last executing test programs: 54.447460879s ago: executing program 0 (id=1336): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000104000000000000000000001fb2", @ANYRES32=r2, @ANYBLOB="0000000000000000180012800b000100697036746e6c000008000280040013"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES8=r3, @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002"], 0x60}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x800) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$802154_dgram(r4, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80008c4}, 0x203b896ae1dcc215) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7]}, 0x90) listen(r6, 0x81) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 54.069646831s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 43.677767303s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 31.351492961s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 18.189479401s ago: executing program 1 (id=1657): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x4, 0x4}, 0x48) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) writev(0xffffffffffffffff, &(0x7f0000002bc0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f00000031c0)={&(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000003180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}], 0x18}, 0x24000040) sendfile(r1, r0, 0x0, 0xffefffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100039040000008000000000000003e4ee5e00b57b8705c6a421ed778c097252a17ee0e36353b78e36d83c67485cefcb7ffc5911909d905204088a9739ab92cf37249babf066f6d577a15e58121158ec99ff10a6aaea00506653a58e7d48eaa629931d219479cebb38ea611763f8bf1ba437346653cc142ccf9c", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f00a9a70000"], 0x38}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20080040}, 0x51) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x4, 0x4}, 0x48) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000002bc0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) (async) sendmsg$inet(r2, &(0x7f00000031c0)={&(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000003180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}], 0x18}, 0x24000040) (async) sendfile(r1, r0, 0x0, 0xffefffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100039040000008000000000000003e4ee5e00b57b8705c6a421ed778c097252a17ee0e36353b78e36d83c67485cefcb7ffc5911909d905204088a9739ab92cf37249babf066f6d577a15e58121158ec99ff10a6aaea00506653a58e7d48eaa629931d219479cebb38ea611763f8bf1ba437346653cc142ccf9c", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f00a9a70000"], 0x38}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20080040}, 0x51) (async) 18.011953501s ago: executing program 1 (id=1660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x70010000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) getsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="b5a398fbbc47aa79eff101c1c1ff88baaa77ac77cb8f322de8425c72936978188b0beb30bd54bac35fdcdc05808c02db59095131a5d09cddf7682d0670d5eb0c6c103abfad93cb0b8500", 0x4a, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000380)=0x14) write$binfmt_script(r6, &(0x7f0000020240), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x19d1e000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x7000) r7 = socket(0x10, 0x803, 0x0) getsockopt$inet6_int(r7, 0x29, 0x6c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockname$packet(r7, 0x0, &(0x7f0000000200)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x12, 0x8, 0x2}, 0x48) 17.748363306s ago: executing program 1 (id=1665): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), 0x0}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="dedda6eb6cdd2a86831204d06a89842a6884b8b83038b9948d47b8b023ebd833709bdab366cd01823cbb93dbaa4b2151785faac1f21a87fe75404bb592bdc1558198b24825cf444a706c49734bc041522d00000000000000"], 0x44}}, 0x0) (async, rerun: 64) r11 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000000)=r13, 0x4) (async, rerun: 32) sendmsg$nl_netfilter(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000000006010400000000a37b37fa0000"], 0x14}}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r14, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4880) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@deltaction={0x1d8, 0x31, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde19}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c03}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200000}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x1d8}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0xc95, 0x2}) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x6) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 17.549620445s ago: executing program 1 (id=1669): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77"], 0xfdef) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) close(r4) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66) (async) unshare(0x6020400) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x0, 0x0) (async) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r7, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x95, 0x0, &(0x7f00000000c0)) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x6, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x8, 0x4}}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_newaddrlabel={0x78, 0x48, 0x4, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, r10, 0x7ff}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17.058112952s ago: executing program 1 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x48) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x48) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) splice(r0, &(0x7f0000000000)=0xaf14, r1, &(0x7f0000000040)=0x4, 0xd, 0x4) 17.057036925s ago: executing program 1 (id=1675): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000040ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d3e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c47365e78c80854b2baf8eb320d8c34cfc81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6afd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d0504f1ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f415f6ac8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2f600000000000000e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83f869fbb866c57567826efc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d58710d1febe7394cf8b02f59dab24d07db3d3c1ebff5244f438b3d6d15a30ec32aadb3cfa1c2f7dac7c5937c14702a3a0702b53115c163eb91275aedd6ad46b49b100208e73bb2c57068664f8ffd34bc8708faadd12d80875d7f1c0d9cd1ddd292e1efe9780c02487a38a688dfc173fac71249cdee0fc53336ede131253606067e3dd22f2e5db2b9d570b1fb3f3add20b3a02caf5721868b642a2e5cf40a03c49b8fe89fa6b7b4a823104f2314d37e7de67b719bf3aba1273a974f38f7c82d4fa14aa12599ad6ae5197c3c0040e5beb587d917992168e412403cf568acf630927e005b9a75"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000007000000050000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x278, 0x111, 0x4b4, 0x278, 0xd4feffff, 0x3b0, 0x20a, 0x278, 0x3b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [], @ipv4=@multicast1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [], @ipv6=@private2}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv4=@broadcast}], 0xf}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x14b2f, 0x0, 0x0, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bab250709f46abd5bde532173c6746623ee609e386a0905c3ef0f3051738"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "42af38373b2bb974dd67f521871d8c6ad5c0e276a00490f7b3ea10d1ab53d056", "542624a813fba13acf45da06c66dd165b80accc02ce75e5a546c063d21029bab", "e4ff2faa20a5a92e879585627e1c957a860371a33e59bf3f76c14dd6cac7e113", "1e3b84c48f5b5d99b6232e69de257a149457356deb89a1f6e560c445a9c75d5f", "b04164146855f1a0388161aea3693e3b98f3e2ebd53dd48034ee1c9c37b2fdb2", "bdc117210a993ea550d89f39", 0x294, 0xffffffff, 0x400, 0x1, 0x3}}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r8 = getpid() r9 = getuid() r10 = gettid() r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000080)=0xfffffffffffffc3d) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="240000002e0001000000000000000000080040003bdfdb54ba6405ac4cf6de08ad08d480aa46381f2bcb32fe3b18b701bf3b6d0dd2ff2e68c54f8550b09836b2c18791976917de48ee", @ANYRES32=r12, @ANYBLOB="0400008008000000", @ANYRES32, @ANYBLOB], 0x24}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="233b1ce65c3f6e0f24e0d828cc87702db59b51497be41a9cabf6a3ed9cccbf9f4adb4f5868cfc36cbe17b38625cf438cb89b3bdcba77958ff25c34e8768ea63fc5ecb5f4a926585e0f4919647f100dc6505c9e5d54e88aac33d80aaad6404e2886", 0x61}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r11, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r5, r4, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x110, 0x800}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000780)="b8ef35018582e4337a4e8980069416d18697d3179a41a5e2566fdeb2ae4bd1ecf62697fa2d0f539e9402d4eb78c33340e29b9f63466f1725a6301ab3c7d33ccc0f84c7b89ab29bd1a0c357274c4bd633cb3ef6664a8039367f87bbd21d862a416e1b82dadd29d99560e1bce8d25019cf7e09c309048d7816f0e0c3d1c290c5e6ff0e643a13", 0x85}, {&(0x7f0000000840)="e2472360215ce35ea8f268451bcc1645f6b20bfc90918cadcf52f7a252441ff69eb682ce722d0e2f7f9910a1f7db323b354e5b95bc908a885cbae317ff31800b91d9cd5612571d3225eaf16dad17f7f39a1cbf7ac44e79de49bd3a2196240efcecaafea77ed8e3a98cde82f0832b64713a12e4345eb0545698229e58b6434b24dd6c60a4c95116649e88815ab0db1156728ef22c63231095d2bd16bc6e95435f83de697b828c93f979859c5dd82fa4d7866380ec979bab07a776b8dc8d306a03a4e084638543e2f960fb40f0151a559cc67457d91a7b9c7c0c7397091901f9590299b5a0", 0xe4}, {&(0x7f0000000f00)="e4db584f91fcc5d05977527302499c4e7f454e74704678858e6f2b32f6dc513046273413a11d3d4c960b17e165e0b61425e7cf976d3ca2c53ec2503826b49bdc8eaae00efdbdf6186d955e53cef7b07ea37bc1bf4f702d75b99763dcd8d904d6791acdc98610b17c43", 0x69}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYBLOB="370216dd2139b382e7aeca3def4cb040f9112e1411985c1dc51ac14242f357f21e615368006a91a3f8e6756a89816ad0e0495b4365ae98b462eef4b46eaf2ccd4cccd111eff2935a330f31251ecc2becb8708b17b9bada90429ae563168572e57917149ffc35d8d2", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40000}}], 0x2, 0x24008050) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000740)="53bae3289f3c49266a62ff861f0ee135727d8b8c9eccfd9c26221846b22e5e53a7c6a3dfde45e47149627eb589000052687ba55fc9b7fd000b17d9312606f3ae964063ed99f97723318187449bf65c076509e6d6b699e6034a5700d25c73017d24ae2688a2b851dfc1eb927a7b53b1cca2d8cec3a76ca3ff3a19b7b19c2c2415902ea6af19f5744cf726ce19feeaf13b3b07b9e0e11155a4d337324f5a172c1daa6be168de0342151a6fe1cbfd905d16763e62391205be43c53085d686", 0xbd}, {&(0x7f0000000800)="7b70ea7db0b306af2b9f41484c2c83d74fb78e94e696cfc7d63d29f0fb1f23ee306e1b371398125947665c7a558695ca55e0071179f6590dbcbfb4de0723d80703d0ab447c15ae1d13d22662c56b6f37e1d6712b0fe9d90d6bdab700fb0cad4a35cba67c32a4a17d71979406582d6bbb19489cb6e4179675484a5c59904c68ddbc707f0f8a0586ef5f1f76c1c182b8f773cf704c05768e2d4e5161ed445d2efac983673e2cc87172c232598c0778cc772a35fd0195499e1a77764a64c3a2f10c12fc7679b0ef92c1ac8bb823673670e463acab047a87e9ea477ccdce15c2b1d4f438bb5f", 0xe4}, {&(0x7f0000000900)="7f13ed7e9dad286e764e7527de0d6fafc81b8fa1a45972e58972550cd9b123f48954078886962d5ab20420d95e18513062118b4f271fc98db4e8ff0ee9b14add512da3b5957df82eeb4827667eda938872958a7ce842b93d37cf3142b8adc131045adf12d1841d437e37a37955d036440588c7c3d9ff8882cb1580cbded292b34a5957a78ee639619761cbc1946802b80a8e724e5c3ac8cbe171f751f10ba31403a77b09499e778ada9de196c56f2134c80a49d601f909400cb157f710894e9cf8904e", 0xc3}, {&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000b00)="6d684022e3238206f9635c08d3474ed38da96fc96c1ed041aaaca7d52f29e1d0392620e5bcda83f9f3ddef0332d84ebc21cda2b1c907c7e646b79d4ebe4f477e61e25258d594149fbc8c20f86ccdbd05c5f36d939945193c3a6a195b40319fc754de26cfc8227694133479c6e8fe12cebee8175084d8bbc9a2d815d0ba5a2f1f5b23a0a6978daf4a793d77e6a455aeba11c2e6f8017701a084bd86", 0x9b}, {&(0x7f0000000bc0)="fea0381c1f654e", 0x7}, {&(0x7f0000000c00)="b431e4c432831bafec5e284209820b1b78b2f459fdbd664cc6d2df06dec87f3a7c3939f7fbf4f02fd9933847d1908dc6fc52f2862c3d19c59cdcf570b96dfbdd68b5eef18becd22f5d200762520330b68c19690bafd52dde2eaff4b631249ff6491f23c60f5e09ab24f03456a3af015598adadb5607ad5350dee41d1952db2394363b735477e851b99050792dc0ecc8f9c07e1967f3b21ec33aba84092", 0x9d}], 0x7, &(0x7f0000000e80)=[@cred={{0x1c}}], 0x20, 0x8040}, 0x10) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05caf3bad6"], 0x4) socket$inet(0x2, 0x4, 0x9) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r16, @ANYBLOB="0a003400020202020202000005000800000000000800350006020000040028000a0006000802110000010000080026006c090000"], 0x50}}, 0x2c040040) 17.026969071s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.839152477s ago: executing program 2 (id=1729): r0 = socket(0x10, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) write(r1, &(0x7f0000000000)="95ec22e334bb01ed58ae03a8d999f8dd63ab16d859c869fac10c9c22a44dec88c7bd8e84ead83eb54287789b81e2607bfed799230c7a90ad19fa7cfd8dca4e6886707752dd3ee5b452ad310f3d281d30774e4d155923e1fca2520b26f73b39d3ba1d563ad37ecaaa57fc30789adf24ee6c95b43836ce2c17e5f00c254b196ef50fc7f50a43bb4c3cb2fe2795468adf99e4436ec2abc4249187b6bd86960c8df145a731d17301c3", 0xa7) 5.712492549s ago: executing program 2 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000004070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002100002800c00028008000180000000000500064088000000140000001000010000000000000000000084000a"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfd9b}, 0x48) 5.521621596s ago: executing program 2 (id=1733): r0 = socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x3f7, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x48, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}}, 0x6840) r4 = socket(0xa, 0x3, 0x3a) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa14000600", @ANYRESHEX=0x0], 0x54}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2) 5.382863039s ago: executing program 2 (id=1735): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x2, 0x3}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c000008000200", @ANYRES32=r3], 0x1c}}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) r5 = getuid() r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x6ac, 0x2c, 0x18, 0x70bd27, 0x25dfdbfd, {0x5}, [@nested={0x16e, 0x101, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @pid=r3}, @typed={0x8, 0xba, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x10c, 0x0, 0x0, @uid=r5}, @generic="bf6929c5ccdfe030d177a2f2c8109146d4583edd445a65c116b775a517249a62cbb78c7ec7be386b3967197f8e95d6c3bdcdab99f373f9b68c91710c5a068f4b5c531d06429f182b6b263e26f36b79df6253a28b891ca428d79cd2973c46d9731cfb2469dd9dcb06294322d17052638989ab598c7bae4936fd4283d80696b1992688f1acfc3d56518812984dc41019f34a9089062b9f70a0ca6f3fe77257d2eb75ef59419a51953590d9d6ca050e573ee6fb0ca250292ea6debf4f4a97bc2d37e94408efa88ece3cb09287e4587500a4e4d2f84cdb4431cfa055fb8d5a3efdc9cecff1", @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@mcast2}, @generic="2795f2de54711403cf8b270fe8a967baafd8f3964fd9b8e40d50d39c995295b37afc7d8d8ae2b0f29ebbbfae021af16fecfd98493d1e35ed5a2ebbe5ea756fbb2a5987b80b505f36da01caf95f69dc2202246b83db2ef292442723"]}, @nested={0x149, 0x133, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @u32=0x6}, @typed={0x3d, 0xc0, 0x0, 0x0, @binary="e8b1e014974d1882851eada99ea4267f708c9c69a66073befa4842d2e9a7f4c93d1ee150c033a3ed6851a6edf48f47976c42cff0ceb2eef922"}, @generic="e2f0856e6f782deb0365473a0b8c23402d115568961cd5bd6eedee896f77953d58a2d6bf2b4a92f0243dbc090073cf90241b32f9405ce5efe11ae938f7864263d264cb8c79062c4467da3209febc411f55f1ab2083a408e5bc55850b008e31739ffb321899bef1c430f5d2ab0ceb28e4e2ec0dabeb133f5bc00051a129a92fa5bf96dea0a57588e33f56d91b05570bf6d2802b2df596f200a95614c2993667403014571dfcd651ad51e94e459e9a36a3101d83e3b9562a3beed66fb609b187a34e25d52a0fcb6e5cce26d12422e4db3894b87646b6d7541bc41b7891a7602a36978cca932cb503b490c53ce75bfd55cd33f0308a5a", @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8f, 0x10e, 0x0, 0x0, @binary="18b360d7d1f801d94590e1f584428a66c30618eb1a30435eae1aea2be0c100a7d5a567e7d81f9422792b685c7aa03e3ed00b8e8acc2cd1d54923b43ace2d171b399d69dae4b8ed2850092a5b37a49b006e9f88674dbb8e4ceeabfe13d93d3fc4fb8354a7183ea3c4bd7dd017dcdb8c7edf70474ca9b5e20f4cb7f7fddaaa3cbeec99aa596a6058b07a670c"}, @generic="26f14030c4211a0f92ff7b7c480f5bd680ee10010927244aea3ce4f91896b3319bff34d65811eaeaf0f16026f5af20ec8b430b186afa2941b89b41df4d3d62f09f09d57c91d81f15248555b4aa8496b973babd2570dd2636f683a74b876a8088061840e13edf1db1a21ce2df37f04be920a4112b4ca692b8784d785bafa65d73c993746f1f11835f633d8a9329680ad650a381927ba30159f65cbc1587b6cae5f387b7a80cc2828bcbd1565009e8d6ab12da7f587e1acaf76535da341522f90bbe0bd85212a4f18d974436e85be5c812c4081f84", @generic="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", @generic="e9816f8dc87873c1a9cf2aaf234fc78227162408162f8b164f3dceb91b9e87cda7f26ad60171c9eb3cbc289d35b47a63eee7de70be1c9a3847ac8c920add4cbff5c9b508a8afcbb8bbe277e79530728597896ea9773e4872b732aab1b1c572b78bd5ea3372245ba1dce8e78bf0a02a25ff89e33a6bc54514870762249749d951c7a18c8f4acd85e71836d35cfdc28e8aa11475a463679c77c134992292c0bb9b68194c693539d7355c179d41c02aa7f664bde5807f1b4388c8cbb5ca641dd6c3ea2d54cb7cbd9999d8da20bf8ddc24e34ff9242da98f6e551973515e083f13bd662b4a3d294024eadef0d3", @nested={0x75, 0x110, 0x0, 0x1, [@typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xc7, 0x0, 0x0, @str='/{:\x00'}, @generic="fb43c4866127600a5973c4c0260b5a9f964f97a8f5b3cf455b531db8a5d33f944305b865e51c813d4d8d0eebf1039594cb7feb966bb8a86ebf74bfdb34e5b8e0d889742aa35cf33ab9055dbbbe1e900c3bef526f34"]}, @nested={0xc, 0x47, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid=r6}]}, @typed={0x4, 0xf2}, @typed={0x8, 0x4f, 0x0, 0x0, @pid}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 5.172339145s ago: executing program 2 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x59, 0x5}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x82}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x65}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0xe4}}, 0x4485d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000440) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltclass={0x5c, 0x29, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xc, 0x3}, {0x1, 0xd}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_tbf={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000500)={0x9, {{0xa, 0x4e22, 0x1, @remote, 0xe45}}}, 0x88) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x75}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x30}}, 0x4000000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000740)={r4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x2, 0x15, 0x6, 0x2, 0x5, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x6c, 0xa0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x28}}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r4, &(0x7f0000000840)="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", &(0x7f0000000940)=@buf="c6c25aa91eda431d237a480fca13453a8c3b27dda01612ce8ce236946aac01cab91a71668b8c5e80747e9aabc51b4df8c38becd040", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r4}, 0x20) sendto$rose(r5, &(0x7f0000000a80)="7da21aab2477b10dbd6eefe57a3aebdbea1cf403425e0c7a398e465957ccc6e49c3fb991208562620755a1e16df4f981dfa6bbd3d9b7edd70a33edb6e586b208755c58dc5b149624ec7c0caa", 0x4c, 0x440c4, &(0x7f0000000b00)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000000b40)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000b80)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x10}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r0) sendto$l2tp(r4, &(0x7f0000000d40)="d1df6160cab234e9ccbeaabf33f30e51feaee35e22512bf7792b292c4d9cfdd9d9be68a5c1a40997b1c15a86ec7ef0fcd376990a1ce91640e4cf29f949924649a5a1c1a514d8b02d007aaa1c650db168d3bb77c8c3c799648f451d", 0x5b, 0x4800, &(0x7f0000000dc0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000e00)={0x10000006}) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000e40)={0xa, [0x8, 0x63db], 0x4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x26, &(0x7f0000000ec0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0x5, 0x7, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x6, 0x9, 0x0, 0xff81, 0x3ff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], &(0x7f0000001000)='GPL\x00', 0xfff, 0x1000, &(0x7f0000001040)=""/4096, 0x41100, 0x60, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002040)={0x2, 0x2, 0x8, 0xe7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002080)=[r4, r7, r5, r7], &(0x7f00000020c0)=[{0x5, 0x2, 0x4, 0x3}, {0x5, 0x2, 0x5, 0x9}], 0x10, 0x6}, 0x90) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x4c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) bind$alg(r5, &(0x7f0000002300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) 4.957734124s ago: executing program 2 (id=1739): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0xe0}}, 0x81) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/179, &(0x7f0000000080)=0xfffffe89) 2.679467758s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.658523377s ago: executing program 4 (id=1755): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) bind$l2tp(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0xfffffffd, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}}, 0x80) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c0000a41c7b43cc660e72b6965424f32074", @ANYRES16=r8, @ANYBLOB="00022bbd7000ffdbdf2502000000080002000700000008000300bb0e000008000200030000000400040008000200050000000800030009000000180004004d0f0000000000009c0c0000ff0700000050000014000400ad0c0000cf0200000300000000100000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c960) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x30, 0x0, 0x731, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c10}, 0x800) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.37247709s ago: executing program 4 (id=1756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000004580)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="55f9bea3c450ee00c1795ca7537f4a5ce6261fb513edb98c6de97693dc898e3ff617e787c0d5104233fee1e2870dbb7524642773792c0e91f653f59f594d0461d78bfae00527de14690455ccaed23f6b82c91e4c87cc249fcd6a74d4788acdf318519c5c3dd3571fcdf128446e8e63ac277ff741d55ff6461d8e85e7364d8e71c9e9ba9ac0c2a820c45a9119a15281af05ea29ecef34598af3f0308df5030a0cc9598a4497121534189338e047aeb38f535a9fa78b092b5d334b5b26797c49f05455af805396110eb0cbcdce4b22408c3d6f84f7d4910399", 0xd8}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}], 0x3, 0x0, 0x0, 0x20000004}], 0x1, 0xc041) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/93, 0x5d}], 0x2}, 0x2040) 1.325549903s ago: executing program 3 (id=1696): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x101, 0xfffffffb, 0x34, 0x6, 0x7}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600840, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x8, 0x65, 0x0, 0x4f69}, {0xfda, 0x2, 0x81, 0x30000000}, {0x3, 0x7f, 0x0, 0x37ae}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x800) getsockname$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10) r5 = gettid() r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='spi_set_cs\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, r6, 0x0, 0x2, &(0x7f00000003c0)=']\x00'}, 0x30) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c7d05a590"}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "e210b757b328b250c774d1da8c68"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7cb066fb4f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "21834b2d41"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d39cfab731a6fe41d71b4adb50"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x48044}, 0x8001) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2) r8 = accept$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000780)=0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000800)=0x6, 0x4) close(r10) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000003340)=0x0, &(0x7f0000003380)=0x4) sendmmsg$inet(r2, &(0x7f0000003400)=[{{&(0x7f0000000840)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000880)="9881e0ab495b43fe57abc94c74a3105c7449972cc37b95a46164df64d2cd7ee5b5d5d2ebd1eb7d663946fdab7883a8dbf3f0a179ac8e59dfde5b58e31d061fb54fda9d7c80693bcc134f2c7727af82082470ea2cb9f1c2cf11e9dc4008318cebb0f0d47d28c1fd1ef979ddf44e9cf2d1f2f4b0a5ce8713e5f771c25c1635f40bf63a60feff80d9ebf92bc7da411d99301cd12015d141413bad1a619504dfcccb", 0xa0}, {&(0x7f0000000940)="80f86b21649eaa9a71cdb0e8e400caae30e77c9ed78c1cfe98a7ee20cb57074757518fa496266592e06c9463c5576922c03245a04f87fa357bdc2565c8da70f16ba17d6fc62bf1d9f5f7b962142d0755ec8d5ca89e32a765f9de68572a06f11d658b3a24d32aa67ed9b83b09da4d1774022f948885d95687f3601ebfa10e988f6d5c353a784d4352e95d9e62756a64ed88b96c49d4bef1a5d16dd6f97c70c29925b67f2a54970f025725f4226a91a01c5315f572b99fd0b448bf511e18253bf5bbc98b05ae69143bac2cc76d", 0xcc}, {&(0x7f0000000a40)="12fe3e101bb3aa1f37c9c2d45e088da081637a7b1be09ceb0a914f5fb1acc5c9e294e69faa85eff539d7e004b30e51f922e45331b6fbaaf00399edb65ea4f6cd8396dc2340af363bd1d98972cedd4a1542e36ea8e09eb35e1936a42ead0ba73f83212cdfa4cc5571bb1e6b736c482f7f88d60ad8ee4c22c85a7703fd5a1ff26b9bfa2c6984916bb4ee0b3ee676c8f304abdd447e0f0b05a71fb11e81416e2b84658b972c6c05225bc3129ec22ca3d0a45562c8", 0xb3}], 0x3, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="613a3725a86508e69b99532e3c3da0e3104e8bad198d00a438f8d12f8bc8c7781f338933c3317754ee226f74f44dfd5314f59f16720d4c5018b139ef81951aecd9c3f776214df9874909ee8d08490b02b7a5ab6c085781e145d55e30ead19b8f1a87290d96686a100699c545b031ce3091b4ad18b52d87840b8f1cd9c697b870ddc2799254c1533fb3e14564c964a596c5d54dca7e13a1eaa3c357e9f19a324ae5ada2a2b6e85e99339c963c", 0xac}, {&(0x7f0000001c40)="070ffdfc9de52bc8ade43adae9a12fbcb4597776c56fc8d81c4553f11331d0dbaf5b13e0de2c880969ac1745c77b8b82", 0x30}], 0x3, &(0x7f0000001cc0)=[@ip_retopts={{0x70, 0x0, 0x7, {[@noop, @cipso={0x86, 0x35, 0x2, [{0x1, 0x4, "ff81"}, {0x6, 0xd, "b26e4fbbcd059c201e81d7"}, {0x1, 0x12, "3c12ea69651852072b7b097f6aa5aa03"}, {0x6, 0xc, "74f51c4218aa25124f90"}]}, @end, @ssrr={0x89, 0x1f, 0xe4, [@rand_addr=0x64010101, @broadcast, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010100, @empty, @loopback]}, @generic={0x7, 0x2}, @lsrr={0x83, 0x7, 0x2a, [@rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff45}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffe00}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x120}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000001e00)="48616e5e86cf1dc3d961dffc8ca4007b7202b39fe27cd29cf681b2a8918bedf3d153d3950cdc3eb70c2745af32bcbe31366c7eaa43cd5a2b6cd1aa743f5f326fb69495509ee2a1f0663d3a96a2a38c425ea745796a68ecfb3592d839c2dbad2677f8826ad4875054c3f770e8d129510503afd598e6d5068ae4b07fc747f437ffb430cb9473c3cc11da215625054cd57950f039c6fd28403ffbd5596609f1ea6de8048aba6f0836ca5e96a5e00cd7b0230570", 0xb2}, {&(0x7f0000001ec0)="b7058980b4647ee104eec6a9ce645341a7f4f4c25413383e5d3abb53cb85a7eb6e409566c6de474aefdf29e13a45d94f2a816f0909a0db670c1cb16a661b1d3b8790e211b511a937bcb5d41170f8d6953f905e1b0c", 0x55}, {&(0x7f0000001f40)="19bfcf4dd77cf5879466862eea6778c1d155314aa294684cfa3100237b8c41c46b5184ab4131950e9e31ff0a4cda27f5978622d6cd3153f80e4c6ecd57746ecb2950cca2017a43f341998a4e0071d62cdeaec073", 0x54}, {&(0x7f0000001fc0)="76074d17c3e3771213ab7ddde22c51fae19af7192de03dc4d9e45b21e1b30ae879c4028f944e5c970d0f70c3810c966c693e127b3d4794784385e4b93281dd2ec67e25", 0x43}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="ea16abc122ae5e126a9333241037353e400a71c2026ee751490f031e45be3bbf3d1b36d57fc227bafde1a6f295fd81e8e2fe41d06096dd5086581b9d4865683efbffbd5a454af413cd3fc0f2f731b6fdbaccbf4c84b361bd42e23ac7b9b01ec7f78d69f554f31a796c613d173594fd9a10bca99b2dde6423f81bf2a099f46648f23956361a092fb3927574b08c1a95cc88e45298d072283de0d0b55118fe5e3a6f3a511495f3ea7db00673528711f2fba6860a2a5022aee15084c3ee4c833eafc3f4499976721adb0e91e3e097897b86648c834340c1e73828cc3b154c6f4a26180aec8a224bf64d380b1a61d660e627835048bc1e2d9a12de36273102", 0xfd}, {&(0x7f0000003140)="32189508c2744bffbf5d934cf1a96b0ce541c9f99a6ce2595cf27001fb8ab1edc28c205a399e076a66b405cbda10a8a2a33bc218345bce78f9fc39a4bf7904f4764914e3480fa479de51cdda20d159bad28b1c0466f79294955bc7cf4b8ddac7a573c96d3620f82b6d0c913e0378a930ba69cc40c8cd5648fd2be63b0d0448a1496c72ef64cabdb4d886a5e400d87bfffdbd00fa92a0769e78f6b38b492b27fecdb5983a1093a919956260bdd68a21ffd8bfda876e3247a19cc62185b6f7fca5f97ec8999595fa5b145e23e7dd008816258305fe7443202bad27d29ec28b73e2d935d2b5481d73", 0xe7}, {&(0x7f0000003240)="fd673911b9041cba47e777fb046795a38dad57bb9a6cbe645f126c164fea130faff23db1c041a930a69e055023870c1d25a308e1e5b2e04131646aed5860a0af9d34030d33573968d8e886d9b7dbf99d5dae4eaa12a39d19840c26308d92aa6aaafa0dabc2e62f0c4877739c52537595260582aacf43", 0x76}], 0x8, &(0x7f00000033c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @rand_addr=0x64010102}}}], 0x38}}], 0x3, 0x20040001) ioctl$sock_netdev_private(r10, 0x89fd, &(0x7f00000034c0)="ee7251ecfbd02a1a6ef451198d41b42f7b89abb302d9de5619b4910c") bind$l2tp6(r0, &(0x7f0000003500)={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x4}, 0x20) r12 = accept$inet6(r8, 0x0, &(0x7f0000003540)) listen(r12, 0x0) socket(0x2b, 0x1, 0x200) 1.173714723s ago: executing program 4 (id=1757): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x80, 0x81}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00"], 0x24}}, 0x0) 1.172294795s ago: executing program 3 (id=1758): r0 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) read(r1, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 1.113957224s ago: executing program 3 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000200"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a3200000000090001"], 0xfc}}, 0x0) 636.60157ms ago: executing program 3 (id=1760): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000400095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 557.297248ms ago: executing program 4 (id=1761): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000ffffffffffa4780081bae2e506c5197060e7dd6001010000081100fe8000000000000000000000c2519986358025026fc7c13f475413000000bbff020000529b24c42c"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r3, &(0x7f0000000480)="45ef43821e849b31e4b46c8eb76fa759e04a89eeeed9296d713102191953fda003a0e46847db02736b376c0ebcda0e367e20f0c382551946b2471dd6520983c622c6cfa93a763c6d5c9b46d1fce030bf7dac3008542bb225cad5dd117e6db954903157172104a132872706f011c75d7fb4136703b2b8fcb26d449804c15fa8285b634d73c1445caca8c2a6a19bdaf4f13d", 0x91, 0x8007, &(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x2c, 0x80, "7ed5476267583a3c756bb25ba63f639a1c61f724bef5fe6358ae15d5b9595dd4a36a5ec8dbfe6f6ebf895b1f2bfa5f034f507ac874a87e089290ebe3ca7c88", 0x2b}, 0x80) sendmmsg$unix(r3, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018000000000000000100000001000000ce708bf22ade6b513b1bb9b0186a6b8a353140c576c3440d73a1aa58f4ea114db514c9c247160b5b74ac8945183748cc34656777a011bb4b5296719a2aea60cba28dbb6a396ad4672656ae2d9b2a628796e5d9e73b18cfeb1169e890ea2f4d5cf38efa2203a8b26983f91bca5556ac3c27e22201909bd9b2dd", @ANYRES32=r2, @ANYRES32], 0x48}}], 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x600}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x3, 0xfffff01c}, {0x6}]}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/373], 0x184}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r9, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="3d5ce95d1a2f0bdfc3a38cd5e853dd44f837085442"}, @NL80211_ATTR_BSS_SELECT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x14, 0x815, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 439.497397ms ago: executing program 3 (id=1762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x344}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x9c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8881}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000a40)={&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000700)="b0c69efbb207b492d38b53cf1375498e8d89ce145487157d867240c72573ab444ecabfcec378926e371882e5056e72ea4c0a412b8e3bf7697f1daa07fefd96aeae684328f240bf30e0b6503aca2975faf1e2eb7d1d46d633cf2f4c58d95062beed4b3192bf0ded7565728c5ddf90da135d04a41c057acb345e55c8c48b8a816d05e42488fb0f578fe7cb8c447953009efb8921536494262bc945e078fcc0e0e20bf7dd24b66f6f85ee505821d65abaa19d8bcbd2320c741a718ede9efd1523feb6459e0ce1524ac5cca590aa517f789d5e07bb7e5fc2da9c84cd5303df8da1aeee3155a8185316c1cd4662b756f45a39f84753ab0f1b2f60a8b23cd840", 0xfd}, {&(0x7f0000000800)="5811b1401e465ca6b6b5acac1a3ef8afdd39724cfec263946e9fed86b523309e16", 0x21}, {&(0x7f0000000840)="e5856030c4b9adf0717d3577fcc83ef9c78c787a3bab1c16b771616d4a3e2bae98061c6e102861024ae643e726fb484587108a1f6d9b0af4a083d8f8769eb3a31a16bcde42df10428da1724fa83ac7859b0a723df3f047ca6b46b61eaecb6015a03b43d627b43e75903f34e49ed4cab96f0c265a94b4e3f6d688bc84846a30b3beae9b40bc41071943da4a20c3430372dced5fa68347ad20d086f189e53680d1ff6ef3064dcb0461d3c0b9f7cbab561fcf433e4cdfd917a3413c4cc1c25e698608ca48b9187af6cf848c1511d3ba1799ae381642fb13a1", 0xd7}, {&(0x7f0000000940)="8736f19b8483b5d34d2b5a354df281456643414955a86e7e8c858bc41044f73dd987be9fb381b013fe1300053d0a7590b0d6f55250222e1eff561dd64e670fe6a051c5fc12572bcf8fb54b3400609455fad9b53e8a2bb62f35cae2caf7dc5619e4f4adc4f7fb4c3ba35eaac06b1e6ae912668145b3082a2f", 0x78}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="28000000000000000100000001000000adc5e89461cb4418a56f9b342724762fff2eb71a474e4f79f875f9766492cd2c359018a6c0a5d4fd134bbb335cb3e8472ad3789cc4dd3f6ff37746d99dfd6695df0dbd41d6561ea4ac740d3594776930020c8e71538dc6443350eec4c26c4fd96780e52d6be0", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5], 0x28, 0x20000841}, 0x1) 298.985949ms ago: executing program 4 (id=1763): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r0, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x47}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x9, 0x1, '^'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r4, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r0, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x47}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r5, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x9, 0x1, '^'}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r4, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) (async) 1.671011ms ago: executing program 3 (id=1764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000002640)=""/216, 0xd8}, {&(0x7f0000002740)=""/195, 0xc3}], 0x8}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) (async, rerun: 64) listen(r3, 0x0) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000040)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)=ANY=[@ANYBLOB="38000000010a0103000000000000cfd3d8c3d27b8046ef8800000200"], 0x38}}, 0x40050) 0s ago: executing program 4 (id=1765): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x78}}, 0x1c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x22, &(0x7f0000000040)=0x1, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.113'. [ 70.180787][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 70.304615][ T5725] netlink: 'syz.4.116': attribute type 2 has an invalid length. [ 70.345759][ T5725] Cannot find add_set index 0 as target [ 70.586818][ T5739] x_tables: unsorted entry at hook 3 [ 70.644122][ T5692] TCP: out of memory -- consider tuning tcp_mem [ 71.263170][ T5772] Cannot find add_set index 0 as target [ 71.476851][ T5780] sctp: [Deprecated]: syz.4.132 (pid 5780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.476851][ T5780] Use struct sctp_sack_info instead [ 71.548263][ T5791] xt_policy: too many policy elements [ 71.735815][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.742523][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.117378][ T5820] ipip0: entered promiscuous mode [ 72.730519][ T5855] tap0: tun_chr_ioctl cmd 1074025681 [ 72.795296][ T5863] netlink: 'syz.2.152': attribute type 29 has an invalid length. [ 72.862929][ T5858] netlink: 'syz.2.152': attribute type 29 has an invalid length. [ 73.095700][ T5877] __nla_validate_parse: 10 callbacks suppressed [ 73.095720][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 73.160153][ T5879] tipc: Started in network mode [ 73.168536][ T5879] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 73.203931][ T5879] tipc: Enabling of bearer rejected, failed to enable media [ 73.281536][ T5880] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.319075][ T5888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.159'. [ 73.400391][ T5894] netlink: 'syz.0.162': attribute type 7 has an invalid length. [ 73.418661][ T5894] netlink: 140 bytes leftover after parsing attributes in process `syz.0.162'. [ 73.454499][ T5895] ip6gre1: entered allmulticast mode [ 73.513983][ T5895] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.523470][ T5895] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.532587][ T5895] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.541740][ T5895] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.598775][ T5895] vxlan0: entered promiscuous mode [ 73.614198][ T5895] vxlan0: entered allmulticast mode [ 73.633523][ T5895] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.642970][ T5895] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.656377][ T5895] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.667983][ T5895] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.752005][ T5901] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 73.760857][ T5898] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.162'. [ 73.799221][ T5907] netlink: 'syz.4.164': attribute type 7 has an invalid length. [ 73.808097][ T5907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.164'. [ 73.871818][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 73.881215][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 73.884757][ T5901] bond1: entered promiscuous mode [ 73.955206][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 73.966295][ T5910] bond1: left promiscuous mode [ 73.972687][ T5910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.980705][ T5915] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 74.096170][ T5915] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 74.113946][ T5918] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 74.141542][ T5918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.367355][ T5931] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 75.333743][ T5982] ip6tnl0: entered promiscuous mode [ 75.358533][ T5982] vlan2: entered promiscuous mode [ 75.394417][ T5982] ip6tnl0: left promiscuous mode [ 75.438093][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.189'. [ 75.466550][ T5993] netlink: 192 bytes leftover after parsing attributes in process `syz.3.185'. [ 76.079938][ T6019] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 76.360219][ T6032] xt_hashlimit: max too large, truncated to 1048576 [ 76.503888][ T6037] netlink: 25 bytes leftover after parsing attributes in process `syz.1.201'. [ 76.872626][ T941] cfg80211: failed to load regulatory.db [ 77.276660][ T6073] pimreg: entered allmulticast mode [ 77.768967][ T6086] bridge1: entered promiscuous mode [ 77.774429][ T6086] bridge1: entered allmulticast mode [ 77.790635][ T6086] team0: Port device bridge1 added [ 78.059644][ T6093] netlink: 'syz.4.216': attribute type 29 has an invalid length. [ 78.608299][ T6120] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 78.636887][ T6120] __nla_validate_parse: 4 callbacks suppressed [ 78.636903][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 78.655382][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.677885][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.706671][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 78.764292][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.781808][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.074026][ T6148] xt_hashlimit: invalid rate [ 79.122041][ T6152] batadv0: entered promiscuous mode [ 79.354947][ T6151] "syz.4.233" (6151) uses obsolete ecb(arc4) skcipher [ 79.496256][ T6169] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.237'. [ 79.508050][ T6177] raw_sendmsg: syz.1.239 forgot to set AF_INET. Fix it! [ 79.755873][ T11] tipc: Subscription rejected, illegal request [ 79.911961][ T6197] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 79.942327][ T6202] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 79.981711][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 80.008782][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 80.032287][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 80.257745][ T6210] x_tables: duplicate underflow at hook 2 [ 80.321363][ T6210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.579061][ T6221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.251'. [ 80.600873][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 80.836987][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 81.017066][ T6234] netlink: 64 bytes leftover after parsing attributes in process `syz.3.255'. [ 81.233478][ T6245] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.524505][ T6259] pimreg: entered allmulticast mode [ 81.751771][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.771654][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.778909][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.249734][ T6303] IPv6: NLM_F_REPLACE set, but no existing node found! [ 82.338921][ T6313] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 82.373029][ T6313] netlink: 'syz.4.275': attribute type 11 has an invalid length. [ 82.601597][ T6329] syzkaller1: entered promiscuous mode [ 82.607133][ T6329] syzkaller1: entered allmulticast mode [ 82.663367][ T6333] netlink: 'syz.1.280': attribute type 13 has an invalid length. [ 82.681676][ T6333] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 83.008970][ T6355] netlink: 'syz.1.282': attribute type 3 has an invalid length. [ 83.101240][ T6362] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 83.736307][ T6393] __nla_validate_parse: 21 callbacks suppressed [ 83.736325][ T6393] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.293'. [ 83.798851][ T6393] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.293'. [ 84.097675][ T6407] bridge2: entered promiscuous mode [ 84.576178][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 84.777944][ T6441] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 84.806789][ T6441] bridge0: port 3(team0) entered blocking state [ 84.816244][ T6441] bridge0: port 3(team0) entered disabled state [ 84.837405][ T6441] team0: entered allmulticast mode [ 84.853311][ T6441] team_slave_0: entered allmulticast mode [ 84.873284][ T6441] team_slave_1: entered allmulticast mode [ 84.894672][ T6441] team0: entered promiscuous mode [ 84.926862][ T6441] team_slave_0: entered promiscuous mode [ 84.943798][ T6441] team_slave_1: entered promiscuous mode [ 84.965701][ T6441] bridge0: port 3(team0) entered blocking state [ 84.972160][ T6441] bridge0: port 3(team0) entered forwarding state [ 84.993025][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 85.152518][ T6461] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 85.164324][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.194273][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.229453][ T6461] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 85.251473][ T6462] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 85.561387][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 85.874730][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.910352][ T6491] netlink: 'syz.2.322': attribute type 3 has an invalid length. [ 85.918511][ T6491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.322'. [ 86.153810][ T6507] netlink: 168 bytes leftover after parsing attributes in process `syz.3.327'. [ 86.229080][ T6513] netlink: 'syz.4.328': attribute type 3 has an invalid length. [ 86.253726][ T6513] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.328'. [ 86.284547][ T6515] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 86.319158][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 86.360517][ T6515] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 86.956396][ T6552] netlink: 'syz.0.342': attribute type 16 has an invalid length. [ 86.968634][ T6552] netlink: 'syz.0.342': attribute type 17 has an invalid length. [ 86.992435][ T6554] Bluetooth: hci3: unsupported parameter 64512 [ 87.010933][ T6554] Bluetooth: hci3: unsupported parameter 64 [ 87.016880][ T6554] Bluetooth: hci3: unsupported parameter 64512 [ 87.032515][ T6554] Bluetooth: hci3: unsupported parameter 64 [ 87.194753][ T6563] netlink: 'syz.1.346': attribute type 27 has an invalid length. [ 87.216129][ T6565] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.347'. [ 87.443785][ T6573] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 87.466819][ T6573] team0: Cannot enslave team device to itself [ 87.721030][ T6588] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 87.798020][ T6593] ebt_among: src integrity fail: 30a [ 88.670905][ T6646] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 89.183692][ T6672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.191006][ T6672] IPv6: NLM_F_CREATE should be set when creating new route [ 89.247346][ T6674] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 89.504454][ T6688] __nla_validate_parse: 3 callbacks suppressed [ 89.504473][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.577743][ T6688] bond2: entered promiscuous mode [ 89.584562][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 89.621761][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 89.659678][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.753032][ T6688] bond2 (unregistering): Released all slaves [ 90.607769][ T6741] validate_nla: 1 callbacks suppressed [ 90.607787][ T6741] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 90.662971][ T6741] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.402'. [ 90.761130][ T6744] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 90.768562][ T5246] Bluetooth: hci3: command 0x1407 tx timeout [ 90.777588][ T5252] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 90.870311][ T6751] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 90.916103][ T6744] sit0: entered promiscuous mode [ 90.989281][ T6744] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 90.997086][ T6744] netlink: 1 bytes leftover after parsing attributes in process `syz.2.403'. [ 91.143187][ T6757] netlink: 'syz.4.406': attribute type 11 has an invalid length. [ 91.359684][ T6758] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 91.432087][ T6762] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.555372][ T6766] IPVS: Unknown mcast interface: [ 91.598759][ T6762] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.008373][ T6785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.021935][ T6785] gretap1: entered promiscuous mode [ 92.037616][ T6785] gretap1: entered allmulticast mode [ 92.069622][ T6788] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 92.410457][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.422'. [ 92.780253][ T6837] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 93.111533][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'. [ 93.817975][ T6899] veth1_macvtap: entered allmulticast mode [ 93.855423][ T6894] netlink: 124 bytes leftover after parsing attributes in process `syz.2.444'. [ 94.087520][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 94.137212][ T6907] lo: entered promiscuous mode [ 94.168362][ T6907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.519758][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 94.922450][ T6949] netlink: 'syz.1.460': attribute type 64 has an invalid length. [ 95.436924][ T6971] netlink: 220 bytes leftover after parsing attributes in process `syz.1.465'. [ 95.521555][ T6979] netlink: 100 bytes leftover after parsing attributes in process `syz.1.467'. [ 95.536666][ T6979] nbd: must specify an index to disconnect [ 95.573105][ T6984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.734431][ T6988] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 95.744251][ T6988] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 95.768352][ T6988] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 95.769609][ T6995] sctp: [Deprecated]: syz.4.471 (pid 6995) Use of int in max_burst socket option. [ 95.769609][ T6995] Use struct sctp_assoc_value instead [ 95.803133][ T6995] xt_bpf: check failed: parse error [ 95.819980][ T6995] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 95.836329][ T6995] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.471'. [ 95.846077][ T6995] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 95.859495][ T6995] netlink: 217 bytes leftover after parsing attributes in process `syz.4.471'. [ 96.352913][ T7017] trusted_key: syz.0.479 sent an empty control message without MSG_MORE. [ 96.432660][ T7023] syzkaller1: entered promiscuous mode [ 96.458137][ T7023] syzkaller1: entered allmulticast mode [ 96.955721][ T7043] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 97.507388][ T7052] netlink: 256 bytes leftover after parsing attributes in process `syz.0.487'. [ 98.153500][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 98.498661][ T7069] netlink: zone id is out of range [ 98.514702][ T7066] netlink: zone id is out of range [ 98.732649][ T7083] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.496'. [ 98.776017][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.498'. [ 98.799153][ T7091] netlink: 80 bytes leftover after parsing attributes in process `syz.3.499'. [ 99.755487][ T7132] __nla_validate_parse: 4 callbacks suppressed [ 99.755505][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 100.123036][ T7156] netlink: 'syz.4.520': attribute type 34 has an invalid length. [ 100.155434][ T7158] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 100.169840][ T7158] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.521'. [ 100.183522][ T7158] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 100.191752][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 100.253713][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 100.350163][ T7163] ipt_REJECT: ECHOREPLY no longer supported. [ 100.638656][ T7171] netlink: 'syz.0.525': attribute type 46 has an invalid length. [ 100.662539][ T7173] sctp: [Deprecated]: syz.1.526 (pid 7173) Use of int in maxseg socket option. [ 100.662539][ T7173] Use struct sctp_assoc_value instead [ 100.748847][ T7175] batadv0: entered allmulticast mode [ 100.794725][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 100.832479][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 101.086722][ T7187] batadv0: entered promiscuous mode [ 101.110964][ T7187] batadv_slave_0: entered promiscuous mode [ 101.129309][ T7187] batadv_slave_0: left promiscuous mode [ 101.147591][ T7187] batadv0: left promiscuous mode [ 101.278303][ T7195] netlink: 'syz.2.532': attribute type 21 has an invalid length. [ 101.501918][ T7205] syzkaller1: entered promiscuous mode [ 101.507427][ T7205] syzkaller1: entered allmulticast mode [ 101.812031][ T7216] ip6gretap0: entered promiscuous mode [ 101.826479][ T7216] vlan2: entered promiscuous mode [ 101.840815][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 101.880385][ T7216] ip6gretap0: left promiscuous mode [ 101.950970][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 101.967578][ T7227] sctp: [Deprecated]: syz.1.542 (pid 7227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.967578][ T7227] Use struct sctp_sack_info instead [ 101.995766][ T2973] tipc: Subscription rejected, illegal request [ 102.159689][ T7233] netlink: 'syz.2.545': attribute type 33 has an invalid length. [ 102.421870][ T7242] xt_CT: No such helper "pptp" [ 102.453685][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 102.502974][ T7247] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 102.590115][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 102.857322][ T7268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.962236][ T7272] netlink: 'syz.0.557': attribute type 64 has an invalid length. [ 103.015508][ T5246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.022095][ T5252] Bluetooth: hci0: command 0x0405 tx timeout [ 103.249872][ T7283] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 103.266669][ T7283] netlink: 'syz.2.562': attribute type 2 has an invalid length. [ 103.281844][ T7285] dccp_invalid_packet: P.Data Offset(100) too large [ 103.674884][ T7294] netlink: 'syz.4.566': attribute type 12 has an invalid length. [ 103.707662][ T7294] xt_TCPMSS: Only works on TCP SYN packets [ 103.803729][ T7303] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 103.829782][ T7303] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 104.218357][ T7320] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.542238][ T7332] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 80 [ 104.973042][ T7362] __nla_validate_parse: 7 callbacks suppressed [ 104.973060][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 105.105600][ T7369] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 105.188077][ T7373] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 106.629375][ T7416] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 106.730521][ T7423] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 106.742318][ T7423] bond3: (slave gre1): Error -95 calling set_mac_address [ 106.769669][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 106.795063][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 106.847440][ T7416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.480135][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 107.498080][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 107.553018][ T7465] sctp: [Deprecated]: syz.4.609 (pid 7465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.553018][ T7465] Use struct sctp_sack_info instead [ 107.606580][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 107.723408][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 107.884750][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 107.913073][ T7480] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 108.025280][ T7484] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 108.080902][ T7484] team0: Port device netdevsim0 added [ 108.112455][ T7493] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 108.117704][ T7484] IPVS: stopping backup sync thread 7493 ... [ 108.136391][ T7487] batadv0: entered promiscuous mode [ 108.227159][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.659494][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 109.021702][ T7541] xt_HMARK: spi-set and port-set can't be combined [ 109.157040][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 109.247640][ T7561] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 109.286549][ T7560] netlink: 'syz.3.638': attribute type 16 has an invalid length. [ 109.304213][ T7560] netlink: 'syz.3.638': attribute type 17 has an invalid length. [ 109.479127][ T7569] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 109.705267][ T7578] Bluetooth: MGMT ver 1.23 [ 109.751161][ T7580] lo speed is unknown, defaulting to 1000 [ 109.769599][ T7580] lo speed is unknown, defaulting to 1000 [ 109.796896][ T7580] lo speed is unknown, defaulting to 1000 [ 109.856813][ T7580] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.932414][ T7580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.985899][ T7593] __nla_validate_parse: 1 callbacks suppressed [ 109.985915][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'. [ 110.230912][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 110.379766][ T7594] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'. [ 110.397520][ T7580] lo speed is unknown, defaulting to 1000 [ 110.410358][ T7580] lo speed is unknown, defaulting to 1000 [ 110.431895][ T7580] lo speed is unknown, defaulting to 1000 [ 110.461073][ T7580] lo speed is unknown, defaulting to 1000 [ 110.494881][ T7580] lo speed is unknown, defaulting to 1000 [ 110.687613][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 111.015523][ T7629] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 111.191831][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.200786][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.212091][ T7629] bridge0: entered allmulticast mode [ 111.407227][ T7639] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 111.463483][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 111.608629][ T7657] netlink: 'syz.0.664': attribute type 7 has an invalid length. [ 111.897803][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 113.221892][ T7657] Êü: entered promiscuous mode [ 113.226854][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'. [ 113.244829][ T7670] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 113.419965][ T7684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.674'. [ 113.458139][ T7688] netlink: 134716 bytes leftover after parsing attributes in process `syz.3.672'. [ 113.509019][ T7688] openvswitch: netlink: Message has 5 unknown bytes. [ 113.692123][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 113.705146][ T7698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.962584][ T7719] tc_dump_action: action bad kind [ 114.355070][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.392017][ T7730] team0: left allmulticast mode [ 114.397002][ T7730] team_slave_0: left allmulticast mode [ 114.417264][ T7730] team_slave_1: left allmulticast mode [ 114.427015][ T7730] team0: left promiscuous mode [ 114.432674][ T7730] team_slave_0: left promiscuous mode [ 114.438315][ T7730] team_slave_1: left promiscuous mode [ 114.444367][ T7730] bridge0: port 3(team0) entered disabled state [ 114.472859][ T7730] bridge_slave_1: left allmulticast mode [ 114.481734][ T7730] bridge_slave_1: left promiscuous mode [ 114.487583][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.506639][ T7730] bridge_slave_0: left allmulticast mode [ 114.520359][ T7730] bridge_slave_0: left promiscuous mode [ 114.532226][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.146891][ T7777] syz.0.700 uses old SIOCAX25GETINFO [ 116.015617][ T7821] __nla_validate_parse: 12 callbacks suppressed [ 116.015636][ T7821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.714'. [ 116.052456][ T7826] netlink: 100 bytes leftover after parsing attributes in process `syz.4.716'. [ 116.110358][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'. [ 116.148746][ T7828] tipc: Failed to remove unknown binding: 66,1,1/0:616180887/616180889 [ 116.165180][ T7828] tipc: Failed to remove unknown binding: 66,1,1/0:616180887/616180889 [ 116.324646][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 116.363753][ T7844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 116.511619][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 116.721591][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 116.783067][ T7862] netlink: 'syz.2.726': attribute type 3 has an invalid length. [ 116.794401][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.810086][ T7862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.895855][ T7877] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.731'. [ 116.944706][ T7877] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 117.041323][ T7883] netlink: 'syz.0.733': attribute type 21 has an invalid length. [ 117.071078][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 117.102791][ T7886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.734'. [ 117.696811][ T7921] netlink: 'syz.2.744': attribute type 62 has an invalid length. [ 118.083383][ T7942] bond0: entered promiscuous mode [ 118.094828][ T7942] bond_slave_0: entered promiscuous mode [ 118.100931][ T7942] bond_slave_1: entered promiscuous mode [ 118.181877][ T7942] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 118.236960][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.271767][ T7942] team0: entered promiscuous mode [ 118.294215][ T7942] team_slave_0: entered promiscuous mode [ 118.317725][ T7942] team_slave_1: entered promiscuous mode [ 118.340627][ T7942] bond0: (slave team0): Enslaving as an active interface with an up link [ 118.370463][ T7957] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 118.404734][ T7957] bond0: (slave team0): Releasing backup interface [ 118.415721][ T7957] team0: left promiscuous mode [ 118.435042][ T7957] team_slave_0: left promiscuous mode [ 118.460399][ T7957] team_slave_1: left promiscuous mode [ 118.977202][ T5337] IPVS: starting estimator thread 0... [ 118.978725][ T7989] xt_TCPMSS: Only works on TCP SYN packets [ 119.098761][ T7990] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.185424][ T8000] lo: entered promiscuous mode [ 119.200905][ T8000] tunl0: entered promiscuous mode [ 119.221491][ T8000] gre0: entered promiscuous mode [ 119.231584][ T8000] gretap0: entered promiscuous mode [ 119.237823][ T8000] erspan0: entered promiscuous mode [ 119.247505][ T8000] ip_vti0: entered promiscuous mode [ 119.272077][ T8000] ip6_vti0: entered promiscuous mode [ 119.311274][ T8000] sit0: entered promiscuous mode [ 119.330350][ T8000] ip6tnl0: entered promiscuous mode [ 119.346279][ T8007] tipc: Can't bind to reserved service type 2 [ 119.357106][ T8000] ip6gre0: entered promiscuous mode [ 119.375442][ T8000] syz_tun: entered promiscuous mode [ 119.391475][ T8000] ip6gretap0: entered promiscuous mode [ 119.407030][ T8000] bridge0: entered promiscuous mode [ 119.427262][ T8009] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 119.440398][ T8000] vcan0: entered promiscuous mode [ 119.462407][ T8000] bond0: entered promiscuous mode [ 119.473589][ T8000] bond_slave_0: entered promiscuous mode [ 119.488253][ T8000] bond_slave_1: entered promiscuous mode [ 119.507477][ T8000] team0: entered promiscuous mode [ 119.520517][ T8000] team_slave_0: entered promiscuous mode [ 119.534601][ T8000] team_slave_1: entered promiscuous mode [ 119.548856][ T8000] dummy0: entered promiscuous mode [ 119.562814][ T8000] nlmon0: entered promiscuous mode [ 119.582024][ T8016] cannot load conntrack support for proto=3 [ 119.590646][ T8000] caif0: entered promiscuous mode [ 119.598869][ T8000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.626716][ T8004] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 119.770499][ T8023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 120.249987][ T8049] pim6reg1: entered promiscuous mode [ 120.255340][ T8049] pim6reg1: entered allmulticast mode [ 120.311322][ T8051] lo speed is unknown, defaulting to 1000 [ 121.294782][ T8093] __nla_validate_parse: 20 callbacks suppressed [ 121.294801][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.790'. [ 121.320003][ T8095] x_tables: duplicate underflow at hook 3 [ 121.439906][ T8098] lo speed is unknown, defaulting to 1000 [ 121.770682][ T8121] dvmrp0: entered allmulticast mode [ 121.928330][ T8119] dvmrp0: left allmulticast mode [ 122.325603][ T8102] netlink: 576 bytes leftover after parsing attributes in process `syz.4.791'. [ 122.569900][ T8159] netlink: 156 bytes leftover after parsing attributes in process `syz.1.809'. [ 122.614325][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 122.627820][ T8164] netlink: 'syz.0.807': attribute type 21 has an invalid length. [ 122.642388][ T8164] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 122.694568][ T8154] netlink: 'syz.2.806': attribute type 4 has an invalid length. [ 122.707203][ T8167] xt_l2tp: invalid flags combination: 4 [ 123.091740][ T8185] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 123.172528][ T8185] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 123.205786][ T8185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.016065][ T8209] netlink: 'syz.2.820': attribute type 2 has an invalid length. [ 125.042025][ T8209] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 125.090464][ T8209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.820'. [ 125.139768][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.821'. [ 125.347841][ T8235] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 125.401987][ T8235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.744091][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'. [ 125.767258][ T8262] batadv0: entered promiscuous mode [ 125.774207][ T8262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.793435][ T8262] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 125.953972][ T8271] netlink: 256 bytes leftover after parsing attributes in process `syz.2.838'. [ 126.069228][ T8268] netlink: 88 bytes leftover after parsing attributes in process `syz.3.835'. [ 126.144924][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 126.365568][ T8302] delete_channel: no stack [ 126.507039][ T8308] __nla_validate_parse: 1 callbacks suppressed [ 126.507056][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 126.624235][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 126.698236][ T941] IPVS: starting estimator thread 0... [ 126.817011][ T8320] IPVS: using max 19 ests per chain, 45600 per kthread [ 127.144122][ T8349] netlink: 'syz.1.857': attribute type 11 has an invalid length. [ 127.293159][ T8353] netlink: 'syz.2.858': attribute type 3 has an invalid length. [ 127.352449][ T8353] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.858'. [ 127.483798][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 128.131956][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 128.151296][ T8393] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 130.205084][ T8443] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 130.224045][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 130.282225][ T8443] veth1: entered promiscuous mode [ 130.316847][ T8443] veth1: left promiscuous mode [ 130.410255][ T8455] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.880'. [ 130.457302][ T8453] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 130.479323][ T8453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.883'. [ 130.502957][ T8453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 130.555387][ T8460] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 130.567013][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.883'. [ 130.590779][ T8460] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 130.752049][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 131.361107][ T8506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.368445][ T8506] IPv6: NLM_F_CREATE should be set when creating new route [ 131.375678][ T8506] IPv6: NLM_F_CREATE should be set when creating new route [ 131.428923][ T8507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.488311][ T8511] can: request_module (can-proto-0) failed. [ 131.530591][ T8508] x_tables: duplicate underflow at hook 4 [ 131.539778][ T8501] lo speed is unknown, defaulting to 1000 [ 131.607243][ T8517] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 131.663372][ T8517] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.707624][ T8521] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 131.911502][ T8532] lo speed is unknown, defaulting to 1000 [ 131.943907][ T8538] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 131.951985][ T8538] __nla_validate_parse: 5 callbacks suppressed [ 131.951999][ T8538] netlink: 114632 bytes leftover after parsing attributes in process `syz.2.905'. [ 132.057265][ T8497] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 132.645658][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 132.722223][ T8561] syz.4.913[8561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.722368][ T8561] syz.4.913[8561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.947980][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 133.021803][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 133.197039][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 133.248869][ T5246] Bluetooth: hci0: command 0x0405 tx timeout [ 133.410329][ T8574] netlink: 9 bytes leftover after parsing attributes in process `syz.1.919'. [ 133.440268][ T8574] 0·: renamed from hsr_slave_1 (while UP) [ 133.449565][ T8574] 0·: entered allmulticast mode [ 133.454817][ T8574] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 133.471920][ T8575] netlink: 9 bytes leftover after parsing attributes in process `syz.1.919'. [ 133.482812][ T8575] 1·: renamed from c0· (while UP) [ 133.490360][ T8575] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 133.506129][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'. [ 133.528159][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 133.573018][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 133.609082][ T8578] vlan2: entered promiscuous mode [ 133.626230][ T8578] vlan2: entered allmulticast mode [ 133.661099][ T8581] xfrm2: entered allmulticast mode [ 134.257213][ T8609] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 135.918931][ T8672] netlink: 'syz.2.950': attribute type 15 has an invalid length. [ 136.111078][ T8679] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 136.132131][ T8679] bridge0: port 3(syz_tun) entered blocking state [ 136.144518][ T8679] bridge0: port 3(syz_tun) entered disabled state [ 136.152696][ T8681] netlink: 'syz.0.953': attribute type 8 has an invalid length. [ 136.156304][ T8679] syz_tun: entered allmulticast mode [ 136.174745][ T8679] syz_tun: entered promiscuous mode [ 136.185833][ T8679] bridge0: port 3(syz_tun) entered blocking state [ 136.192470][ T8679] bridge0: port 3(syz_tun) entered forwarding state [ 136.227242][ T8685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.426508][ T8698] netlink: 'syz.2.958': attribute type 5 has an invalid length. [ 136.516121][ T8704] bridge0: port 3(syz_tun) entered disabled state [ 136.522857][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.530440][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.620412][ T8698] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 136.868275][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.879563][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.892741][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.903324][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.913424][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.923976][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.934257][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.944752][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.267969][ T8742] __nla_validate_parse: 20 callbacks suppressed [ 137.267988][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'. [ 137.319711][ T8745] netlink: 96 bytes leftover after parsing attributes in process `syz.1.971'. [ 137.842060][ T8789] No such timeout policy "syz0" [ 137.895199][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 138.221406][ T8818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.985'. [ 138.283770][ T8821] bridge_slave_0: left allmulticast mode [ 138.312971][ T8821] bridge_slave_0: left promiscuous mode [ 138.324162][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.342852][ T8821] bridge_slave_1: left allmulticast mode [ 138.353274][ T8821] bridge_slave_1: left promiscuous mode [ 138.365848][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.416795][ T8821] bond0: (slave bond_slave_0): Releasing backup interface [ 138.481510][ T8821] bond0: (slave bond_slave_1): Releasing backup interface [ 138.507051][ T8827] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 138.597068][ T8821] team0: Port device team_slave_0 removed [ 138.686839][ T8821] team0: Port device team_slave_1 removed [ 138.703729][ T8821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.712045][ T8821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.740638][ T8821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.763677][ T8821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.876432][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.914888][ T8823] team0: Port device bond0 added [ 138.992502][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 139.022148][ T8842] netlink: 'syz.2.991': attribute type 18 has an invalid length. [ 139.111222][ T8842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.120661][ T8842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.129441][ T8842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.138151][ T8842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.178795][ T8842] vxlan0: entered promiscuous mode [ 139.645450][ T8880] netlink: 'syz.4.1002': attribute type 3 has an invalid length. [ 139.663638][ T8880] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1002'. [ 139.816695][ T8880] pim6reg: entered allmulticast mode [ 139.920543][ T8899] batadv_slave_0: entered allmulticast mode [ 139.933899][ T8899] batadv_slave_0: left allmulticast mode [ 139.996715][ T8903] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 140.008262][ T8903] team0: Device ipvlan1 failed to register rx_handler [ 140.107377][ T8904] syzkaller0: entered promiscuous mode [ 140.113318][ T8904] syzkaller0: entered allmulticast mode [ 140.608525][ T5246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.684944][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 142.119205][ T8880] pim6reg: left allmulticast mode [ 142.260409][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 142.354308][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 142.573543][ T8948] nicvf0: tun_chr_ioctl cmd 1074025676 [ 142.593334][ T8948] nicvf0: owner set to 0 [ 142.721695][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 142.743624][ T8948] syz_tun (unregistering): left allmulticast mode [ 142.770002][ T8948] syz_tun (unregistering): left promiscuous mode [ 142.784706][ T8948] bridge0: port 3(syz_tun) entered disabled state [ 142.824271][ T8957] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 143.207720][ T8982] netlink: 'syz.4.1032': attribute type 11 has an invalid length. [ 143.226078][ T8982] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.1032'. [ 143.367233][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 143.414223][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 143.497669][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 143.526386][ T8998] netlink: 'syz.3.1036': attribute type 12 has an invalid length. [ 143.567338][ T9007] netlink: 'syz.3.1036': attribute type 2 has an invalid length. [ 143.573412][ T8998] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.584947][ T8998] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.593922][ T8998] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.602719][ T8998] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.613813][ T8998] vxlan0: entered promiscuous mode [ 143.660538][ T9007] geneve1: entered promiscuous mode [ 143.791152][ T9015] xt_policy: too many policy elements [ 144.043568][ T9030] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 144.055620][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 144.074879][ T9030] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 144.126338][ T5337] lo speed is unknown, defaulting to 1000 [ 144.146866][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 144.215076][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1049'. [ 144.479610][ T9052] lo speed is unknown, defaulting to 1000 [ 144.716241][ T9068] netlink: 'syz.0.1056': attribute type 3 has an invalid length. [ 144.745771][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1056'. [ 144.777203][ T9068] netlink: 'syz.0.1056': attribute type 6 has an invalid length. [ 144.786518][ T9068] netlink: 'syz.0.1056': attribute type 5 has an invalid length. [ 145.155172][ T9085] SET target dimension over the limit! [ 145.227943][ T9085] netlink: 'syz.2.1062': attribute type 21 has an invalid length. [ 145.246450][ T9085] netlink: 'syz.2.1062': attribute type 5 has an invalid length. [ 145.286182][ T9087] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 146.408093][ T9148] team0: entered promiscuous mode [ 146.439153][ T9148] team_slave_0: entered promiscuous mode [ 146.445405][ T9148] team_slave_1: entered promiscuous mode [ 146.545278][ T9148] team0: left promiscuous mode [ 146.559905][ T9148] team_slave_0: left promiscuous mode [ 146.578899][ T9148] team_slave_1: left promiscuous mode [ 147.640922][ T9224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.997106][ T9245] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 148.007523][ T9246] __nla_validate_parse: 6 callbacks suppressed [ 148.007540][ T9246] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1111'. [ 148.134633][ T9251] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1113'. [ 148.147719][ T9251] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 148.396238][ T9263] tc_dump_action: action bad kind [ 148.411820][ T9262] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1117'. [ 148.443746][ T9262] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 148.479557][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 148.711821][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 148.760711][ T9278] validate_nla: 5 callbacks suppressed [ 148.760729][ T9278] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 148.811500][ T9283] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1121'. [ 148.851331][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 148.926641][ T9291] vlan0: entered promiscuous mode [ 148.958032][ T9290] lo speed is unknown, defaulting to 1000 [ 149.012280][ T9294] xt_recent: Unsupported userspace flags (00000042) [ 149.414244][ T9325] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1132'. [ 149.726859][ T9335] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 161.265450][ T9337] netlink: 'syz.1.1137': attribute type 4 has an invalid length. [ 161.635316][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 161.660721][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 161.670936][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 161.706621][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1147'. [ 161.742293][ T9376] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 161.786438][ T9379] atomic_op ffff88807c383198 conn xmit_atomic 0000000000000000 [ 162.194710][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1156'. [ 162.394445][ T9413] batman_adv: batadv0: Adding interface: wlan1 [ 162.401447][ T9413] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.408284][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.428691][ T9413] batman_adv: batadv0: Interface activated: wlan1 [ 162.458611][ T9422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1160'. [ 162.513371][ T9413] batman_adv: batadv0: Interface deactivated: wlan1 [ 162.517019][ T9423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.583961][ T9415] lo speed is unknown, defaulting to 1000 [ 162.663134][ T25] IPVS: starting estimator thread 0... [ 162.756451][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 162.758594][ T9428] IPVS: using max 19 ests per chain, 45600 per kthread [ 162.771678][ T9413] netlink: 'syz.0.1162': attribute type 8 has an invalid length. [ 162.842429][ T9413] batman_adv: batadv0: Removing interface: wlan1 [ 162.852444][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.887051][ T9440] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 162.927215][ T9440] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1167'. [ 162.967927][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 163.046253][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'. [ 163.177392][ T9454] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 163.235523][ T9454] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 163.246838][ T9454] team0: Port device netdevsim0 added [ 163.294736][ T9466] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 163.363603][ T9466] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 163.407567][ T9466] team0: Port device netdevsim0 removed [ 163.421897][ T9466] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 163.430862][ T9466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.452694][ T9481] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.467387][ T9481] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 163.574236][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.598517][ T9484] netlink: 'syz.1.1180': attribute type 2 has an invalid length. [ 163.660695][ T9486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.786194][ T9494] netlink: 'syz.4.1185': attribute type 21 has an invalid length. [ 163.819567][ T9496] xt_l2tp: v2 doesn't support IP mode [ 164.154213][ T9507] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 164.182439][ T9507] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.206363][ T9507] gretap2: entered promiscuous mode [ 164.220392][ T9507] gretap2: entered allmulticast mode [ 164.243783][ T9519] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 165.551109][ T9597] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 166.031918][ T9630] lo speed is unknown, defaulting to 1000 [ 166.859302][ T9657] __nla_validate_parse: 19 callbacks suppressed [ 166.859321][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 166.920582][ T9661] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 166.977679][ T9667] ebt_among: dst integrity fail: 101 [ 167.018338][ T9660] veth0_to_team: entered promiscuous mode [ 167.063533][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 167.098647][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 167.222864][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'. [ 167.373678][ T9688] validate_nla: 2 callbacks suppressed [ 167.373698][ T9688] netlink: 'syz.0.1238': attribute type 63 has an invalid length. [ 167.511888][ T9698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.651737][ T9710] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 168.159527][ T9745] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1251'. [ 168.351823][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 168.609225][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 168.643393][ T9771] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 168.670627][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 168.773910][ T9782] IPv6: sit3: Disabled Multicast RS [ 168.868566][ T9786] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1264'. [ 169.046537][ T9795] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 169.117793][ T9798] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1270'. [ 169.140153][ T9798] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 169.793129][ T9845] IPVS: length: 8 != 3945546880 [ 169.976709][ T9852] x_tables: duplicate underflow at hook 1 [ 169.979544][ T9848] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 170.482592][ T9877] xt_TCPMSS: Only works on TCP SYN packets [ 170.508897][ T9880] dvmrp0: entered allmulticast mode [ 170.523086][ T9880] pimreg: left allmulticast mode [ 170.793225][ T9874] dvmrp0: left allmulticast mode [ 171.033583][ T9914] batadv_slave_1: entered promiscuous mode [ 171.144565][ T9913] batadv_slave_1: left promiscuous mode [ 171.388080][ T9930] can: request_module (can-proto-0) failed. [ 171.506702][ T9930] geneve2: entered promiscuous mode [ 171.514757][ T9930] geneve2: entered allmulticast mode [ 171.871303][ T9956] netlink: 'syz.1.1308': attribute type 32 has an invalid length. [ 171.887292][ T9956] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 171.909437][ T9956] __nla_validate_parse: 21 callbacks suppressed [ 171.909457][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 171.942030][ T9956] bond0: option mode: unable to set because the bond device has slaves [ 171.958939][ T9968] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 171.964631][ T9968] pim6reg0: ignored: set checksum disabled [ 172.102971][ T9970] lo speed is unknown, defaulting to 1000 [ 172.192526][ T9974] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1311'. [ 172.229492][ T9976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1312'. [ 172.633461][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'. [ 172.851856][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 172.863214][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 172.982668][T10012] netlink: 'syz.4.1325': attribute type 10 has an invalid length. [ 173.017076][T10012] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.086666][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1328'. [ 173.096609][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 173.119917][T10013] netlink: 'syz.1.1324': attribute type 14 has an invalid length. [ 173.887741][T10053] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1338'. [ 173.919385][T10020] dccp_close: ABORT with 36 bytes unread [ 174.374947][T10080] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1346'. [ 174.429089][T10080] NCSI netlink: No device for ifindex 0 [ 174.455538][T10080] NCSI netlink: No device for ifindex 0 [ 174.467720][T10084] Illegal XDP return value 4294967274 on prog (id 518) dev N/A, expect packet loss! [ 174.481731][T10081] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 174.553761][T10080] NCSI netlink: No device for ifindex 0 [ 174.580089][T10080] NCSI netlink: No device for ifindex 0 [ 174.807262][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.827594][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.837977][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.855096][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.863114][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.870610][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.038133][T10099] lo speed is unknown, defaulting to 1000 [ 175.479679][T10099] chnl_net:caif_netlink_parms(): no params data found [ 175.784191][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.795868][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.804427][T10099] bridge_slave_0: entered allmulticast mode [ 175.815484][T10099] bridge_slave_0: entered promiscuous mode [ 175.826567][T10145] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 175.874780][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.882952][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.890327][T10099] bridge_slave_1: entered allmulticast mode [ 175.897769][T10099] bridge_slave_1: entered promiscuous mode [ 175.958519][T10151] wg2: entered promiscuous mode [ 175.989172][T10151] wg2: entered allmulticast mode [ 176.048118][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.080125][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.199983][T10099] team0: Port device team_slave_0 added [ 176.219943][T10099] team0: Port device team_slave_1 added [ 176.272580][T10171] gtp0: entered promiscuous mode [ 176.293034][T10171] gtp0: entered allmulticast mode [ 176.351455][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.375189][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.465137][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.501695][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.509026][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.547594][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.625043][T10099] hsr_slave_0: entered promiscuous mode [ 176.634935][T10099] hsr_slave_1: entered promiscuous mode [ 176.650025][T10099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.665027][T10099] Cannot create hsr debugfs directory [ 176.667284][T10195] xt_CT: No such helper "snmp_trap" [ 176.854616][T10199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.929433][ T5252] Bluetooth: hci2: command tx timeout [ 176.945960][T10099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.967243][T10203] netlink: 'syz.3.1377': attribute type 10 has an invalid length. [ 176.976295][T10203] hsr0: entered promiscuous mode [ 176.989632][T10203] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.003744][T10203] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 177.018795][T10203] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 177.032327][T10203] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 177.093523][T10099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.255862][T10099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.270687][T10210] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 177.385926][T10099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.464130][T10217] __nla_validate_parse: 9 callbacks suppressed [ 177.464150][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1381'. [ 179.008687][ T5252] Bluetooth: hci2: command tx timeout [ 179.237827][T10216] tc_dump_action: action bad kind [ 179.638691][T10248] bridge0: port 3(gretap0) entered blocking state [ 179.645624][T10248] bridge0: port 3(gretap0) entered disabled state [ 179.688276][T10248] gretap0: entered allmulticast mode [ 179.695949][T10248] gretap0: entered promiscuous mode [ 179.703588][T10099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.730608][T10099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.790098][T10099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.812983][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1387'. [ 179.836052][T10099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.926359][T10259] x_tables: unsorted entry at hook 2 [ 180.100790][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.147930][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.183282][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.190529][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.226094][T10270] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 180.254501][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.261707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.702111][T10296] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 180.719297][T10296] netlink: 9396 bytes leftover after parsing attributes in process `syz.1.1402'. [ 180.740727][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.901544][T10099] veth0_vlan: entered promiscuous mode [ 180.952923][T10099] veth1_vlan: entered promiscuous mode [ 181.056282][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 181.086302][T10099] veth0_macvtap: entered promiscuous mode [ 181.089798][ T5248] Bluetooth: hci2: command tx timeout [ 181.107674][T10099] veth1_macvtap: entered promiscuous mode [ 181.184334][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.228026][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.254878][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.284146][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.305443][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.333652][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.344417][ T5248] Bluetooth: hci1: command 0x0406 tx timeout [ 181.344462][ T5248] Bluetooth: hci4: command 0x0406 tx timeout [ 181.344497][ T5248] Bluetooth: hci3: command 0x1407 tx timeout [ 181.385098][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.397655][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.410394][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.421839][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.434866][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.470766][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.561813][T10099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.591316][T10099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.601470][T10099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.611174][T10099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.760390][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.774259][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.830896][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.854025][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.298036][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 182.309466][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 182.318581][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 182.914825][T10377] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 182.932628][T10378] ipvlan0: mtu less than device minimum [ 183.130060][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 183.333810][T10401] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1428'. [ 183.337883][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 183.421293][T10403] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 183.432140][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1427'. [ 183.441556][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 183.452330][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 183.848087][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1436'. [ 184.024441][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1440'. [ 184.037904][T10443] tipc: Started in network mode [ 184.047629][T10443] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 184.058716][T10443] tipc: Enabling of bearer rejected, failed to enable media [ 184.330039][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.411518][T10461] syzkaller0: entered promiscuous mode [ 184.417051][T10461] syzkaller0: entered allmulticast mode [ 184.749603][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 184.948886][T10483] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1451'. [ 184.973768][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.985662][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.994775][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.003570][T10483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.012576][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.024319][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.033019][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.261328][T10485] lo speed is unknown, defaulting to 1000 [ 185.347386][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1453'. [ 185.475157][T10485] chnl_net:caif_netlink_parms(): no params data found [ 185.657429][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.673220][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.681381][T10485] bridge_slave_0: entered allmulticast mode [ 185.711553][T10485] bridge_slave_0: entered promiscuous mode [ 185.738278][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.747146][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.754749][T10485] bridge_slave_1: entered allmulticast mode [ 185.763350][T10485] bridge_slave_1: entered promiscuous mode [ 185.879498][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.904905][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.919964][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.006361][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.142551][T10485] team0: Port device team_slave_0 added [ 186.276222][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.331272][T10535] SET target dimension over the limit! [ 186.332855][T10485] team0: Port device team_slave_1 added [ 186.435098][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.462140][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.512114][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.532051][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.539393][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.568010][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.659007][T10485] hsr_slave_0: entered promiscuous mode [ 186.680124][T10485] hsr_slave_1: entered promiscuous mode [ 186.686254][T10485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.698749][T10485] Cannot create hsr debugfs directory [ 186.863438][ T12] bridge_slave_1: left allmulticast mode [ 186.870705][ T12] bridge_slave_1: left promiscuous mode [ 186.878268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.899342][ T12] bridge_slave_0: left allmulticast mode [ 186.905258][ T12] bridge_slave_0: left promiscuous mode [ 186.913738][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.090499][ T5233] Bluetooth: hci2: command tx timeout [ 187.842713][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.867910][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.901569][ T12] bond0 (unregistering): Released all slaves [ 187.933530][T10594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.936778][T10562] tc_dump_action: action bad kind [ 188.613121][ T12] hsr_slave_0: left promiscuous mode [ 188.647724][ T12] hsr_slave_1: left promiscuous mode [ 188.668042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.677235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.687607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.695609][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.743370][ T12] veth1_macvtap: left promiscuous mode [ 188.756128][ T12] veth0_macvtap: left promiscuous mode [ 188.762890][ T12] veth1_vlan: left promiscuous mode [ 188.776922][ T12] veth0_vlan: left promiscuous mode [ 189.169147][ T5233] Bluetooth: hci2: command tx timeout [ 189.577008][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.624278][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.199948][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.209215][T10662] __nla_validate_parse: 2 callbacks suppressed [ 190.209232][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1483'. [ 190.229509][T10657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.508603][T10672] netlink: 'syz.3.1486': attribute type 29 has an invalid length. [ 190.516476][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 190.556522][T10485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.580078][T10676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1487'. [ 190.602260][T10485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.664796][T10485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.716341][T10682] syzkaller1: entered promiscuous mode [ 190.738217][T10682] syzkaller1: entered allmulticast mode [ 190.815809][T10485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.177930][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.223904][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.246773][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.254058][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.262313][ T5233] Bluetooth: hci2: command tx timeout [ 191.303080][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.310291][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.503856][ T5252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.513753][ T5252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.524895][ T5252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.532988][ T5252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.542586][ T5252] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.562997][ T5252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.688040][T10485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.721642][T10714] lo speed is unknown, defaulting to 1000 [ 191.783775][T10726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1496'. [ 191.803481][T10726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1496'. [ 191.816704][T10726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.072779][T10714] chnl_net:caif_netlink_parms(): no params data found [ 192.234308][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.344586][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.356443][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.366652][T10714] bridge_slave_0: entered allmulticast mode [ 192.382039][T10714] bridge_slave_0: entered promiscuous mode [ 192.407804][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.416403][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.424264][T10714] bridge_slave_1: entered allmulticast mode [ 192.432128][T10714] bridge_slave_1: entered promiscuous mode [ 192.493121][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.522060][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.795283][T10714] team0: Port device team_slave_0 added [ 192.824749][T10777] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1507'. [ 192.840868][T10714] team0: Port device team_slave_1 added [ 192.928242][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.941777][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.979448][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.993086][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.001795][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.037408][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.106277][T10485] veth0_vlan: entered promiscuous mode [ 193.333054][ T5233] Bluetooth: hci2: command tx timeout [ 193.345320][T10800] netlink: 'syz.1.1512': attribute type 13 has an invalid length. [ 193.365261][T10800] netlink: 'syz.1.1512': attribute type 58 has an invalid length. [ 193.391664][T10800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1512'. [ 193.512990][T10714] hsr_slave_0: entered promiscuous mode [ 193.540923][T10714] hsr_slave_1: entered promiscuous mode [ 193.549666][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.558891][T10714] Cannot create hsr debugfs directory [ 193.566822][T10815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'. [ 193.582488][T10485] veth1_vlan: entered promiscuous mode [ 193.665229][ T5233] Bluetooth: hci5: command tx timeout [ 193.754004][T10485] veth0_macvtap: entered promiscuous mode [ 193.837425][T10485] veth1_macvtap: entered promiscuous mode [ 193.948256][T10714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.970999][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.982423][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.993291][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.004774][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.016350][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.084151][T10714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.135634][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.147123][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.169656][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.188711][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.209757][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.226729][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.244894][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.355815][T10714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.387252][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 194.477133][T10485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.486413][T10485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.495280][T10485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.504260][T10485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.537136][T10714] bond0: (slave netdevsim0): Releasing backup interface [ 194.550540][T10714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.591225][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 194.814934][T10860] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 194.893354][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.924942][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.007399][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.025422][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.055579][T10714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.086983][T10714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.127060][T10714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.185977][T10714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.327677][T10877] __nla_validate_parse: 3 callbacks suppressed [ 195.327696][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 195.416123][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'. [ 195.426073][T10882] netlink: 'syz.1.1535': attribute type 18 has an invalid length. [ 195.573391][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.614024][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.646822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.654047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.678113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.685312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.730258][ T5233] Bluetooth: hci5: command tx timeout [ 195.782485][T10897] "syz.3.1541" (10897) uses obsolete ecb(arc4) skcipher [ 195.856196][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1541'. [ 196.011389][T10909] netlink: 'syz.2.1543': attribute type 64 has an invalid length. [ 196.028708][T10909] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1543'. [ 196.057423][T10909] netlink: 'syz.2.1543': attribute type 64 has an invalid length. [ 196.074678][T10909] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1543'. [ 196.383258][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.550924][T10940] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1547'. [ 196.612778][T10940] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1547'. [ 196.738125][ T5701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.052793][T10714] veth0_vlan: entered promiscuous mode [ 197.112416][T10714] veth1_vlan: entered promiscuous mode [ 197.133399][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 197.170678][T10960] dummy0: entered promiscuous mode [ 197.192135][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 197.308048][T10962] dummy0: left promiscuous mode [ 197.397404][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.414008][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.423976][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.437303][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.449429][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.456828][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.477297][ T5701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.576827][ T5701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.606749][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 197.619087][T10970] netlink: 'syz.3.1557': attribute type 2 has an invalid length. [ 197.626937][T10970] netlink: 'syz.3.1557': attribute type 4 has an invalid length. [ 197.692099][ T5701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.744275][T10963] lo speed is unknown, defaulting to 1000 [ 197.809242][ T5252] Bluetooth: hci5: command tx timeout [ 197.858953][T10977] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 197.910039][T10714] veth0_macvtap: entered promiscuous mode [ 197.993568][T10714] veth1_macvtap: entered promiscuous mode [ 198.156478][ T5701] bridge_slave_1: left allmulticast mode [ 198.197709][ T5701] bridge_slave_1: left promiscuous mode [ 198.211169][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.290477][ T5701] bridge_slave_0: left allmulticast mode [ 198.306343][ T5701] bridge_slave_0: left promiscuous mode [ 198.326660][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.946619][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.957973][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.970278][ T5701] bond0 (unregistering): Released all slaves [ 199.051449][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.116678][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.127324][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.143403][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.156339][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.167232][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.187736][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.203164][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.215638][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.249191][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.261188][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.271137][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.281634][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.291951][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.303433][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.337717][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.489544][ T5252] Bluetooth: hci2: command tx timeout [ 199.553679][T10714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.594738][T10714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.625129][T10714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.656907][T10714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.890487][ T5252] Bluetooth: hci5: command tx timeout [ 200.192300][T10963] chnl_net:caif_netlink_parms(): no params data found [ 200.335792][ T5701] hsr_slave_0: left promiscuous mode [ 200.354624][T11074] __nla_validate_parse: 6 callbacks suppressed [ 200.354642][T11074] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1578'. [ 200.378938][ T5701] hsr_slave_1: left promiscuous mode [ 200.385894][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.403850][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.416160][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.438514][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.481324][ T5701] veth1_macvtap: left promiscuous mode [ 200.487099][ T5701] veth0_macvtap: left promiscuous mode [ 200.492970][ T5701] veth1_vlan: left promiscuous mode [ 200.498714][ T5701] veth0_vlan: left promiscuous mode [ 200.563008][T11085] netlink: 'syz.3.1581': attribute type 4 has an invalid length. [ 200.589034][T11085] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 200.602254][T11085] netlink: 'syz.3.1581': attribute type 7 has an invalid length. [ 201.063163][ T5701] team0 (unregistering): Port device team_slave_1 removed [ 201.111792][ T5701] team0 (unregistering): Port device team_slave_0 removed [ 201.573806][ T5252] Bluetooth: hci2: command tx timeout [ 201.947453][ T5705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.955735][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.968958][ T5705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.988664][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.996406][T10963] bridge_slave_0: entered allmulticast mode [ 202.023076][T10963] bridge_slave_0: entered promiscuous mode [ 202.045332][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.075146][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.098778][T10963] bridge_slave_1: entered allmulticast mode [ 202.106221][T10963] bridge_slave_1: entered promiscuous mode [ 202.136516][T11114] openvswitch: netlink: Unknown nsh attribute 0 [ 202.383074][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.451191][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.539955][T11128] netlink: 'syz.2.1589': attribute type 21 has an invalid length. [ 202.549109][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.573800][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.583963][T11128] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1589'. [ 202.633361][T10963] team0: Port device team_slave_0 added [ 202.660813][T10963] team0: Port device team_slave_1 added [ 202.791555][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.809763][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.844060][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.922726][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.951498][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.034225][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.066738][T11158] netlink: 'syz.1.1596': attribute type 11 has an invalid length. [ 203.104861][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 203.195744][T10963] hsr_slave_0: entered promiscuous mode [ 203.204281][T10963] hsr_slave_1: entered promiscuous mode [ 203.213397][T10963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.225917][T10963] Cannot create hsr debugfs directory [ 203.227781][T11174] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 203.659915][ T5252] Bluetooth: hci2: command tx timeout [ 203.701002][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1603'. [ 203.720212][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 204.014539][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1607'. [ 204.474135][T11245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'. [ 204.494094][T11241] lo speed is unknown, defaulting to 1000 [ 205.311789][T10963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.345914][T10963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.360031][T10963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.371421][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 205.390626][T10963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.701158][T10963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.729953][ T5252] Bluetooth: hci2: command tx timeout [ 205.778985][T10963] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.801223][T11291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1623'. [ 205.817067][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 205.835387][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 205.856193][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 205.877142][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.884409][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.932339][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.939601][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.145283][T11302] Bluetooth: hci3: invalid len left 7, exp >= 115 [ 206.572902][T10963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.694353][T10963] veth0_vlan: entered promiscuous mode [ 206.760291][T10963] veth1_vlan: entered promiscuous mode [ 206.879537][T10963] veth0_macvtap: entered promiscuous mode [ 206.903907][T10963] veth1_macvtap: entered promiscuous mode [ 206.966371][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.987564][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.005134][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.017683][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.036104][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.047690][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.070338][T10963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.092122][T11347] team0: Device ip6tnl1 is of different type [ 207.134634][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.154272][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.166636][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.185293][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.195499][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.213603][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.228058][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.246308][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.281458][T10963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.303604][T10963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.320425][T10963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.337355][T10963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.356673][T10963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.396386][T11354] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 207.580036][ T5703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.611401][ T5703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.644050][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 207.668157][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.681522][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 207.693175][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.733172][T11362] netlink: 'syz.2.1636': attribute type 1 has an invalid length. [ 208.000991][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1638'. [ 208.797805][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 208.818200][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 209.163031][T11437] netlink: 'syz.2.1650': attribute type 2 has an invalid length. [ 210.937966][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.974154][T11533] dvmrp0: entered allmulticast mode [ 211.937193][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.952108][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.960220][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.968298][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.977065][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.986458][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.044087][T11559] lo speed is unknown, defaulting to 1000 [ 212.116635][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.186062][T11569] netlink: 'syz.2.1682': attribute type 4 has an invalid length. [ 212.219372][T11570] __nla_validate_parse: 10 callbacks suppressed [ 212.219391][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 212.221837][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.280305][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'. [ 212.296448][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 212.306042][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 212.400290][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.447670][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 212.487533][T11580] vxcan3: entered promiscuous mode [ 212.666513][T11590] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1685'. [ 212.713301][T11559] chnl_net:caif_netlink_parms(): no params data found [ 212.734926][T11590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1685'. [ 212.745123][ T62] bridge_slave_1: left allmulticast mode [ 212.752974][ T62] bridge_slave_1: left promiscuous mode [ 212.761644][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.772864][ T62] bridge_slave_0: left allmulticast mode [ 212.780584][ T62] bridge_slave_0: left promiscuous mode [ 212.786354][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.167210][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.183771][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.195166][ T62] bond0 (unregistering): Released all slaves [ 213.218011][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 213.227840][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 213.603668][T11559] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.621799][T11559] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.630791][T11559] bridge_slave_0: entered allmulticast mode [ 213.638263][T11559] bridge_slave_0: entered promiscuous mode [ 213.647724][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.676012][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.701220][T11559] bridge_slave_1: entered allmulticast mode [ 213.724160][T11559] bridge_slave_1: entered promiscuous mode [ 213.945491][ T62] hsr_slave_0: left promiscuous mode [ 213.964017][ T62] hsr_slave_1: left promiscuous mode [ 214.001788][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.031205][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.049047][ T5233] Bluetooth: hci2: command tx timeout [ 214.068574][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.076015][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.183158][ T62] veth1_macvtap: left promiscuous mode [ 214.208876][ T62] veth0_macvtap: left promiscuous mode [ 214.214576][ T62] veth1_vlan: left promiscuous mode [ 214.220394][ T62] veth0_vlan: left promiscuous mode [ 214.697339][ T5252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.716588][ T5252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.727748][ T5252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.741429][ T5252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.750154][ T5252] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.758727][ T5252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.037537][ T62] team0 (unregistering): Port device team_slave_1 removed [ 215.087266][ T62] team0 (unregistering): Port device team_slave_0 removed [ 215.531987][T11559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.592843][T11559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.736129][T11655] lo speed is unknown, defaulting to 1000 [ 215.751075][T11559] team0: Port device team_slave_0 added [ 215.774790][T11559] team0: Port device team_slave_1 added [ 215.782511][T11663] sctp: [Deprecated]: syz.4.1700 (pid 11663) Use of int in max_burst socket option deprecated. [ 215.782511][T11663] Use struct sctp_assoc_value instead [ 215.867411][T11664] syz.4.1700 (11664) used greatest stack depth: 18416 bytes left [ 215.882322][T11559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.914337][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.935229][T11669] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 215.973131][T11559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.027971][T11559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.062470][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.109330][T11559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.128731][ T5233] Bluetooth: hci2: command tx timeout [ 216.232140][T11559] hsr_slave_0: entered promiscuous mode [ 216.259567][T11559] hsr_slave_1: entered promiscuous mode [ 216.271937][T11559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.283588][T11559] Cannot create hsr debugfs directory [ 216.489766][T11698] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1705'. [ 216.756845][T11655] chnl_net:caif_netlink_parms(): no params data found [ 216.849047][ T5233] Bluetooth: hci6: command tx timeout [ 216.933533][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.944727][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.953059][T11655] bridge_slave_0: entered allmulticast mode [ 216.962131][T11655] bridge_slave_0: entered promiscuous mode [ 216.971277][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.978774][T11655] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.986069][T11655] bridge_slave_1: entered allmulticast mode [ 216.993418][T11655] bridge_slave_1: entered promiscuous mode [ 217.135695][T11655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.162286][T11655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.245761][T11655] team0: Port device team_slave_0 added [ 217.257582][T11655] team0: Port device team_slave_1 added [ 217.396830][T11655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.404249][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.431347][T11655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.474949][T11721] syzkaller0: entered promiscuous mode [ 217.480948][T11721] syzkaller0: entered allmulticast mode [ 217.488130][T11723] netlink: 'syz.4.1710': attribute type 10 has an invalid length. [ 217.499318][T11723] syz_tun: entered promiscuous mode [ 217.514556][T11723] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 217.559158][T11655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.572524][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.614696][T11729] netlink: 'syz.4.1711': attribute type 3 has an invalid length. [ 217.622742][T11729] __nla_validate_parse: 1 callbacks suppressed [ 217.622757][T11729] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1711'. [ 217.624071][T11655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.662149][T11559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.717101][T11559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.209104][ T5233] Bluetooth: hci2: command tx timeout [ 218.928741][ T5233] Bluetooth: hci6: command tx timeout [ 219.613708][T11559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.647096][T11655] hsr_slave_0: entered promiscuous mode [ 219.736027][T11655] hsr_slave_1: entered promiscuous mode [ 219.754025][T11655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.770742][T11655] Cannot create hsr debugfs directory [ 219.785096][T11559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.083441][T11757] netlink: 'syz.4.1716': attribute type 2 has an invalid length. [ 220.129309][T11757] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 220.158622][T11757] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1716'. [ 220.244726][T11757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1716'. [ 220.290210][ T5233] Bluetooth: hci2: command tx timeout [ 220.339738][T11655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.351077][T11655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.389168][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 220.533439][T11655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.555533][T11655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.608053][T11559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.715672][T11655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.735177][T11655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.760896][T11559] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.810498][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.817689][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.864334][T11655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.881897][T11655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.980925][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.988106][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.013498][ T5233] Bluetooth: hci6: command tx timeout [ 221.107639][T11794] bond0: (slave syz_tun): Releasing backup interface [ 221.252852][T11559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.296795][T11559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.425926][ T5252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.445500][ T5252] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.454583][ T5252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.476284][ T5252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.499586][ T5252] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.508262][ T5252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.578118][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 221.740431][T11655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.784689][T11811] lo speed is unknown, defaulting to 1000 [ 221.818597][T11655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.854587][T11655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.923045][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1727'. [ 221.949114][T11655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.043318][T11559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.345927][T11559] veth0_vlan: entered promiscuous mode [ 222.372376][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 222.426201][T11853] netlink: 'syz.2.1733': attribute type 2 has an invalid length. [ 222.435533][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1733'. [ 222.566194][T11655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.596613][T11559] veth1_vlan: entered promiscuous mode [ 222.612514][T11863] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 222.626608][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1735'. [ 222.637130][T11863] ipvlan1: entered promiscuous mode [ 222.642799][T11863] ipvlan1: entered allmulticast mode [ 222.651621][T11863] bridge0: port 4(ipvlan1) entered blocking state [ 222.658245][T11863] bridge0: port 4(ipvlan1) entered disabled state [ 222.666491][T11863] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 222.765828][T11811] chnl_net:caif_netlink_parms(): no params data found [ 222.815857][T11655] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.928303][T11559] veth0_macvtap: entered promiscuous mode [ 222.984733][T11875] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 222.994310][T11875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1740'. [ 223.006542][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.013715][ T5705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.072006][T11559] veth1_macvtap: entered promiscuous mode [ 223.089763][ T5252] Bluetooth: hci6: command tx timeout [ 223.107959][ T5703] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.115178][ T5703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.137009][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.144713][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.152455][T11811] bridge_slave_0: entered allmulticast mode [ 223.160625][T11811] bridge_slave_0: entered promiscuous mode [ 223.173592][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.186773][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.196969][T11811] bridge_slave_1: entered allmulticast mode [ 223.214810][T11811] bridge_slave_1: entered promiscuous mode [ 223.248791][T11881] netlink: 'syz.4.1742': attribute type 6 has an invalid length. [ 223.283886][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.320058][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.397215][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.410752][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.422471][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.434284][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.445016][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.461824][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.475193][T11559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.501072][T11811] team0: Port device team_slave_0 added [ 223.524081][T11886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 223.536350][T11886] batman_adv: batadv0: Adding interface: ip6gretap1 [ 223.543478][T11886] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.569705][ T5252] Bluetooth: hci7: command tx timeout [ 223.570418][T11886] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 223.602535][T11811] team0: Port device team_slave_1 added [ 223.685275][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.696814][T11890] netlink: zone id is out of range [ 223.702144][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.736157][T11890] netlink: set zone limit has 4 unknown bytes [ 223.766314][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.811365][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.831992][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.842575][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.853798][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.863851][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.874539][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.884881][T11559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.904535][T11559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.916724][T11559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.926981][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.935258][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.962833][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.053248][T11559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.073134][T11559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.096938][T11559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.106829][T11559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.133061][T11811] hsr_slave_0: entered promiscuous mode [ 224.142256][T11811] hsr_slave_1: entered promiscuous mode [ 224.166142][T11811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.181117][T11811] Cannot create hsr debugfs directory [ 224.207066][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 224.561994][ T5702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.582727][ T5702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.644180][T11655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.660639][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.669647][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.723714][T11811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.743180][T11811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.881206][T11811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.893255][T11811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.941193][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1750'. [ 225.053998][T11811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.069799][T11811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.105774][T11655] veth0_vlan: entered promiscuous mode [ 225.136656][T11655] veth1_vlan: entered promiscuous mode [ 225.174975][T11929] ebt_among: src integrity fail: 30a [ 225.198638][T11811] bond0: (slave netdevsim0): Releasing backup interface [ 225.211247][T11811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.224854][T11811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.373361][ T5703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.514070][ T5703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.543384][T11655] veth0_macvtap: entered promiscuous mode [ 225.607004][ T5703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.623414][T11655] veth1_macvtap: entered promiscuous mode [ 225.649026][ T5252] Bluetooth: hci7: command tx timeout [ 225.658257][T11811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.673241][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.685051][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.696430][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.707276][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.717815][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.728392][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.738200][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.749818][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.761584][T11655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.774403][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.786731][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.797516][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.811071][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.821077][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.831546][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.842446][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.853007][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.862902][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.874977][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.887137][T11655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.894880][T11811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.906149][T11811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.945381][ T5703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.965410][T11655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.982997][T11655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.995727][T11655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.004699][T11655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.015417][T11811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.230825][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.240243][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.357946][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.381516][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.411823][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1755'. [ 226.480333][ T5703] bridge_slave_1: left allmulticast mode [ 226.486021][ T5703] bridge_slave_1: left promiscuous mode [ 226.530194][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.541865][ T5703] bridge_slave_0: left allmulticast mode [ 226.547557][ T5703] bridge_slave_0: left promiscuous mode [ 226.579468][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.588239][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.600686][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.612898][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.621677][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.629794][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.638051][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.867550][T11956] netlink: 'syz.3.1759': attribute type 2 has an invalid length. [ 226.877319][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 227.160120][ T5703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.173352][ T5703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.185402][ T5703] bond0 (unregistering): Released all slaves [ 227.203247][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 227.386053][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.437012][T11943] lo speed is unknown, defaulting to 1000 [ 227.564756][T11811] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.734436][ T5252] Bluetooth: hci7: command tx timeout [ 227.749894][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.757107][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.947363][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.954586][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.974679][T11239] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 228.013904][ T5246] ================================================================== [ 228.022014][ T5246] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.030727][ T5246] Read of size 8 at addr ffff88814077ed18 by task kworker/u9:4/5246 [ 228.038721][ T5246] [ 228.041087][ T5246] CPU: 1 UID: 0 PID: 5246 Comm: kworker/u9:4 Not tainted 6.11.0-rc5-syzkaller-00151-gfe1910f9337b #0 [ 228.051955][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.062018][ T5246] Workqueue: hci0 hci_cmd_sync_work [ 228.067251][ T5246] Call Trace: [ 228.070536][ T5246] [ 228.073476][ T5246] dump_stack_lvl+0x241/0x360 [ 228.078172][ T5246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.083381][ T5246] ? __pfx__printk+0x10/0x10 [ 228.087976][ T5246] ? _printk+0xd5/0x120 [ 228.092145][ T5246] ? __virt_addr_valid+0x183/0x530 [ 228.097261][ T5246] ? __virt_addr_valid+0x183/0x530 [ 228.102384][ T5246] print_report+0x169/0x550 [ 228.106906][ T5246] ? __virt_addr_valid+0x183/0x530 [ 228.112027][ T5246] ? __virt_addr_valid+0x183/0x530 [ 228.117151][ T5246] ? __virt_addr_valid+0x45f/0x530 [ 228.122271][ T5246] ? __phys_addr+0xba/0x170 [ 228.126781][ T5246] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.132679][ T5246] kasan_report+0x143/0x180 [ 228.137178][ T5246] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.143066][ T5246] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.148776][ T5246] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 228.155178][ T5246] hci_cmd_sync_work+0x22b/0x400 [ 228.160103][ T5246] ? process_scheduled_works+0x945/0x1830 [ 228.165807][ T5246] process_scheduled_works+0xa2c/0x1830 [ 228.171352][ T5246] ? __pfx_process_scheduled_works+0x10/0x10 [ 228.177325][ T5246] ? assign_work+0x364/0x3d0 [ 228.181902][ T5246] worker_thread+0x86d/0xd10 [ 228.186492][ T5246] ? __kthread_parkme+0x169/0x1d0 [ 228.191504][ T5246] ? __pfx_worker_thread+0x10/0x10 [ 228.196603][ T5246] kthread+0x2f0/0x390 [ 228.200664][ T5246] ? __pfx_worker_thread+0x10/0x10 [ 228.205763][ T5246] ? __pfx_kthread+0x10/0x10 [ 228.210341][ T5246] ret_from_fork+0x4b/0x80 [ 228.214744][ T5246] ? __pfx_kthread+0x10/0x10 [ 228.219332][ T5246] ret_from_fork_asm+0x1a/0x30 [ 228.224102][ T5246] [ 228.227105][ T5246] [ 228.229414][ T5246] Allocated by task 11090: [ 228.233811][ T5246] kasan_save_track+0x3f/0x80 [ 228.238488][ T5246] __kasan_kmalloc+0x98/0xb0 [ 228.243074][ T5246] __kmalloc_cache_noprof+0x19c/0x2c0 [ 228.248428][ T5246] mgmt_pending_new+0x65/0x250 [ 228.253180][ T5246] mgmt_pending_add+0x36/0x120 [ 228.257927][ T5246] remove_adv_monitor+0x102/0x1b0 [ 228.262931][ T5246] hci_mgmt_cmd+0xc47/0x11d0 [ 228.267506][ T5246] hci_sock_sendmsg+0x7b8/0x11c0 [ 228.272426][ T5246] __sock_sendmsg+0x221/0x270 [ 228.277089][ T5246] sock_write_iter+0x2dd/0x400 [ 228.281839][ T5246] vfs_write+0xa72/0xc90 [ 228.286065][ T5246] ksys_write+0x1a0/0x2c0 [ 228.290383][ T5246] do_syscall_64+0xf3/0x230 [ 228.294869][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.300749][ T5246] [ 228.303056][ T5246] Freed by task 11531: [ 228.307100][ T5246] kasan_save_track+0x3f/0x80 [ 228.311764][ T5246] kasan_save_free_info+0x40/0x50 [ 228.316767][ T5246] poison_slab_object+0xe0/0x150 [ 228.321691][ T5246] __kasan_slab_free+0x37/0x60 [ 228.326445][ T5246] kfree+0x149/0x360 [ 228.330324][ T5246] mgmt_pending_foreach+0xd1/0x130 [ 228.335424][ T5246] __mgmt_power_off+0x187/0x420 [ 228.340257][ T5246] hci_dev_close_sync+0x665/0x11a0 [ 228.345354][ T5246] hci_dev_close+0x112/0x210 [ 228.349925][ T5246] sock_do_ioctl+0x158/0x460 [ 228.354501][ T5246] sock_ioctl+0x629/0x8e0 [ 228.358901][ T5246] __se_sys_ioctl+0xfc/0x170 [ 228.363483][ T5246] do_syscall_64+0xf3/0x230 [ 228.367968][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.373847][ T5246] [ 228.376154][ T5246] The buggy address belongs to the object at ffff88814077ed00 [ 228.376154][ T5246] which belongs to the cache kmalloc-96 of size 96 [ 228.390015][ T5246] The buggy address is located 24 bytes inside of [ 228.390015][ T5246] freed 96-byte region [ffff88814077ed00, ffff88814077ed60) [ 228.403618][ T5246] [ 228.405926][ T5246] The buggy address belongs to the physical page: [ 228.412321][ T5246] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14077e [ 228.421151][ T5246] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 228.428424][ T5246] page_type: 0xfdffffff(slab) [ 228.433082][ T5246] raw: 057ff00000000000 ffff88801ac41280 ffffea0000c8d240 dead000000000002 [ 228.441650][ T5246] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 228.450209][ T5246] page dumped because: kasan: bad access detected [ 228.456606][ T5246] page_owner tracks the page as allocated [ 228.462297][ T5246] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 10485, tgid 10485 (syz-executor), ts 185564067485, free_ts 108475768921 [ 228.483470][ T5246] post_alloc_hook+0x1f3/0x230 [ 228.488225][ T5246] get_page_from_freelist+0x2e4c/0x2f10 [ 228.493757][ T5246] __alloc_pages_noprof+0x256/0x6c0 [ 228.498944][ T5246] alloc_slab_page+0x5f/0x120 [ 228.503605][ T5246] allocate_slab+0x5a/0x2f0 [ 228.508098][ T5246] ___slab_alloc+0xcd1/0x14b0 [ 228.512757][ T5246] __slab_alloc+0x58/0xa0 [ 228.517072][ T5246] __kmalloc_cache_node_noprof+0x20c/0x300 [ 228.522863][ T5246] alloc_workqueue+0x83e/0x1fe0 [ 228.527701][ T5246] wg_newlink+0x208/0x640 [ 228.532013][ T5246] rtnl_newlink+0x1591/0x20a0 [ 228.536679][ T5246] rtnetlink_rcv_msg+0x73f/0xcf0 [ 228.541608][ T5246] netlink_rcv_skb+0x1e3/0x430 [ 228.546470][ T5246] netlink_unicast+0x7f6/0x990 [ 228.551222][ T5246] netlink_sendmsg+0x8e4/0xcb0 [ 228.555969][ T5246] __sock_sendmsg+0x221/0x270 [ 228.560639][ T5246] page last free pid 46 tgid 46 stack trace: [ 228.566603][ T5246] free_unref_page+0xd22/0xea0 [ 228.571356][ T5246] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 228.577065][ T5246] __apply_to_page_range+0x8a8/0xe50 [ 228.582336][ T5246] kasan_release_vmalloc+0x9a/0xb0 [ 228.587432][ T5246] purge_vmap_node+0x3e3/0x770 [ 228.592179][ T5246] __purge_vmap_area_lazy+0x708/0xae0 [ 228.597534][ T5246] drain_vmap_area_work+0x27/0x40 [ 228.602540][ T5246] process_scheduled_works+0xa2c/0x1830 [ 228.608068][ T5246] worker_thread+0x86d/0xd10 [ 228.612643][ T5246] kthread+0x2f0/0x390 [ 228.616696][ T5246] ret_from_fork+0x4b/0x80 [ 228.621102][ T5246] ret_from_fork_asm+0x1a/0x30 [ 228.625859][ T5246] [ 228.628163][ T5246] Memory state around the buggy address: [ 228.633771][ T5246] ffff88814077ec00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 228.641813][ T5246] ffff88814077ec80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 228.649857][ T5246] >ffff88814077ed00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 228.657896][ T5246] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.662724][ T5246] ffff88814077ed80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 228.670767][ T5246] ffff88814077ee00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 228.678805][ T5246] ================================================================== [ 228.738505][ T5252] Bluetooth: hci2: command tx timeout [ 228.797074][ T5246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.804311][ T5246] CPU: 1 UID: 0 PID: 5246 Comm: kworker/u9:4 Not tainted 6.11.0-rc5-syzkaller-00151-gfe1910f9337b #0 [ 228.815177][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.825330][ T5246] Workqueue: hci0 hci_cmd_sync_work [ 228.830552][ T5246] Call Trace: [ 228.833834][ T5246] [ 228.836769][ T5246] dump_stack_lvl+0x241/0x360 [ 228.841463][ T5246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.846675][ T5246] ? __pfx__printk+0x10/0x10 [ 228.851276][ T5246] ? preempt_schedule+0xe1/0xf0 [ 228.856136][ T5246] ? vscnprintf+0x5d/0x90 [ 228.860479][ T5246] panic+0x349/0x860 [ 228.864381][ T5246] ? check_panic_on_warn+0x21/0xb0 [ 228.869590][ T5246] ? __pfx_panic+0x10/0x10 [ 228.874009][ T5246] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 228.880011][ T5246] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.886359][ T5246] ? print_report+0x502/0x550 [ 228.891068][ T5246] check_panic_on_warn+0x86/0xb0 [ 228.896026][ T5246] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.901947][ T5246] end_report+0x77/0x160 [ 228.906204][ T5246] kasan_report+0x154/0x180 [ 228.910727][ T5246] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.916643][ T5246] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 228.922396][ T5246] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 228.928829][ T5246] hci_cmd_sync_work+0x22b/0x400 [ 228.933942][ T5246] ? process_scheduled_works+0x945/0x1830 [ 228.939709][ T5246] process_scheduled_works+0xa2c/0x1830 [ 228.945305][ T5246] ? __pfx_process_scheduled_works+0x10/0x10 [ 228.951289][ T5246] ? assign_work+0x364/0x3d0 [ 228.955877][ T5246] worker_thread+0x86d/0xd10 [ 228.960463][ T5246] ? __kthread_parkme+0x169/0x1d0 [ 228.965478][ T5246] ? __pfx_worker_thread+0x10/0x10 [ 228.970578][ T5246] kthread+0x2f0/0x390 [ 228.974640][ T5246] ? __pfx_worker_thread+0x10/0x10 [ 228.979742][ T5246] ? __pfx_kthread+0x10/0x10 [ 228.984322][ T5246] ret_from_fork+0x4b/0x80 [ 228.988733][ T5246] ? __pfx_kthread+0x10/0x10 [ 228.993339][ T5246] ret_from_fork_asm+0x1a/0x30 [ 228.998121][ T5246] [ 229.001241][ T5246] Kernel Offset: disabled [ 229.005557][ T5246] Rebooting in 86400 seconds..