s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 34.144668143s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 15.137240829s ago: executing program 1 (id=72): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xa4, "6bb484a19ed1a03faa4e7be1696561317ea7de50e72ea9f6370d16afb15ca209eda69581699929a8bf95c8dc96c10ef5d9aff703c4bbba900b163e37b92eda87ce8b5a08a9608eb87c733872b26c4a60e711588b4d9823da3ad4a95860f502c406c42fc6d63fa7e9243f3d42b5419930244559282c05dc03400bf141524091355e3a968de2b17875a36951a97a1ed1e5d3f9e30b0358ef40e242584167d38320df302bd2"}, &(0x7f0000000180)=0xc8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x99b27000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x3, 0x1, "3b3af211e01fe0ba98ce4d21509149efd2a84ad06726bb5ae5c3ebbdab491439f3cfc90351f8c1dd423d28fe70d4d52baa89a9724de55b35a101f2ebd8f2c05453887dee9c8bb0cb259b8c71c7e9712d51cc276263cfcde4b08fe223eabd5211d28bee6472ba9097f0c1e534b2506ab4"}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000280)="301814cb83c42bfc6379d49f1489cdcfaa5dc187b7b8b573a2622cd32377855e7f2ca8fec588ce792800344993c5023a17dfd3ea3060b4572eea4c9439c7693bd3ae1d7c1d5c9c40a052bd5272da4f7e5f4ac49701a32cf6cf75e21c46ca1f2fe16cbcdfb40226a8332edf8eb0055e98b70bdb9800ae44b99fec893991ba334684aee4dda89e02044de35667095d2fd0056e9affe2fdcc35d339167ab6751521e15a604ae75c1a9d14309e3ad5a80a8b65e3f93c14d454c112a7268426a601cfe51e7246ecb2f0916ff37836d2c501920aa699b152cf7472904032546a86e10b53f675cbde913304") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x54, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"41b035d697c3a85a55c44c7272457fb9", r5, r6, {0x170, 0x7}, {0x6, 0x6}, 0x0, [0x6, 0x8000000000000000, 0x8001, 0x3, 0x94, 0xffff, 0xffffffff, 0x0, 0x3fc000, 0x7, 0x8, 0x5, 0x4, 0x10002, 0x60000000, 0x4]}) listen(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80), 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f0000000c00)={0x1f, @none}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c40)={0x2, 0xea, "0bbd259131230227a2a45eb59f24ddfb917d40403e16d96c2a4e8811b0d707a8a680f3f13ade0aaca9bc2b7fc716fa46566361a87f5867ff397fa589d5821edd642c5ba5787a229263af8a9bf3e6da81351ac7d391dfa39c80e6144f0b09ee233f9b1f4750b0cc6fe8767e93099f11024331f61302d44a173c61723a9c8ade1d102e656d4cb341a16150b644fa2a3cca609663517f3a80d8e7d6f6575bd57d4bb3bce38fc00145a4897171bc38795ff46bbb4a2433bcc94e5f49c7b6a61306aa1f1b69b75e433b7cd62d4739b37b3ae4b66f46f8a2d68b278ea69b6bd8f07df8787fa5401bb0e115251d"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41015}, 0x4020000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x3c, &(0x7f0000000e80)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e20, 0xa, @mcast1, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r9, 0x32, "19c8a1da59fbede7d3af19f52622dab8339d2216874091378d0edeefbde681edc4d76f33ac07d36ffd32865a5620850a8dc5"}, &(0x7f0000000f80)=0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x20) openat$cgroup_devices(r7, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="1cc381c95a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3ac1fa34"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "25c5aa6337ffafaf647c5dbee9bcef2d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44030}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x404, 0xffffffffffffffff, 0x1, '\x00', r4, r8, 0x0, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f0000001380)="bf8ba906f5927ee2c6c38cf0da1a6558bbe423e51f350681d8d83b4d898d50948859031bedb8e1a52041034dde", 0x2d) shutdown(r1, 0x0) 3.644299435s ago: executing program 3 (id=1896): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) (async) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="67110000000000000728000000020810080004000000000000000700000000000000020000000000000006000000000000000502000701030000000748000000011007020000100000000000000100000000000080060000000000000049bf00000000000004000000000000000300000000000000fbffffffffffffff0300000000000000c2040000001001060000000000000000000000e9a7bce51e7036214d1dca51af54176c0eaef603e849c8a317eac74e5a389246440f216bd9bebf13716a86908f32fa99f2ffff0000000000004e"], 0x98) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, 0x0, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x1ff}], 0x1, 0x10143, 0x0) 3.407303033s ago: executing program 3 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept$packet(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x298, 0x19, 0xa01, 0x80000000, 0x25dfdbfe, {0x2}, [@nested={0x27f, 0x8, 0x0, 0x1, [@generic="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", @generic="25603219c7d76302328d12122d7f76a46361801e2302c94dc62635fe26335c380578d7ac", @typed={0x8, 0x11e, 0x0, 0x0, @pid=r6}, @generic="20033dcdc5976aa13d224f09e0a81a31d5ba6bc6be300117998b840be2156dd382bc8b13a7a04369335980325884545670a4d98adecc0d659a3c80ae5c2d0fd4191f6174adcc0e601f5793c1d3bbffe3841e50192225ce36724e04e36bc2997d1b11b5966761b0fed08933e4cbc0106e2d27f51cdbb3e6d57c8003fe910bae4063efe6cda28f1bfe97a8c05ff16443da817b512a727ae0544ff1c1b4b7937881200a7ecab4e7021fece944684c54dbf2a6cb01797b3f901856e38678a0ae0919aca6791cdecceacbc79fbb142f633723712b4e3fcb9f085e2e6e", @generic="12cad338345dcbb7d5cb95c58d67fc41ec889424f31beff8f0038a3c3e87d121a87fb6e796e1c32acd9d9ba80d2ef4afc7d6aff2d2449b3e22c244f5bc427c0a516ca20f55b799403c56474f7d97daf7342caab4488a3c88b7ab13963a2ac8c85e78b304e8ee123bf99722c5f7240e4d30268a351612b63771"]}, @generic='!']}, 0x298}}, 0x0) 2.758534761s ago: executing program 0 (id=1903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050200000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000078c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="ff"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x0, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000001c0)=""/164, &(0x7f0000000080)=0xa4) 2.656526595s ago: executing program 0 (id=1904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="060000000000000000000000000020e393000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000140)="2ede41c565c338a031e1c49f4381df6a819e1c70991b7807a88854a02b48daea994cd93503ebcb3fe8608dd3ffa63c00d379c876d8f4b082deceaa84018f097f6fcd0c65b78d5d27e39f63173f47e8aa3fa0505714b8655248b204dd3ea68e8786accb55529da657c660d8a26bbe6c550c417eb5c1d81b1b4222afc2b45bdf46d205912bcd673368485db995016c58b197f340b7c11aeaeac822d8817d0406f7cbb3f9acf651da8df3a0640a08ca2254fe09f7820f1a26c8c4643ca87155800e6350bb0077efd00067ea642ab5eb954395d9126d6dd91c8cb440cd50b1213532e0b0a531272254f8941193381d2a15", &(0x7f0000000240)=""/78}, 0x20) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x180800) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="060000000000000000000000000020e393000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000140)="2ede41c565c338a031e1c49f4381df6a819e1c70991b7807a88854a02b48daea994cd93503ebcb3fe8608dd3ffa63c00d379c876d8f4b082deceaa84018f097f6fcd0c65b78d5d27e39f63173f47e8aa3fa0505714b8655248b204dd3ea68e8786accb55529da657c660d8a26bbe6c550c417eb5c1d81b1b4222afc2b45bdf46d205912bcd673368485db995016c58b197f340b7c11aeaeac822d8817d0406f7cbb3f9acf651da8df3a0640a08ca2254fe09f7820f1a26c8c4643ca87155800e6350bb0077efd00067ea642ab5eb954395d9126d6dd91c8cb440cd50b1213532e0b0a531272254f8941193381d2a15", &(0x7f0000000240)=""/78}, 0x20) (async) accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x180800) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={r3}) (async) 2.397144085s ago: executing program 0 (id=1906): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x37}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x40041) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000300)=0x20000000, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1a, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1a, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) (async) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) ioctl$sock_SIOCINQ(r5, 0x5411, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) 2.388182355s ago: executing program 3 (id=1907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x4, 0xa, 0xfc, 0x5, 0x2, @loopback, @empty, 0x7800, 0x8, 0xa, 0xfffffff9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000900)={'erspan0\x00', r6, 0x7800, 0x7800, 0x2, 0xfffff3eb, {{0x8, 0x4, 0x3, 0x3c, 0x20, 0x68, 0x0, 0x84, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x1, [{@multicast2, 0xfffffff9}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x7c, 0x1, 0x14, @local, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8000, 0x20, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x5d, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r3, @ANYBLOB="100027bd7000fddbdf25070000008800018014000200766c616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="14000200626f6e64300000000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020064756d6d793000000000000000000000140002006272696467655f736c6176655f310000080003000200000008000300000000003000018008000300020000000800030001000000080003000200000014000200697036746e6c300000000000000000003000018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000300010000001400020073797a5f74756e0000000000000000004800018008000100", @ANYRES32=r13, @ANYBLOB="08000300000000000800030002000000140002007767300000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="1c04018008000100f4fbe81ee05cc9041f83ec48a9254619c5b18766a4802ff70cdb6e00ceac74f0fb5d83ef5c2874c959afdc2f9c345586b918d7e84b07", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x5) 1.951713411s ago: executing program 0 (id=1909): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) 1.713827099s ago: executing program 3 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0xd2cf7e515884e1f3, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x14) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @bcast, @netrom, @rose]}, &(0x7f0000000200)=0x48) connect$netrom(r2, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @bcast, @bcast, @bcast, @bcast, @null, @bcast, @bcast]}, 0x48) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0xffff, 0x0, 0x801a, 0xfff, 0x2, 0x8594, 0x80000001, 0x0, 0x0}, &(0x7f0000000300)=0x20) (async) clock_gettime(0x6, &(0x7f0000000340)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff7, 0x13}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) (async, rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000580)={r3, 0xfffffff7, 0x20}, &(0x7f00000005c0)=0xc) (rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x6c, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x80, 0x700, 0xff, 0x7, {{0xe, 0x4, 0x1, 0x14, 0x38, 0x65, 0x0, 0x40, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp_prespec={0x44, 0x24, 0x3a, 0x3, 0x9, [{@rand_addr=0x64010102, 0x3}, {@local, 0x7f}, {@private=0xa010100, 0x4}, {@multicast1, 0x618}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa4, r8, 0x329, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x560d}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000842}, 0x20000000) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r11, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc080) recvfrom$netrom(r2, &(0x7f0000000cc0)=""/214, 0xd6, 0x10000, &(0x7f0000000dc0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@default, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r12, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x10, 0x3f8, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) clock_gettime(0x5, &(0x7f0000000f40)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f80)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r13, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xe0, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe7f4, @private1, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) r14 = socket$inet6(0xa, 0x2, 0x1000) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, &(0x7f0000001480)='wg0\x00', 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x10, &(0x7f00000014c0)=@sack_info={r7, 0xfba3, 0x101}, &(0x7f0000001500)=0xc) (rerun: 32) 1.7134488s ago: executing program 0 (id=1912): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000050038000b80340001800a0001006c696d6974000000240002800c00014000000000000000050c000240000000000000000008000540000000030900010073797a30"], 0xf8}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf250400000008001700", @ANYRES32=r2, @ANYBLOB="06001d00080000000c000f00ff7f00000000000008000c00010000001400080076657468315f6d6163767461700000000c000f00040a000000000000050004000200000f0500050000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4044010}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf250400000008001700", @ANYRES32=r2, @ANYBLOB="06001d00080000000c000f00ff7f00000000000008000c00010000001400080076657468315f6d6163767461700000000c000f00040a000000000000050004000200000f0500050000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4044010}, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000000000)="c94e602f", 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r8 = socket$rxrpc(0x21, 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r1], 0x2c}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000200)={0x78}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r8], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r10, r9, 0x0, 0x100000002) connect$ax25(r4, &(0x7f0000000300)={{0x3, @null, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 1.680694055s ago: executing program 2 (id=1913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r2, 0x0, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000e00)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x44880) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pread64(r5, &(0x7f0000000040)=""/64, 0x40, 0x1fffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfc23, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000f140100000000000000000008000100000000000c00450072646d615f636d00080003"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x6, 0x7, 0xf, 0x3a01, 0x7ff}]}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x93, &(0x7f0000000100)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.614589379s ago: executing program 2 (id=1914): recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)=""/245, 0xf5}], 0x5}, 0x12101) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa155, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3ff, 0xc3, &(0x7f0000000400)=""/195, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x1, 0x513a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x3, 0x1, 0x4, 0x6}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='tlb_flush\x00', r0, 0x0, 0x8fa}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) sendmsg$tipc(r1, &(0x7f0000000680)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="76da59", 0x3}], 0x1}, 0x24000005) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.545640833s ago: executing program 4 (id=1915): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r1, 0x65, 0x2, 0x0, 0x20000028) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xb5, 0x6, "c5539fc49738ca96a36a005f909c20c149844eea2c70018cbe3ebf4fb828ce5f2ef40258178f89bb90cbc0640dca743166c59285e9c11629e78d91f8d05b19c082ef3c443bb7675af8986ef0d48c2b61ed6bf679af84e2bf81d4b2879cd1be452cfe1b798f2dcdc8ba22a83da65d3eacec2aa33a45b3503703c6741f3e151ddc0241302e2c0b669b35829af62c6fd19784cfa6f3b874751745559ffa04620b6fc23fd70f7530a4530ec294d1b77a1fa4bc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1961facc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x178d918e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf281f73}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELSET={0xbc, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x94, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x700000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2251}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x290}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1.53627695s ago: executing program 3 (id=1916): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8639dbe8586251de) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.511953679s ago: executing program 2 (id=1917): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002c40)={'wg2\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x248, 0xffffffffffff8000}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@deltaction={0xd8, 0x31, 0x200, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1cb3}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xfffffe79, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xd8}}, 0x40000) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0xce, @loopback, 0x4, 0x3}, 0x20) 1.349966854s ago: executing program 0 (id=1918): r0 = socket$can_j1939(0x1d, 0x2, 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x1, {}, {}, 0x0, 0x1}], 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x61}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x19, r8, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000002000000000", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0x25, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private1}}}}, &(0x7f0000000100)=0xb0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.312377325s ago: executing program 4 (id=1919): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket(0x2c, 0x3, 0x0) (async) epoll_create1(0x0) (async) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket$kcm(0x1e, 0xb, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) bind$phonet(r2, &(0x7f00000011c0)={0x23, 0x2, 0x4, 0x3}, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r3], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=""/195, 0xc3}}], 0x1, 0x60010020, 0x0) (async) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x402, 0x0, 0x0, 0x80000, 0x0, 0x6, 0xfffffffd, 0xfffffffe, r8}, &(0x7f00000001c0)=0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10012, r9, 0xf72a9000) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) 1.306374021s ago: executing program 2 (id=1920): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xeccc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r9) (async) close(r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="00000ee043730e160995ce19389a89fcdd9d7267b4eb538e20c5c4660d798f5ffe099bfc616b3a964a1f5bfdd60000b0c62c636184dbe9c77f62c56e48fbe8bd5e5ff8dbceb0a5f2f74bb745b545d56e97a6cd6ea585cc31fd8453441bd868dffb1924ea626f55bee5d0dc13", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r12, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r10}, 0x20) sendmmsg$inet6(r10, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r8}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4040010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4040010) 1.082409219s ago: executing program 4 (id=1921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) 1.025639715s ago: executing program 2 (id=1922): r0 = socket(0x5, 0x800, 0xffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x8080) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="03", 0x1, 0x4040800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 748.328345ms ago: executing program 4 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) 599.109348ms ago: executing program 4 (id=1924): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @mcast1, 0x0, 0x0, 0x8}}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0xfffffe9c) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) 462.091993ms ago: executing program 3 (id=1925): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000001c0)=0x717, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00020000000000004000000000005703", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0xc}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 74.046614ms ago: executing program 4 (id=1926): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x3}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x3}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) 0s ago: executing program 2 (id=1927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}, 0x2}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r3) kernel console output (not intermixed with test programs): to 1560 would solve the problem. [ 218.776533][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.894885][ T8403] €Â: renamed from vlan0 (while UP) [ 219.102965][ T8225] hsr_slave_0: entered promiscuous mode [ 219.138393][ T8225] hsr_slave_1: entered promiscuous mode [ 219.181249][ T8225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.203361][ T8225] Cannot create hsr debugfs directory [ 219.311681][ T8419] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 219.319573][ T8419] netlink: 240 bytes leftover after parsing attributes in process `syz.0.828'. [ 220.046310][ T8225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.066277][ T8225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.078312][ T4623] Bluetooth: hci0: command tx timeout [ 220.093634][ T8212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.105233][ T8436] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 220.128455][ T8436] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 220.169528][ T8212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.227681][ T4623] Bluetooth: hci6: command tx timeout [ 220.280937][ T8225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.293318][ T8225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.339318][ T8212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.350994][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 220.361678][ T8212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.486306][ T8225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.500876][ T8452] ebt_limit: overflow, try lower: 570423552/2483027968 [ 220.509278][ T8225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.526917][ T8453] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 220.592312][ T8225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.615655][ T8225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.656330][ T8456] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.701523][ T8456] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 220.772169][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.855048][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.920383][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.927641][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.942126][ T8225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.955472][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.962737][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.975551][ T8225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.987633][ T8225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.006630][ T8225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.282132][ T8466] raw_sendmsg: syz.2.843 forgot to set AF_INET. Fix it! [ 221.345464][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.404414][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.499724][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.507054][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.601116][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.608368][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.761805][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.942745][ T8212] veth0_vlan: entered promiscuous mode [ 221.980253][ T8212] veth1_vlan: entered promiscuous mode [ 222.045809][ T8212] veth0_macvtap: entered promiscuous mode [ 222.066242][ T8489] tipc: Started in network mode [ 222.072528][ T8489] tipc: Node identity ac1414aa, cluster identity 4711 [ 222.082074][ T8489] tipc: Enabled bearer , priority 10 [ 222.093615][ T8212] veth1_macvtap: entered promiscuous mode [ 222.196345][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.209029][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.221388][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.233082][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.243326][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.257247][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.269354][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.280040][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.292115][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.306956][ T8493] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 222.344761][ T8493] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.371920][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.372959][ T8491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.384680][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.404200][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.415544][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.425832][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.436802][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.447899][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.459055][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.476753][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.512361][ T8212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.522464][ T8212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.531947][ T8212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.540952][ T8212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.573273][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.756950][ T6799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.787015][ T6799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.897788][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.945495][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.963757][ T8503] __nla_validate_parse: 6 callbacks suppressed [ 222.963777][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 223.061317][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 223.119576][ T8507] netlink: 128 bytes leftover after parsing attributes in process `syz.2.852'. [ 223.199585][ T59] tipc: Node number set to 2886997162 [ 223.231194][ T8505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.447128][ T8225] veth0_vlan: entered promiscuous mode [ 223.464621][ T8225] veth1_vlan: entered promiscuous mode [ 223.549149][ T8225] veth0_macvtap: entered promiscuous mode [ 223.569494][ T8225] veth1_macvtap: entered promiscuous mode [ 223.636725][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.656041][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.679772][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 223.688909][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.700885][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.711730][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.725826][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.738373][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.755376][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.774173][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.785177][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.809424][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.820506][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.835801][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.856763][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.887175][ T8528] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 223.895666][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.914960][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.928195][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.942326][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.965377][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.982865][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.997207][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.000800][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.860'. [ 224.009675][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.046578][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.858'. [ 224.065969][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.858'. [ 224.110355][ T8225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.139028][ T8225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.150027][ T8225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.158946][ T8225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.171453][ T8532] netlink: 'syz.2.860': attribute type 13 has an invalid length. [ 224.183671][ T8532] veth0_macvtap: left promiscuous mode [ 224.189624][ T8532] macvtap0: entered allmulticast mode [ 224.227156][ T8532] macvtap0: refused to change device tx_queue_len [ 224.271733][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 224.492777][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.518654][ T8543] IPv6: Can't replace route, no match found [ 224.520530][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.562264][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.584122][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.744512][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 224.757107][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 225.064767][ T8571] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 225.130644][ T8571] x_tables: ip_tables: realm match: used from hooks PREROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 225.198200][ T8580] : renamed from ipvlan1 [ 225.349854][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.457145][ T8600] x_tables: duplicate underflow at hook 1 [ 226.620520][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.870164][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.064137][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.078749][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.091950][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.113930][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.125528][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.133706][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.147040][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.310782][ T35] bridge_slave_1: left allmulticast mode [ 227.316503][ T35] bridge_slave_1: left promiscuous mode [ 227.342050][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.408366][ T35] bridge_slave_0: left allmulticast mode [ 227.414085][ T35] bridge_slave_0: left promiscuous mode [ 227.462599][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.297148][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.311033][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.325795][ T35] bond0 (unregistering): Released all slaves [ 228.346641][ T8624] lo speed is unknown, defaulting to 1000 [ 228.574169][ T8658] block nbd4: not configured, cannot reconfigure [ 228.592022][ T8658] __nla_validate_parse: 39 callbacks suppressed [ 228.592041][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 228.628783][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 228.683875][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 228.724320][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 228.910740][ T8662] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 229.075031][ T8671] netlink: 396 bytes leftover after parsing attributes in process `syz.4.897'. [ 229.188020][ T4623] Bluetooth: hci0: command tx timeout [ 229.526144][ T8682] xt_TCPMSS: Only works on TCP SYN packets [ 229.805019][ T8682] ipvlan2: entered promiscuous mode [ 229.951874][ T8692] netlink: 268 bytes leftover after parsing attributes in process `syz.4.904'. [ 230.285912][ T35] hsr_slave_0: left promiscuous mode [ 230.352194][ T35] hsr_slave_1: left promiscuous mode [ 230.374363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.387981][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 230.395591][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.415923][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.424045][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.454844][ T35] veth1_macvtap: left promiscuous mode [ 230.460854][ T35] veth0_macvtap: left promiscuous mode [ 230.473684][ T35] veth1_vlan: left promiscuous mode [ 230.481527][ T35] veth0_vlan: left promiscuous mode [ 231.131193][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.183039][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.267788][ T4623] Bluetooth: hci0: command tx timeout [ 231.891910][ T8725] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 231.965958][ T8725] geneve0: entered promiscuous mode [ 232.032033][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 232.042616][ T8725] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 232.060543][ T8724] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 232.281378][ T8624] chnl_net:caif_netlink_parms(): no params data found [ 232.303999][ T8740] netlink: 808 bytes leftover after parsing attributes in process `syz.0.915'. [ 232.495812][ T8742] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 232.505670][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.525529][ T8744] netlink: 'syz.3.916': attribute type 11 has an invalid length. [ 232.541810][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.623267][ T8742] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 232.678722][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 232.843358][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.862223][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.871407][ T8624] bridge_slave_0: entered allmulticast mode [ 232.880475][ T8624] bridge_slave_0: entered promiscuous mode [ 232.895332][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.902739][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.910559][ T8624] bridge_slave_1: entered allmulticast mode [ 232.918839][ T8624] bridge_slave_1: entered promiscuous mode [ 232.965248][ T8763] tipc: Started in network mode [ 232.972645][ T8763] tipc: Node identity 4e5c9ad29ae9, cluster identity 4711 [ 232.997984][ T8763] tipc: Enabled bearer , priority 0 [ 233.212288][ T8624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.245467][ T8778] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 233.274480][ T8763] bridge0: entered allmulticast mode [ 233.313771][ T8624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.348148][ T4623] Bluetooth: hci0: command tx timeout [ 233.495196][ T8759] tipc: Resetting bearer [ 233.599299][ T8759] tipc: Disabling bearer [ 233.660066][ T8624] team0: Port device team_slave_0 added [ 233.695002][ T8624] team0: Port device team_slave_1 added [ 233.910181][ T8801] netlink: 'syz.4.929': attribute type 5 has an invalid length. [ 233.926554][ T8799] ipt_REJECT: TCP_RESET invalid for non-tcp [ 233.935087][ T8801] __nla_validate_parse: 1 callbacks suppressed [ 233.935106][ T8801] netlink: 140 bytes leftover after parsing attributes in process `syz.4.929'. [ 233.962024][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.988024][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.022605][ T8624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.299297][ T8819] delete_channel: no stack [ 234.371380][ T8823] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 234.392003][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.405415][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.434336][ T8624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.664063][ T8624] hsr_slave_0: entered promiscuous mode [ 234.718216][ T8624] hsr_slave_1: entered promiscuous mode [ 234.960104][ T8844] netlink: 'syz.4.939': attribute type 2 has an invalid length. [ 234.968080][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 234.976897][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 235.003847][ T8844] netlink: 244 bytes leftover after parsing attributes in process `syz.4.939'. [ 235.432028][ T4623] Bluetooth: hci0: command tx timeout [ 235.603732][ T8853] netlink: 'syz.0.944': attribute type 8 has an invalid length. [ 235.797548][ T8859] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 235.805245][ T8859] netlink: 'syz.2.947': attribute type 2 has an invalid length. [ 235.850253][ T8859] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 235.866162][ T8859] netlink: 'syz.2.947': attribute type 2 has an invalid length. [ 235.890254][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 236.255543][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 236.295506][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 236.471157][ T8624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.510675][ T8624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.545777][ T8624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.593620][ T8624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.878967][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 236.938395][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.971983][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 236.983721][ T8917] netlink: 'syz.0.962': attribute type 11 has an invalid length. [ 237.001447][ T8624] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.043511][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.050761][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.055784][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.961'. [ 237.140524][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.147899][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.185904][ T8923] IPv6: sit1: Disabled Multicast RS [ 237.510772][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 237.512588][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 237.516831][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 237.704325][ T8624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.809595][ T8937] netlink: 'syz.0.967': attribute type 2 has an invalid length. [ 237.941526][ T8624] veth0_vlan: entered promiscuous mode [ 238.095130][ T8624] veth1_vlan: entered promiscuous mode [ 238.234496][ T8624] veth0_macvtap: entered promiscuous mode [ 238.296301][ T8624] veth1_macvtap: entered promiscuous mode [ 238.947469][ T4623] Bluetooth: hci0: command tx timeout [ 239.435617][ T8974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.480522][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.526478][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.565293][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.586961][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.625656][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.667965][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.678729][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.689620][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.702590][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.715376][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.740372][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.762355][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.774182][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.802521][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.831837][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.856622][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.883285][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.906472][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.937522][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.980463][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.028849][ T8991] __nla_validate_parse: 3 callbacks suppressed [ 240.028871][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 240.123692][ T8624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.140314][ T8624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.154987][ T8624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.180578][ T8624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.266622][ T5259] IPVS: starting estimator thread 0... [ 240.377860][ T9011] IPVS: using max 19 ests per chain, 45600 per kthread [ 240.390123][ T9010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.588490][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.619161][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.761343][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 240.774840][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.798497][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.862334][ T9021] pimreg: entered allmulticast mode [ 240.876157][ T9021] pimreg: left allmulticast mode [ 241.168822][ T9032] ax25_connect(): syz.0.992 uses autobind, please contact jreuter@yaina.de [ 241.220135][ T9032] ax25_connect(): syz.0.992 uses autobind, please contact jreuter@yaina.de [ 241.757204][ T2949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.294376][ T2949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.623389][ T2949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.710690][ T2949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.845670][ T2949] bridge_slave_1: left allmulticast mode [ 242.857643][ T2949] bridge_slave_1: left promiscuous mode [ 242.863468][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.873087][ T2949] bridge_slave_0: left allmulticast mode [ 242.878988][ T2949] bridge_slave_0: left promiscuous mode [ 242.887098][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.989948][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 243.502457][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.514371][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.523676][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.534079][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.543610][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.563121][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.736314][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.754822][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.766977][ T2949] bond0 (unregistering): Released all slaves [ 243.804089][ T9079] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 243.857037][ T9080] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 243.881789][ T9082] netlink: 'syz.2.1008': attribute type 12 has an invalid length. [ 244.238297][ T9103] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 244.374498][ T9103] team0: Device veth0_macvtap failed to register rx_handler [ 244.387831][ T5250] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.477429][ T9105] wlan0: mtu less than device minimum [ 244.798638][ T9130] xt_cgroup: path and classid specified [ 244.841800][ T9131] netlink: 'syz.4.1019': attribute type 8 has an invalid length. [ 244.975119][ T9088] lo speed is unknown, defaulting to 1000 [ 245.459488][ T9148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.477600][ T5260] IPVS: starting estimator thread 0... [ 245.486925][ T9154] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 245.551418][ T9138] siw: device registration error -23 [ 245.617488][ T9155] IPVS: using max 16 ests per chain, 38400 per kthread [ 245.704821][ T4623] Bluetooth: hci0: command tx timeout [ 245.969772][ T9159] ɶƣ0GC¦: entered promiscuous mode [ 245.977520][ T9158] netlink: 'syz.2.1028': attribute type 6 has an invalid length. [ 246.089964][ T2949] hsr_slave_0: left promiscuous mode [ 246.136353][ T2949] hsr_slave_1: left promiscuous mode [ 246.194795][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 246.207614][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.215102][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.224566][ T9178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1034'. [ 246.269011][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.276478][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.355995][ T2949] veth1_macvtap: left promiscuous mode [ 246.377481][ T2949] veth0_macvtap: left promiscuous mode [ 246.388871][ T2949] veth1_vlan: left promiscuous mode [ 246.398661][ T2949] veth0_vlan: left promiscuous mode [ 246.481658][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 247.040515][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 247.096684][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 247.593344][ T9188] netlink: 'syz.2.1035': attribute type 12 has an invalid length. [ 247.628102][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 247.738428][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 247.748242][ T4623] Bluetooth: hci0: command tx timeout [ 247.883547][ T9199] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 247.928705][ T9199] netlink: 4968 bytes leftover after parsing attributes in process `syz.4.1041'. [ 247.938959][ T9199] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 247.946734][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 247.994077][ T9199] netlink: 'syz.4.1041': attribute type 6 has an invalid length. [ 248.208584][ T9218] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1044'. [ 248.241348][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 248.259354][ T9218] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 248.609550][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.625728][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.642250][ T9088] bridge_slave_0: entered allmulticast mode [ 248.655575][ T9088] bridge_slave_0: entered promiscuous mode [ 248.671886][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.691862][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.703274][ T9088] bridge_slave_1: entered allmulticast mode [ 248.724146][ T9088] bridge_slave_1: entered promiscuous mode [ 248.831213][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.893015][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.994249][ T9088] team0: Port device team_slave_0 added [ 249.012781][ T9088] team0: Port device team_slave_1 added [ 249.196105][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.221527][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.251547][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.273635][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'. [ 249.291987][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.302958][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.332643][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.540139][ T9088] hsr_slave_0: entered promiscuous mode [ 249.554964][ T9088] hsr_slave_1: entered promiscuous mode [ 249.827729][ T4623] Bluetooth: hci0: command tx timeout [ 249.980783][ T9286] netlink: 'syz.4.1065': attribute type 34 has an invalid length. [ 250.046340][ T9286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1065'. [ 250.059661][ T9291] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 250.625908][ T9088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.665111][ T9088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.700429][ T9088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.722842][ T9088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.753096][ T9326] IPv6: sit2: Disabled Multicast RS [ 251.012981][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.084590][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.109208][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.116483][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.140965][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.148263][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.529413][ T9356] __nla_validate_parse: 1 callbacks suppressed [ 251.529438][ T9356] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1082'. [ 251.795254][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.908025][ T4623] Bluetooth: hci0: command tx timeout [ 251.964864][ T9088] veth0_vlan: entered promiscuous mode [ 252.010784][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 252.039581][ T9088] veth1_vlan: entered promiscuous mode [ 252.136268][ T9088] veth0_macvtap: entered promiscuous mode [ 252.192428][ T9088] veth1_macvtap: entered promiscuous mode [ 252.259774][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.288543][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.310033][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.331130][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.353724][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.384296][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.402715][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.415201][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.429161][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.453476][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.469861][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.481991][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.537431][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.567476][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.581528][ T9393] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1092'. [ 252.601585][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.629997][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.641925][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.652359][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.664299][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.681051][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.730927][ T9088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.754646][ T9088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.779850][ T9088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.802721][ T9088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.922158][ T9405] netlink: 'syz.3.1095': attribute type 3 has an invalid length. [ 252.956951][ T9405] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1095'. [ 253.016773][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 253.058608][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 253.085151][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.114744][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 253.126650][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.168995][ T9405] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 253.209190][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.223491][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.384832][ T9422] IPv6: sit3: Disabled Multicast RS [ 253.588053][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 253.666720][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 253.689040][ T9437] netlink: 'syz.3.1104': attribute type 5 has an invalid length. [ 253.851047][ T9443] netlink: 'syz.4.1108': attribute type 5 has an invalid length. [ 253.999377][ T5538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.010679][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.365595][ T9453] syzkaller1: entered promiscuous mode [ 254.375682][ T9453] syzkaller1: entered allmulticast mode [ 254.743661][ T9463] netlink: 'syz.0.1115': attribute type 12 has an invalid length. [ 254.776739][ T9463] netlink: 'syz.0.1115': attribute type 29 has an invalid length. [ 254.811576][ T9463] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 254.839973][ T9463] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 254.858964][ T9463] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 254.881323][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.925996][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.955498][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.098069][ T9480] delete_channel: no stack [ 255.239113][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 255.918114][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.920840][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.552374][ T5538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.475887][ T9525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 257.499234][ T9525] batman_adv: batadv0: Adding interface: ip6gretap2 [ 257.505897][ T9525] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.553218][ T9525] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 257.566450][ T9526] __nla_validate_parse: 2 callbacks suppressed [ 257.566470][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 257.595028][ T9526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.613995][ T9526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.624327][ T9526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.641450][ T9526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.654081][ T9526] batman_adv: batadv0: Removing interface: ip6gretap2 [ 257.873247][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.052093][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.070368][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.080078][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.089724][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.115879][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.125217][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.239526][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.282259][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.333036][ T9577] batadv_slave_0: entered promiscuous mode [ 258.504333][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.696248][ T9589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1143'. [ 258.712021][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.104300][ T12] bridge_slave_1: left allmulticast mode [ 259.124207][ T12] bridge_slave_1: left promiscuous mode [ 259.137955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.188614][ T12] bridge_slave_0: left allmulticast mode [ 259.207176][ T12] bridge_slave_0: left promiscuous mode [ 259.221415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.832307][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.844670][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.856458][ T12] bond0 (unregistering): Released all slaves [ 259.874094][ T9562] lo speed is unknown, defaulting to 1000 [ 259.981143][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.049502][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.056753][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.095535][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1155'. [ 260.130239][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 260.172784][ T9626] validate_nla: 2 callbacks suppressed [ 260.172809][ T9626] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 260.178441][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 260.237545][ T4623] Bluetooth: hci0: command tx timeout [ 260.253389][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 260.436847][ T9629] netlink: 'syz.2.1157': attribute type 3 has an invalid length. [ 260.447729][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1157'. [ 260.511473][ T9636] hsr0: entered allmulticast mode [ 260.525734][ T9636] hsr_slave_0: entered allmulticast mode [ 260.545569][ T9636] hsr_slave_1: entered allmulticast mode [ 260.570298][ T9645] xt_hashlimit: invalid interval [ 260.618771][ T9644] xt_CT: No such helper "syz0" [ 260.930958][ T9659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1164'. [ 260.988902][ T9659] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1164'. [ 261.032553][ T9664] syz.3.1165[9664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.032724][ T9664] syz.3.1165[9664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.050076][ T9659] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 261.220533][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 261.487435][ T9678] netlink: 'syz.4.1166': attribute type 21 has an invalid length. [ 261.657362][ T12] hsr_slave_0: left promiscuous mode [ 261.675934][ T12] hsr_slave_1: left promiscuous mode [ 261.690950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.702833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.720957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.729986][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.744273][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806da48400: rx timeout, send abort [ 261.769887][ T12] veth1_macvtap: left promiscuous mode [ 261.775929][ T12] veth0_macvtap: left promiscuous mode [ 261.783152][ T12] veth1_vlan: left promiscuous mode [ 261.788680][ T12] veth0_vlan: left promiscuous mode [ 262.256774][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806da48400: abort rx timeout. Force session deactivation [ 262.307879][ T4623] Bluetooth: hci0: command tx timeout [ 262.600833][ T12] team0 (unregistering): Port device team_slave_1 removed [ 262.701817][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.542095][ T9562] chnl_net:caif_netlink_parms(): no params data found [ 263.548511][ T9725] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 263.819923][ T9740] netlink: 'syz.4.1183': attribute type 33 has an invalid length. [ 263.828162][ T9740] __nla_validate_parse: 3 callbacks suppressed [ 263.828181][ T9740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1183'. [ 263.902116][ T9733] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 263.930144][ T9737] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 264.002888][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.031015][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.051111][ T9562] bridge_slave_0: entered allmulticast mode [ 264.070524][ T9562] bridge_slave_0: entered promiscuous mode [ 264.094089][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.108078][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.115533][ T9562] bridge_slave_1: entered allmulticast mode [ 264.123542][ T9562] bridge_slave_1: entered promiscuous mode [ 264.202607][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 264.213193][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 264.223151][ T9751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1187'. [ 264.305935][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.342211][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.387887][ T4623] Bluetooth: hci0: command tx timeout [ 264.523531][ T9562] team0: Port device team_slave_0 added [ 264.535483][ T9770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'. [ 264.558732][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1191'. [ 264.589479][ T9767] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 264.625371][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1191'. [ 264.665646][ T9768] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 264.693940][ T9562] team0: Port device team_slave_1 added [ 264.776800][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.790114][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.821059][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.882457][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.899164][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.913777][ T9772] Cannot find set identified by id 0 to match [ 264.942756][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.031970][ T9562] hsr_slave_0: entered promiscuous mode [ 265.049212][ T9562] hsr_slave_1: entered promiscuous mode [ 265.675830][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 265.827653][ T4623] Bluetooth: hci1: command 0x0406 tx timeout [ 266.067931][ T9833] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.087107][ T9834] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.467701][ T4623] Bluetooth: hci0: command tx timeout [ 266.793599][ T9860] xt_CT: No such helper "netbios-ns" [ 266.934678][ T9562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.980973][ T9562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.024615][ T9562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.090471][ T9562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.146319][ T9874] x_tables: duplicate underflow at hook 1 [ 267.163116][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 267.180975][ T9878] netlink: 'syz.4.1220': attribute type 13 has an invalid length. [ 267.194704][ T9878] netlink: 'syz.4.1220': attribute type 11 has an invalid length. [ 267.222343][ T9878] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.231329][ T9878] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.240246][ T9878] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.249135][ T9878] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.265324][ T9879] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 267.273953][ T9879] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 267.312952][ T9879] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1220'. [ 267.357733][ T9878] vxlan0: entered promiscuous mode [ 267.569948][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.635130][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.698686][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.705930][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.733931][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.741173][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.887033][ T9899] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 267.908186][ T4623] Bluetooth: hci1: command 0x0406 tx timeout [ 268.331286][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.487843][ T9562] veth0_vlan: entered promiscuous mode [ 268.506974][ T9562] veth1_vlan: entered promiscuous mode [ 268.619440][ T9562] veth0_macvtap: entered promiscuous mode [ 268.657090][ T9562] veth1_macvtap: entered promiscuous mode [ 268.721285][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.736771][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.749836][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.762374][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.775849][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.812995][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.840845][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.852373][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.864127][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.875490][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.886373][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.897733][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.910440][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.943338][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.982166][ T9562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.016764][ T9562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.032217][ T9562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.045566][ T9562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.271276][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.281513][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.290681][ T9947] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1241'. [ 269.333634][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.359366][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.499944][ T9952] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.579240][ T9953] bond0: entered allmulticast mode [ 269.629904][ T9953] bond_slave_0: entered allmulticast mode [ 269.635704][ T9953] bond_slave_1: entered allmulticast mode [ 269.652572][ T9953] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 269.732281][ T9953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.837542][ T9955] netlink: 'syz.3.1245': attribute type 7 has an invalid length. [ 269.847921][ T9960] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1247'. [ 270.514395][T10000] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1255'. [ 270.553501][ T9997] "syz.0.1255" (9997) uses obsolete ecb(arc4) skcipher [ 270.755157][T10012] ebt_limit: overflow, try lower: 570423552/2483027968 [ 271.172127][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 271.327051][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'. [ 271.353820][T10028] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1263'. [ 271.360430][T10034] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.405649][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 271.572748][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 271.587434][T10037] tc_dump_action: action bad kind [ 271.735619][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1270'. [ 271.764891][T10040] tap0: tun_chr_ioctl cmd 1074025678 [ 271.782157][T10040] tap0: group set to 0 [ 272.124065][ T6799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.157682][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'. [ 273.178727][ T6799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.252477][ T6799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.319461][ T6799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.423372][ T6799] bridge_slave_1: left allmulticast mode [ 273.457510][ T6799] bridge_slave_1: left promiscuous mode [ 273.464366][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.505234][ T6799] bridge_slave_0: left allmulticast mode [ 273.522938][ T6799] bridge_slave_0: left promiscuous mode [ 273.537715][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.832310][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.842575][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.853447][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.872904][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.885598][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.893361][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.154650][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.166855][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.179121][ T6799] bond0 (unregistering): Released all slaves [ 274.193883][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 274.416879][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 274.432223][T10084] Bluetooth: MGMT ver 1.23 [ 274.590399][T10081] netlink: 'syz.4.1278': attribute type 10 has an invalid length. [ 274.630573][T10081] team0: Device veth0_macvtap failed to register rx_handler [ 274.682301][T10092] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1281'. [ 275.189185][T10078] lo speed is unknown, defaulting to 1000 [ 275.520969][T10118] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 275.918052][ T5235] Bluetooth: hci0: command tx timeout [ 276.359183][T10141] netlink: 'syz.4.1294': attribute type 10 has an invalid length. [ 276.379356][ T6799] hsr_slave_0: left promiscuous mode [ 276.385675][ T6799] hsr_slave_1: left promiscuous mode [ 276.396908][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.415193][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.423907][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.432294][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.467050][ T6799] veth1_macvtap: left promiscuous mode [ 276.473939][ T6799] veth0_macvtap: left promiscuous mode [ 276.480646][ T6799] veth1_vlan: left promiscuous mode [ 276.486284][ T6799] veth0_vlan: left promiscuous mode [ 277.402392][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 277.464334][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 277.987826][ T5235] Bluetooth: hci0: command tx timeout [ 278.005950][T10146] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 278.015236][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 278.343005][T10078] chnl_net:caif_netlink_parms(): no params data found [ 278.385152][T10175] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 278.916557][T10178] lo speed is unknown, defaulting to 1000 [ 278.918761][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.935400][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 278.947040][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.954987][T10078] bridge_slave_0: entered allmulticast mode [ 278.961834][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 278.973054][T10078] bridge_slave_0: entered promiscuous mode [ 278.983179][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.991141][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.016020][T10078] bridge_slave_1: entered allmulticast mode [ 279.051916][T10078] bridge_slave_1: entered promiscuous mode [ 279.125361][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 279.142694][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 279.182176][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.226171][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.375140][T10078] team0: Port device team_slave_0 added [ 279.377116][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 279.407791][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 279.411213][T10078] team0: Port device team_slave_1 added [ 279.547909][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.575653][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.667597][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.720713][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.734687][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.821493][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.936357][T10212] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 280.067620][ T5235] Bluetooth: hci0: command tx timeout [ 280.101471][T10078] hsr_slave_0: entered promiscuous mode [ 280.133168][T10078] hsr_slave_1: entered promiscuous mode [ 280.222289][T10214] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 280.249991][T10214] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 281.732611][T10078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.792513][T10078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.846513][T10078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.935418][T10078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.956156][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 281.969134][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 281.987980][T10256] erspan0: entered promiscuous mode [ 282.004671][T10256] batadv_slave_1: entered promiscuous mode [ 282.018989][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 282.092029][T10266] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 282.148326][ T5235] Bluetooth: hci0: command tx timeout [ 282.451609][T10283] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 282.494666][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 282.501323][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.575373][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.617621][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.624827][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.743128][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.750472][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.903581][T10078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.120381][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 283.154036][T10314] netlink: 'syz.0.1347': attribute type 8 has an invalid length. [ 283.162012][T10314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1347'. [ 283.190463][T10311] pim6reg: entered allmulticast mode [ 283.390109][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.398601][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 283.426455][T10323] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.472127][T10321] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.499989][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 283.596049][T10078] veth0_vlan: entered promiscuous mode [ 283.647231][T10078] veth1_vlan: entered promiscuous mode [ 283.896855][T10078] veth0_macvtap: entered promiscuous mode [ 283.946314][T10078] veth1_macvtap: entered promiscuous mode [ 283.993067][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.006370][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.017681][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.056676][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.072740][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.086961][T10339] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 284.122693][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.148532][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.165500][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.176703][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.192836][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.203990][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.214649][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.227902][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.240856][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.301786][T10078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.362672][T10078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.407473][T10078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.416247][T10078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.460770][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 284.777448][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.797914][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.030396][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.059611][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.529051][T10380] bridge2: entered promiscuous mode [ 285.534337][T10380] bridge2: entered allmulticast mode [ 285.562293][T10353] lo speed is unknown, defaulting to 1000 [ 285.653148][T10384] tap0: tun_chr_ioctl cmd 1074025677 [ 285.668192][T10384] tap0: linktype set to 65534 [ 285.685831][T10384] netlink: 'syz.4.1366': attribute type 4 has an invalid length. [ 285.704001][T10384] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 285.759334][T10387] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 285.772832][ T29] audit: type=1107 audit(1726476461.236:2): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+´kÜÖ' [ 285.774794][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 286.278999][T10407] netlink: 'syz.0.1373': attribute type 15 has an invalid length. [ 286.298830][T10405] netlink: 'syz.2.1372': attribute type 3 has an invalid length. [ 286.319580][T10409] openvswitch: netlink: Multiple metadata blocks provided [ 286.730553][T10426] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 287.332614][T10445] netlink: zone id is out of range [ 287.493740][ T2928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.646860][T10451] netlink: 'syz.0.1387': attribute type 5 has an invalid length. [ 288.298275][ T2928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.383380][ T2928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.465994][ T2928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.587223][ T2928] bridge_slave_1: left allmulticast mode [ 288.593630][ T2928] bridge_slave_1: left promiscuous mode [ 288.599826][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.609808][ T2928] bridge_slave_0: left allmulticast mode [ 288.615491][ T2928] bridge_slave_0: left promiscuous mode [ 288.621742][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.060072][T10462] netlink: set zone limit has 8 unknown bytes [ 289.375705][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.405013][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.433327][ T2928] bond0 (unregistering): Released all slaves [ 289.478187][T10467] hsr0: entered allmulticast mode [ 289.498724][T10467] hsr_slave_0: entered allmulticast mode [ 289.507136][T10467] hsr_slave_1: entered allmulticast mode [ 289.661275][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.662478][T10477] __nla_validate_parse: 7 callbacks suppressed [ 289.662497][T10477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1392'. [ 289.698661][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.708116][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.723730][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.746802][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.747982][T10475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1392'. [ 289.763665][T10477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1392'. [ 289.773109][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.867696][T10482] Bluetooth: MGMT ver 1.23 [ 290.111786][T10499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1397'. [ 290.150528][T10499] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 290.260235][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 290.503461][T10480] lo speed is unknown, defaulting to 1000 [ 290.739463][T10518] Bluetooth: MGMT ver 1.23 [ 290.836452][T10521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'. [ 290.966347][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1404'. [ 291.174118][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 291.522216][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 291.810403][ T2928] hsr_slave_0: left promiscuous mode [ 291.827561][ T5235] Bluetooth: hci0: command tx timeout [ 291.835666][ T2928] hsr_slave_1: left promiscuous mode [ 291.847155][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.862985][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.871643][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.878948][T10561] netlink: zone id is out of range [ 291.884361][T10561] netlink: zone id is out of range [ 291.886615][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.893136][T10561] netlink: zone id is out of range [ 291.902713][T10561] netlink: zone id is out of range [ 291.908703][T10561] netlink: zone id is out of range [ 291.914143][T10561] netlink: zone id is out of range [ 291.922168][T10561] netlink: zone id is out of range [ 291.941487][ T2928] veth1_macvtap: left promiscuous mode [ 291.947047][ T2928] veth0_macvtap: left promiscuous mode [ 291.960096][ T2928] veth1_vlan: left promiscuous mode [ 291.965534][ T2928] veth0_vlan: left promiscuous mode [ 292.614674][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 292.666368][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 293.231286][T10549] team1: Mode changed to "activebackup" [ 293.239817][T10560] net veth1_virt_wifi p: renamed from virt_wifi0 [ 293.307156][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 293.328230][T10570] nê1®NuëöÉÑ30: renamed from lo (while UP) [ 293.371989][T10570] nê1®NuëöÉÑ30: entered allmulticast mode [ 293.695240][T10480] chnl_net:caif_netlink_parms(): no params data found [ 293.909005][ T5235] Bluetooth: hci0: command tx timeout [ 294.175424][T10606] veth0_to_hsr: invalid flags given to default FDB implementation [ 294.217113][T10480] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.234465][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.259656][T10480] bridge_slave_0: entered allmulticast mode [ 294.296507][T10480] bridge_slave_0: entered promiscuous mode [ 294.327908][T10480] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.335369][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.362257][T10480] bridge_slave_1: entered allmulticast mode [ 294.391045][T10480] bridge_slave_1: entered promiscuous mode [ 294.548284][T10480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.602083][T10480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.747743][T10480] team0: Port device team_slave_0 added [ 294.779897][T10624] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 294.785317][T10480] team0: Port device team_slave_1 added [ 294.811253][T10627] __nla_validate_parse: 1 callbacks suppressed [ 294.811272][T10627] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1437'. [ 294.842867][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 294.999647][T10480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.025658][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.124513][T10480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.149820][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'. [ 295.161583][T10649] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 295.226164][T10654] sctp: [Deprecated]: syz.4.1443 (pid 10654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.226164][T10654] Use struct sctp_sack_info instead [ 295.265388][T10480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.307449][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.354182][T10480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.390485][T10658] net_ratelimit: 13 callbacks suppressed [ 295.390504][T10658] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 295.449986][T10660] tls_set_device_offload_rx: netdev not found [ 295.582736][T10480] hsr_slave_0: entered promiscuous mode [ 295.616360][T10480] hsr_slave_1: entered promiscuous mode [ 295.654351][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 295.850948][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 295.870851][T10680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1451'. [ 295.943133][T10680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.085039][T10688] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 296.272547][T10695] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 296.711517][T10480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.734377][T10480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.780102][T10480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.812360][T10480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.906130][T10719] Cannot find del_set index 17 as target [ 297.052233][T10480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.111335][T10480] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.145823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.153118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.202195][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'. [ 297.253465][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.260733][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.446195][T10739] netlink: 'syz.2.1472': attribute type 6 has an invalid length. [ 297.725847][T10756] bond_slave_0: entered promiscuous mode [ 297.732102][T10756] bond_slave_1: entered promiscuous mode [ 297.737881][T10756] batadv_slave_0: entered promiscuous mode [ 297.765102][T10756] bond0: entered promiscuous mode [ 297.846906][T10480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.961152][T10480] veth0_vlan: entered promiscuous mode [ 297.985845][T10480] veth1_vlan: entered promiscuous mode [ 298.050605][T10480] veth0_macvtap: entered promiscuous mode [ 298.110685][T10480] veth1_macvtap: entered promiscuous mode [ 298.186405][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.210096][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.221899][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.233177][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.245771][T10480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.267000][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.277960][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.289529][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.301488][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.318911][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.337451][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.349102][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.359780][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.371803][T10480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.418106][T10749] bond0: left promiscuous mode [ 298.429325][T10749] bond_slave_0: left promiscuous mode [ 298.435245][T10749] bond_slave_1: left promiscuous mode [ 298.440759][T10749] batadv_slave_0: left promiscuous mode [ 298.476011][T10764] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 298.499064][T10767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1480'. [ 298.509350][T10480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.540802][T10480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.567310][T10480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.591819][T10480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.843971][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.865260][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.968496][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.976443][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.105601][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 299.145135][T10789] macsec0: entered promiscuous mode [ 299.289538][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 299.534949][T10804] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 299.661805][T10804] bond1 (unregistering): Released all slaves [ 300.134530][T10839] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 300.234996][T10839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.304968][T10847] bond3: (slave ip6gretap1): making interface the new active one [ 300.322063][T10847] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 300.334048][T10854] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.618589][T10866] syz.0.1505 (10866) used greatest stack depth: 16784 bytes left [ 300.704321][T10873] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1507'. [ 300.747748][T10851] lo speed is unknown, defaulting to 1000 [ 301.020371][T10882] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1509'. [ 301.298118][T10890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1512'. [ 301.373874][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1514'. [ 301.387535][T10894] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1514'. [ 301.612368][ T2928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.658707][T10852] lo speed is unknown, defaulting to 1000 [ 303.166324][ T2928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.473805][ T2928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.515479][T10920] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 303.613583][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'. [ 303.723796][ T2928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.740151][T10934] vlan0: entered promiscuous mode [ 303.791759][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.803797][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.822476][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.833313][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.845236][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.857854][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.080652][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 304.124227][T10953] Bluetooth: MGMT ver 1.23 [ 304.583291][T10978] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 304.994550][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 305.919128][ T4623] Bluetooth: hci0: command tx timeout [ 306.983498][ T2928] bridge_slave_1: left allmulticast mode [ 307.005222][ T2928] bridge_slave_1: left promiscuous mode [ 307.036677][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.069012][ T2928] bridge_slave_0: left allmulticast mode [ 307.074740][ T2928] bridge_slave_0: left promiscuous mode [ 307.114292][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.198353][T11010] set match dimension is over the limit! [ 307.316651][T11021] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 307.746238][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.765403][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.777215][ T2928] bond0 (unregistering): Released all slaves [ 307.798234][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1542'. [ 307.875977][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 307.989263][ T5235] Bluetooth: hci0: command tx timeout [ 308.022189][T10944] lo speed is unknown, defaulting to 1000 [ 308.245721][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 308.285263][T11036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1548'. [ 308.392522][T11042] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1550'. [ 308.823373][T11064] netlink: 'syz.2.1555': attribute type 2 has an invalid length. [ 308.989174][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1558'. [ 309.107933][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 309.114353][ T4623] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 309.149043][T11069] vxcan5: entered allmulticast mode [ 309.270300][T11080] netlink: 'syz.4.1561': attribute type 11 has an invalid length. [ 309.295199][T11076] netlink: 'syz.2.1560': attribute type 8 has an invalid length. [ 309.433397][ T2928] hsr_slave_0: left promiscuous mode [ 309.458239][ T2928] hsr_slave_1: left promiscuous mode [ 309.466917][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.478791][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.491138][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.526289][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.584350][ T2928] veth1_macvtap: left promiscuous mode [ 309.600981][ T2928] veth0_macvtap: left promiscuous mode [ 309.606728][ T2928] veth1_vlan: left promiscuous mode [ 309.614726][ T2928] veth0_vlan: left promiscuous mode [ 310.081280][ T4623] Bluetooth: hci0: command tx timeout [ 310.291811][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 310.343837][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 310.866828][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 311.082875][T10944] chnl_net:caif_netlink_parms(): no params data found [ 311.102256][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 311.125359][T11116] netlink: 'syz.3.1568': attribute type 15 has an invalid length. [ 311.488217][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.510042][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.529969][T10944] bridge_slave_0: entered allmulticast mode [ 311.545835][T10944] bridge_slave_0: entered promiscuous mode [ 311.566552][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.573793][T11135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.649741][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.684934][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.734672][T10944] bridge_slave_1: entered allmulticast mode [ 311.785752][T10944] bridge_slave_1: entered promiscuous mode [ 311.968388][T10944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.014295][T10944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.088265][T11152] gtp0: entered promiscuous mode [ 312.098658][T11152] gtp0: entered allmulticast mode [ 312.147668][ T4623] Bluetooth: hci0: command tx timeout [ 312.226501][T10944] team0: Port device team_slave_0 added [ 312.256731][T10944] team0: Port device team_slave_1 added [ 312.402716][T10944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.436873][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.510542][T10944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.556988][T11174] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.560422][T10944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.589770][T11174] nbd: must specify an index to disconnect [ 312.598647][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.600272][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 312.665949][T10944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.893209][T10944] hsr_slave_0: entered promiscuous mode [ 312.920123][T10944] hsr_slave_1: entered promiscuous mode [ 312.929017][T11185] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1587'. [ 312.943133][T11186] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 312.952359][T11183] virt_wifi0: mtu less than device minimum [ 312.968992][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 313.020566][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 313.204929][T11195] xt_TCPMSS: Only works on TCP SYN packets [ 313.394323][T11202] netlink: 'syz.4.1593': attribute type 24 has an invalid length. [ 313.846404][T11214] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 313.872843][T11214] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 313.962450][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 314.059400][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 314.087541][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 314.181121][T11220] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1599'. [ 314.237190][T10944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.252114][T10944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.287797][T10944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.299377][T10944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.575492][T10944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.601208][T11240] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 314.672897][T10944] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.706905][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.714292][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.784151][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.791400][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.811990][T11250] netlink: 'syz.3.1607': attribute type 12 has an invalid length. [ 314.830625][T11250] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1607'. [ 314.856856][T11254] netlink: 'syz.3.1607': attribute type 12 has an invalid length. [ 314.897017][T11254] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1607'. [ 314.933939][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 315.088749][T10944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.319677][T11275] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 315.338237][T11275] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 315.421101][T11280] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 315.512959][ T4623] block nbd0: Receive control failed (result -107) [ 315.592106][T11293] netlink: 'syz.3.1620': attribute type 9 has an invalid length. [ 315.614339][T10944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.829652][T11299] netem: incorrect gi model size [ 315.835230][T11299] netem: change failed [ 315.865184][T10944] veth0_vlan: entered promiscuous mode [ 315.875654][T11298] xt_l2tp: unknown flags: 18 [ 315.929272][T10944] veth1_vlan: entered promiscuous mode [ 316.210035][T10944] veth0_macvtap: entered promiscuous mode [ 316.252657][T10944] veth1_macvtap: entered promiscuous mode [ 316.324061][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.341753][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.352370][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.363427][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.376033][T10944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.435957][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.478275][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.507439][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.537457][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.559912][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.570947][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.586748][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.601177][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.623966][T10944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.660003][T10944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.697418][T10944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.716550][T10944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.748120][T10944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.840179][T11306] lo speed is unknown, defaulting to 1000 [ 317.016003][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.059511][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.173128][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.211119][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.226932][T11343] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 317.264945][T11343] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 317.353093][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.972115][T11365] __nla_validate_parse: 9 callbacks suppressed [ 317.972137][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'. [ 317.979542][T11366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1640'. [ 318.164802][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 318.280714][T11377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1642'. [ 318.373120][T11371] bond4: entered promiscuous mode [ 318.438352][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 318.501285][T11381] bond4: left promiscuous mode [ 318.570671][T11381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.601672][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 318.694000][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1645'. [ 318.733641][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 318.759390][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 319.329339][T11415] xt_l2tp: v2 doesn't support IP mode [ 319.346331][T11419] netlink: 'syz.0.1656': attribute type 2 has an invalid length. [ 319.361253][T11424] netlink: 'syz.3.1654': attribute type 2 has an invalid length. [ 319.369494][T11424] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 319.377316][T11424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1654'. [ 319.517081][T11428] netlink: zone id is out of range [ 319.522463][T11428] netlink: zone id is out of range [ 319.549816][T11428] netlink: set zone limit has 4 unknown bytes [ 319.942546][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.973529][T11447] netlink: 'syz.2.1665': attribute type 12 has an invalid length. [ 319.994460][T11447] netlink: 'syz.2.1665': attribute type 29 has an invalid length. [ 320.017312][T11447] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 320.034697][T11447] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 320.050025][T11447] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 320.063491][T11447] netlink: 'syz.2.1665': attribute type 37 has an invalid length. [ 320.088154][T11447] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 320.097146][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.680431][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.742606][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.808194][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.916022][ T11] bridge_slave_1: left allmulticast mode [ 320.922000][ T11] bridge_slave_1: left promiscuous mode [ 320.928266][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.938078][ T11] bridge_slave_0: left allmulticast mode [ 320.943731][ T11] bridge_slave_0: left promiscuous mode [ 320.951361][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.353768][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.366974][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.379550][ T11] bond0 (unregistering): Released all slaves [ 321.840951][T11464] ip6t_REJECT: ECHOREPLY is not supported [ 321.847398][T11465] ip6t_REJECT: ECHOREPLY is not supported [ 321.905097][T11464] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 321.933006][T11464] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 322.071637][T11475] netlink: 'syz.0.1671': attribute type 16 has an invalid length. [ 322.245825][ T11] hsr_slave_0: left promiscuous mode [ 322.260561][ T11] hsr_slave_1: left promiscuous mode [ 322.279633][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.287095][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.322693][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.335429][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.385043][ T11] veth1_macvtap: left promiscuous mode [ 322.395874][ T11] veth0_macvtap: left promiscuous mode [ 322.405591][ T11] veth1_vlan: left promiscuous mode [ 322.416602][ T11] veth0_vlan: left promiscuous mode [ 322.485094][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.499435][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.512921][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.526415][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.544737][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.555767][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.724779][T11490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.065728][T11508] __nla_validate_parse: 6 callbacks suppressed [ 323.065748][T11508] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1680'. [ 323.486133][ T11] team0 (unregistering): Port device team_slave_1 removed [ 323.544227][ T11] team0 (unregistering): Port device team_slave_0 removed [ 323.907498][ T4623] Bluetooth: hci6: command tx timeout [ 324.451584][T11520] Bluetooth: MGMT ver 1.23 [ 324.452005][T11519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1685'. [ 324.523249][T11519] vlan0: entered promiscuous mode [ 324.541363][T11519] vlan0: entered allmulticast mode [ 324.629454][ T4623] Bluetooth: hci0: command tx timeout [ 324.653892][T11529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.688070][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 324.706220][T11525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 324.719954][T11525] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 324.730624][T11525] gretap1: entered promiscuous mode [ 324.736652][T11525] gretap1: entered allmulticast mode [ 324.746625][T11484] lo speed is unknown, defaulting to 1000 [ 324.902398][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1688'. [ 325.050518][T11534] validate_nla: 2 callbacks suppressed [ 325.050541][T11534] netlink: 'syz.3.1689': attribute type 3 has an invalid length. [ 326.708200][ T4623] Bluetooth: hci0: command tx timeout [ 327.225963][T11545] tipc: New replicast peer: 255.255.255.255 [ 327.236952][T11545] tipc: Enabled bearer , priority 10 [ 327.283786][T11547] tipc: Enabling of bearer rejected, already enabled [ 327.421760][T11552] netlink: 'syz.3.1694': attribute type 10 has an invalid length. [ 327.497018][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.546672][T11552] team0: Port device batadv0 added [ 327.651259][T11564] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 327.689916][T11564] netlink: 'syz.2.1695': attribute type 4 has an invalid length. [ 327.713518][T11564] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1695'. [ 327.763333][T11571] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1699'. [ 328.096306][T11484] chnl_net:caif_netlink_parms(): no params data found [ 328.257914][ T5250] tipc: Node number set to 2479296545 [ 328.291667][T11596] IPv6: Can't replace route, no match found [ 328.539046][T11599] veth0_to_hsr: invalid flags given to default FDB implementation [ 328.574970][T11605] vlan2: entered promiscuous mode [ 328.602925][T11605] batadv0: entered promiscuous mode [ 328.614999][T11605] vlan2: entered allmulticast mode [ 328.638204][T11605] batadv0: entered allmulticast mode [ 328.667310][T11605] batadv0: left allmulticast mode [ 328.672618][T11605] batadv0: left promiscuous mode [ 328.677875][T11613] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 328.789003][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1710'. [ 328.800321][ T4623] Bluetooth: hci0: command tx timeout [ 328.860716][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.899735][T11484] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.938306][T11484] bridge_slave_0: entered allmulticast mode [ 328.961395][T11484] bridge_slave_0: entered promiscuous mode [ 328.991499][T11484] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.027728][T11484] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.046864][T11484] bridge_slave_1: entered allmulticast mode [ 329.066971][T11484] bridge_slave_1: entered promiscuous mode [ 329.306758][T11629] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 329.340251][T11638] openvswitch: netlink: Message has 4 unknown bytes. [ 329.414177][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.443873][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.651300][T11484] team0: Port device team_slave_0 added [ 329.680245][T11484] team0: Port device team_slave_1 added [ 329.806076][T11653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'. [ 330.041853][T11484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.049544][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.079787][T11484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.094587][T11484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.103664][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.132211][T11484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.150315][T11665] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 330.162130][T11665] hsr0: entered promiscuous mode [ 330.197768][T11665] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 330.211252][T11665] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 330.222798][T11665] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 330.239494][T11665] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 330.356664][T11484] hsr_slave_0: entered promiscuous mode [ 330.374978][T11484] hsr_slave_1: entered promiscuous mode [ 330.390653][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 330.617582][T11680] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 330.625624][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1728'. [ 330.628310][T11685] siw: device registration error -23 [ 330.679215][T11680] team0: entered promiscuous mode [ 330.684325][T11680] team_slave_0: entered promiscuous mode [ 330.727612][T11680] team_slave_1: entered promiscuous mode [ 330.734455][T11680] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 330.768921][T11680] batadv0: entered promiscuous mode [ 330.790019][T11680] team0: entered allmulticast mode [ 330.795292][T11680] team_slave_0: entered allmulticast mode [ 330.803901][T11680] team_slave_1: entered allmulticast mode [ 330.811125][T11680] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 330.819584][T11680] batadv0: entered allmulticast mode [ 330.826703][T11680] bridge0: port 3(team0) entered blocking state [ 330.833736][T11680] bridge0: port 3(team0) entered disabled state [ 330.864678][T11692] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1731'. [ 330.875006][ T4623] Bluetooth: hci0: command tx timeout [ 330.918211][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 331.131743][T11711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.234063][ T2928] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 331.245117][ T2928] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 331.266804][T11717] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.1737'. [ 331.473424][T11484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.512491][T11484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.533531][T11484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.546987][T11484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.789737][T11730] gtp0: entered promiscuous mode [ 331.802789][T11730] gtp0: entered allmulticast mode [ 331.862802][T11484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.916816][T11484] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.954598][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.961865][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.008122][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 332.044310][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.051602][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.224346][T11747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1746'. [ 332.248264][T11747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1746'. [ 332.308333][T11484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.453337][T11757] team0: Device wg2 is of different type [ 332.504245][T11760] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 332.900408][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.959086][ T4623] Bluetooth: hci0: command tx timeout [ 333.135387][T11484] veth0_vlan: entered promiscuous mode [ 333.228732][T11484] veth1_vlan: entered promiscuous mode [ 333.583441][T11484] veth0_macvtap: entered promiscuous mode [ 333.688314][T11484] veth1_macvtap: entered promiscuous mode [ 333.822079][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.893929][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.956175][T11484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.120693][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.212916][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.247082][T11805] ebt_among: dst integrity fail: 200 [ 334.274457][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.331023][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.371155][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.413840][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.439140][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.458938][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.494507][T11484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.612504][T11484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.697395][T11484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.706235][T11484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.804419][T11484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.291561][T11823] xt_l2tp: v2 sid > 0xffff: 262144 [ 335.390684][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.438348][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.545344][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.565144][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.668965][T11841] __nla_validate_parse: 3 callbacks suppressed [ 335.668987][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1770'. [ 335.835294][T11844] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1771'. [ 335.965449][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 336.090559][T11855] A link change request failed with some changes committed already. Interface nê1®NuëöÉÑ30 may have been left with an inconsistent configuration, please check. [ 336.141678][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d38000: rx timeout, send abort [ 336.165865][T11857] netlink: 'syz.4.1774': attribute type 10 has an invalid length. [ 336.207166][T11857] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 336.650018][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d38000: abort rx timeout. Force session deactivation [ 336.650606][T11875] netlink: 'syz.0.1781': attribute type 10 has an invalid length. [ 336.805856][T11883] nbd: nbd0 already in use [ 336.811307][T11880] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 337.029907][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.035446][T11894] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 337.680180][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 337.704856][T11932] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 337.775074][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 337.784938][T11935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 337.801048][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 337.916944][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 338.045235][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.093129][T11943] ebtables: ebtables: counters copy to user failed while replacing table [ 338.119544][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.133109][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 338.264160][T11949] syzkaller0: entered promiscuous mode [ 338.273004][T11949] syzkaller0: entered allmulticast mode [ 338.386245][T11953] delete_channel: no stack [ 338.673477][T11963] x_tables: unsorted entry at hook 1 [ 338.960103][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.238758][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.196197][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.212906][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.233187][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.259712][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.284449][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.301951][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.254904][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.485455][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.886093][ T35] bridge_slave_1: left allmulticast mode [ 342.928010][ T35] bridge_slave_1: left promiscuous mode [ 342.952714][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.996527][ T35] bridge_slave_0: left allmulticast mode [ 343.024554][ T35] bridge_slave_0: left promiscuous mode [ 343.040663][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.152691][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 343.428243][ T5235] Bluetooth: hci0: command tx timeout [ 344.020951][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.034083][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.061827][ T35] bond0 (unregistering): Released all slaves [ 344.079758][T11993] lo speed is unknown, defaulting to 1000 [ 344.098167][T12054] IPVS: Unknown mcast interface: batadv0 [ 344.352608][T12057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1834'. [ 344.409592][T12062] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 344.423803][T12062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1833'. [ 344.782303][T12076] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1841'. [ 344.948474][T12083] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 345.069018][T12086] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1844'. [ 345.092322][T12086] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 345.510389][ T5235] Bluetooth: hci0: command tx timeout [ 345.645612][T12101] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1845'. [ 345.824603][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'. [ 345.977996][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 346.043257][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 346.129881][ T35] hsr_slave_0: left promiscuous mode [ 346.136406][ T35] hsr_slave_1: left promiscuous mode [ 346.147191][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.160190][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.173351][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.185875][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.219578][ T35] veth1_macvtap: left promiscuous mode [ 346.225198][ T35] veth0_macvtap: left promiscuous mode [ 346.231561][ T35] veth1_vlan: left promiscuous mode [ 346.236946][ T35] veth0_vlan: left promiscuous mode [ 346.807131][ T35] team0 (unregistering): Port device team_slave_1 removed [ 346.865678][ T35] team0 (unregistering): Port device team_slave_0 removed [ 347.440774][T12124] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1854'. [ 347.567584][T12130] bridge: RTM_NEWNEIGH with invalid ether address [ 347.604691][ T5235] Bluetooth: hci0: command tx timeout [ 347.609665][T12130] bridge: RTM_NEWNEIGH with invalid ether address [ 347.763487][T11993] chnl_net:caif_netlink_parms(): no params data found [ 348.191866][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.242365][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.283923][T11993] bridge_slave_0: entered allmulticast mode [ 348.302054][T11993] bridge_slave_0: entered promiscuous mode [ 348.318612][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.325795][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.339716][T11993] bridge_slave_1: entered allmulticast mode [ 348.351590][T11993] bridge_slave_1: entered promiscuous mode [ 348.480335][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.519733][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.625693][T11993] team0: Port device team_slave_0 added [ 348.642730][T11993] team0: Port device team_slave_1 added [ 348.728125][T11993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.735147][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.765591][T11993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.790011][T11993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.806303][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.864012][T11993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.990344][T11993] hsr_slave_0: entered promiscuous mode [ 348.998749][T11993] hsr_slave_1: entered promiscuous mode [ 349.026224][T12199] __nla_validate_parse: 2 callbacks suppressed [ 349.026244][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 349.060395][T12197] tipc: Enabled bearer , priority 0 [ 349.240874][T12196] tipc: Disabling bearer [ 349.256153][T12207] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1880'. [ 349.266224][T12207] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1880'. [ 349.469913][T12215] netlink: 'syz.4.1883': attribute type 15 has an invalid length. [ 349.624194][T12222] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1885'. [ 349.668901][ T5235] Bluetooth: hci0: command tx timeout [ 349.805391][T12225] netlink: 'syz.4.1886': attribute type 13 has an invalid length. [ 349.835030][T12225] macvtap0: entered allmulticast mode [ 349.863564][T12225] macvtap0: refused to change device tx_queue_len [ 350.148366][T12242] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 350.210455][T11993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.275648][T11993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.318464][T12251] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1894'. [ 350.332203][T11993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.363537][T11993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.384138][T12251] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1894'. [ 350.642972][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.681901][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.705585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.712843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.749817][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.756988][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.012431][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.102958][T11993] veth0_vlan: entered promiscuous mode [ 351.142299][T11993] veth1_vlan: entered promiscuous mode [ 351.210763][T11993] veth0_macvtap: entered promiscuous mode [ 351.233883][T11993] veth1_macvtap: entered promiscuous mode [ 351.271797][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.292902][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.306617][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.329432][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.344829][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.356538][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.372869][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.382904][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.417396][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.431995][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.443732][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.455861][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.473161][T11993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.482441][T11993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.518955][T11993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.530664][T11993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.691334][T12301] sch_tbf: burst 5729 is lower than device lo mtu (11337746) ! [ 351.897492][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.934652][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.114713][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.144543][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.586106][T12347] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 352.698621][T12349] netlink: 'syz.0.1918': attribute type 4 has an invalid length. [ 352.722266][T12349] netlink: 'syz.0.1918': attribute type 4 has an invalid length. [ 353.623464][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 353.853588][ T30] INFO: task syz.4.695:7950 blocked for more than 143 seconds. [ 353.868155][ T30] Not tainted 6.11.0-rc7-syzkaller-00104-g7052622fccb1 #0 [ 353.875829][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.974748][ T30] task:syz.4.695 state:D stack:26640 pid:7950 tgid:7948 ppid:5303 flags:0x00000004 [ 354.024335][ T30] Call Trace: [ 354.041294][ T30] [ 354.061566][ T30] __schedule+0x1800/0x4a60 [ 354.090612][ T30] ? __pfx___schedule+0x10/0x10 [ 354.104719][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.127093][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 354.164272][ T30] ? schedule+0x90/0x320 [ 354.183683][ T30] schedule+0x14b/0x320 [ 354.201256][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.219340][ T30] __mutex_lock+0x6a4/0xd70 [ 354.235161][ T30] ? __mutex_lock+0x527/0xd70 [ 354.252629][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 354.269022][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.287021][ T30] ? genlmsg_put+0x145/0x2e0 [ 354.304080][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 354.324718][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 354.352540][ T30] ? __asan_memcpy+0x40/0x70 [ 354.368094][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 354.379597][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 354.402946][ T30] genl_rcv_msg+0xb14/0xec0 [ 354.416357][ T30] ? mark_lock+0x9a/0x350 [ 354.425901][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.434506][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 354.445075][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 354.454765][ T30] ? __pfx___might_resched+0x10/0x10 [ 354.463883][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.477066][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.485931][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.495910][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 354.511628][ T30] genl_rcv+0x28/0x40 [ 354.520305][ T30] netlink_unicast+0x7f6/0x990 [ 354.525834][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.540873][ T30] ? __virt_addr_valid+0x183/0x530 [ 354.546173][ T30] ? __check_object_size+0x49c/0x900 [ 354.556229][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 354.564851][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.574242][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.582890][ T30] ? __import_iovec+0x536/0x820 [ 354.592836][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.601445][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.609399][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 354.615266][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.634206][ T30] __sock_sendmsg+0x221/0x270 [ 354.642826][ T30] ____sys_sendmsg+0x525/0x7d0 [ 354.653314][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.660905][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 354.665711][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.677073][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.685782][ T30] ? do_syscall_64+0x100/0x230 [ 354.696473][ T30] ? do_syscall_64+0xb6/0x230 [ 354.703517][ T30] do_syscall_64+0xf3/0x230 [ 354.717073][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.724371][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.739129][ T30] RIP: 0033:0x7f592397def9 [ 354.743683][ T30] RSP: 002b:00007f59247b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.757006][ T30] RAX: ffffffffffffffda RBX: 00007f5923b35f80 RCX: 00007f592397def9 [ 354.768602][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 354.776800][ T30] RBP: 00007f59239f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 354.791098][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.803347][ T30] R13: 0000000000000000 R14: 00007f5923b35f80 R15: 00007ffcc0e17548 [ 354.822289][ T30] [ 354.825618][ T30] [ 354.825618][ T30] Showing all locks held in the system: [ 354.839513][ T30] 1 lock held by khungtaskd/30: [ 354.844768][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 354.867099][ T30] 4 locks held by kworker/1:1/47: [ 354.874528][ T30] 2 locks held by getty/4982: [ 354.886289][ T30] #0: ffff888032bb00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 354.928078][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 354.945644][ T30] 3 locks held by kworker/1:5/5260: [ 354.954775][ T30] 2 locks held by syz.2.493/7189: [ 354.969301][ T30] #0: ffffffff8fcf1ab0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 354.986077][ T30] #1: ffffffff8ec0b6e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 354.998760][ T30] 2 locks held by syz.4.695/7950: [ 355.003873][ T30] #0: ffffffff8fcf1ab0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 355.013759][ T30] #1: ffffffff8ec0b6e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 355.024228][ T30] 1 lock held by syz-executor/11993: [ 355.030602][ T30] #0: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 355.041124][ T30] 2 locks held by syz.0.1918/12348: [ 355.046463][ T30] #0: ffff888078968808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 355.056899][ T30] #1: ffff888029bdf258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb8/0x670 [ 355.066821][ T30] [ 355.070851][ T30] ============================================= [ 355.070851][ T30] [ 355.080032][ T30] NMI backtrace for cpu 0 [ 355.084373][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00104-g7052622fccb1 #0 [ 355.094880][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 355.104939][ T30] Call Trace: [ 355.108231][ T30] [ 355.111199][ T30] dump_stack_lvl+0x241/0x360 [ 355.115923][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.121149][ T30] ? __pfx__printk+0x10/0x10 [ 355.125748][ T30] ? vprintk_emit+0x667/0x7c0 [ 355.130440][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 355.135490][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 355.140446][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.145909][ T30] ? _printk+0xd5/0x120 [ 355.150076][ T30] ? __pfx__printk+0x10/0x10 [ 355.154686][ T30] ? __wake_up_klogd+0xcc/0x110 [ 355.159543][ T30] ? __pfx__printk+0x10/0x10 [ 355.164172][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 355.169237][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.175246][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 355.181241][ T30] watchdog+0xff4/0x1040 [ 355.185497][ T30] ? watchdog+0x1ea/0x1040 [ 355.189942][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.194646][ T30] kthread+0x2f0/0x390 [ 355.198719][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.203404][ T30] ? __pfx_kthread+0x10/0x10 [ 355.208008][ T30] ret_from_fork+0x4b/0x80 [ 355.212478][ T30] ? __pfx_kthread+0x10/0x10 [ 355.217086][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.221868][ T30] [ 355.227535][ T30] Sending NMI from CPU 0 to CPUs 1: [ 355.233599][ C1] NMI backtrace for cpu 1 [ 355.233613][ C1] CPU: 1 UID: 0 PID: 4674 Comm: klogd Not tainted 6.11.0-rc7-syzkaller-00104-g7052622fccb1 #0 [ 355.233635][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 355.233646][ C1] RIP: 0010:__build_skb_around+0x6d/0x3d0 [ 355.233673][ C1] Code: f8 4c 89 ff e8 14 52 5b f8 49 89 c6 44 89 f6 4c 89 ff ba 20 08 00 00 e8 51 50 5b f8 4c 39 f8 0f 85 37 02 00 00 e8 c3 09 14 f8 <48> bd 00 00 00 00 00 fc ff df 41 8d 9e 00 01 00 00 49 8d bd e0 00 [ 355.233694][ C1] RSP: 0018:ffffc900031df738 EFLAGS: 00000293 [ 355.233711][ C1] RAX: ffffffff897f82b0 RBX: 0000000000000200 RCX: ffff88807eaa9e00 [ 355.233725][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 355.233737][ C1] RBP: ffffc900031df848 R08: ffffffff897f82a6 R09: 0000000000000000 [ 355.233750][ C1] R10: ffff888076e66a00 R11: ffffed100edccd59 R12: 0000000000000000 [ 355.233763][ C1] R13: ffff888076e66a00 R14: 0000000000000200 R15: ffff88806c264c00 [ 355.233776][ C1] FS: 00007f0281a19380(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 355.233793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.233805][ C1] CR2: 00000000200004c0 CR3: 0000000033536000 CR4: 00000000003506f0 [ 355.233822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.233833][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.233845][ C1] Call Trace: [ 355.233851][ C1] [ 355.233858][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 355.233883][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.233914][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.233938][ C1] ? nmi_handle+0x2a/0x5a0 [ 355.233966][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 355.233989][ C1] ? nmi_handle+0x14f/0x5a0 [ 355.234006][ C1] ? nmi_handle+0x2a/0x5a0 [ 355.234025][ C1] ? __build_skb_around+0x6d/0x3d0 [ 355.234045][ C1] ? default_do_nmi+0x63/0x160 [ 355.234069][ C1] ? exc_nmi+0x123/0x1f0 [ 355.234092][ C1] ? end_repeat_nmi+0xf/0x53 [ 355.234120][ C1] ? __build_skb_around+0x26/0x3d0 [ 355.234139][ C1] ? __build_skb_around+0x30/0x3d0 [ 355.234160][ C1] ? __build_skb_around+0x6d/0x3d0 [ 355.234182][ C1] ? __build_skb_around+0x6d/0x3d0 [ 355.234203][ C1] ? __build_skb_around+0x6d/0x3d0 [ 355.234224][ C1] [ 355.234230][ C1] [ 355.234240][ C1] __alloc_skb+0x23f/0x440 [ 355.234264][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 355.234291][ C1] alloc_skb_with_frags+0xc3/0x770 [ 355.234324][ C1] sock_alloc_send_pskb+0x91a/0xa60 [ 355.234361][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 355.234391][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 355.234419][ C1] unix_dgram_sendmsg+0x6d3/0x1f80 [ 355.234452][ C1] ? aa_sk_perm+0x96d/0xab0 [ 355.234476][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 355.234493][ C1] ? aa_get_newest_label+0xff/0x6f0 [ 355.234515][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 355.234536][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 355.234560][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 355.234587][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 355.234604][ C1] __sock_sendmsg+0x221/0x270 [ 355.234634][ C1] __sys_sendto+0x3a4/0x4f0 [ 355.234654][ C1] ? bpf_lsm_capable+0x9/0x10 [ 355.234677][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 355.234714][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.234742][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.234771][ C1] __x64_sys_sendto+0xde/0x100 [ 355.234795][ C1] do_syscall_64+0xf3/0x230 [ 355.234813][ C1] ? clear_bhb_loop+0x35/0x90 [ 355.234839][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.234862][ C1] RIP: 0033:0x7f0281b7b9b5 [ 355.234876][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 355.234891][ C1] RSP: 002b:00007ffe39434868 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 355.234909][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0281b7b9b5 [ 355.234922][ C1] RDX: 000000000000004d RSI: 0000556aca0983c0 RDI: 0000000000000003 [ 355.234934][ C1] RBP: 0000556aca092910 R08: 0000000000000000 R09: 0000000000000000 [ 355.234946][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 355.234957][ C1] R13: 00007f0281d09212 R14: 00007ffe39434968 R15: 0000000000000000 [ 355.234981][ C1] [ 355.252586][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 355.252608][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00104-g7052622fccb1 #0 [ 355.252633][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 355.252646][ T30] Call Trace: [ 355.252656][ T30] [ 355.252665][ T30] dump_stack_lvl+0x241/0x360 [ 355.252700][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.252724][ T30] ? __pfx__printk+0x10/0x10 [ 355.252742][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.252781][ T30] ? vscnprintf+0x5d/0x90 [ 355.252810][ T30] panic+0x349/0x860 [ 355.252834][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.252863][ T30] ? __pfx_panic+0x10/0x10 [ 355.252882][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 355.252908][ T30] ? __irq_work_queue_local+0x137/0x410 [ 355.252940][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 355.252981][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.253010][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 355.253044][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 355.253078][ T30] watchdog+0x1033/0x1040 [ 355.253112][ T30] ? watchdog+0x1ea/0x1040 [ 355.253168][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.253227][ T30] kthread+0x2f0/0x390 [ 355.253250][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.253282][ T30] ? __pfx_kthread+0x10/0x10 [ 355.253306][ T30] ret_from_fork+0x4b/0x80 [ 355.253339][ T30] ? __pfx_kthread+0x10/0x10 [ 355.253363][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.253417][ T30] [ 355.262418][ T30] Kernel Offset: disabled [ 355.816045][ T30] Rebooting in 86400 seconds..