last executing test programs: 4.175224938s ago: executing program 4 (id=771): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x6) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000080)=0x8) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, 0x0, 0x0) (async) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r8, 0x0, {0x2, 0xff}, 0xff}, 0x18) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r11 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) socket$key(0xf, 0x3, 0x2) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x4c}}, 0x4000) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r8, 0x4, {0x1, 0x0, 0x4}, 0xfd}, 0x18) 4.059556685s ago: executing program 4 (id=773): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x850) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 3.984334901s ago: executing program 4 (id=775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000002000010000000000000000000a801400000000070000000014000200fc02c9ecde2a00000000000000000001080006000700000014000200"], 0x68}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340"], 0xf0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 3.823046746s ago: executing program 4 (id=778): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff8, 0xf}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}}, 0x0) 3.565040892s ago: executing program 4 (id=783): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000440)='&O', 0x2, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x200}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x780}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x1ff]}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.560964751s ago: executing program 4 (id=805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0x10, @ah_ip4_spec={@remote, @rand_addr=0x64010101, 0x0, 0x10}, @hdata="8affa774cba1e6b2d9c6589c53f8e1d096af3fdc03262960508561e7bf8cfdd94d453a0f6f4bd27f688e2d4810e0597af74ed2cc240bc95990fe7e7dde62262af84c96497b8923f9", 0x1, 0xd, 0x9, 0xfffffffffffffffb, 0xffffffffffffffff}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x4084) 2.251415671s ago: executing program 0 (id=809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000007c0)="4afa9b5779d9e9a51830bc5baad392370c58fbe0e8ca5a0449d85e4abfb6f6989056c1bade0c82fd16999f9a22bb3b451dfe3c751f5cbab2abb740fc196599fdd77c0bafe7214a99a5e4aa60e5c0a2cb96bf86efbc3f18af5078c2dc9512a2973da71c27d1dd763ed5cd74c984aa79ee62b41f21da82a59a3841d97acc51eeff73764be4732f6c0033233bad232502d35c9fd7c75fab39892ef82897d97bb1b1c4f9a1d46e2d1f1a481a4d7687adfe20d7e4c8f93a14b4eafc66862e9c27a15d194017c6921e38bca9f1f3161588a3ab0147f7a385fb189254a4b8b2c2698d660a48422db0102f81af2f200a5ca991ca76c02ad09958c3b98e440181f220435a4d09dde42d0bc5ab3f4000c3353ac4572f171a937154d5f6618662a6b5cc119edb36ea137da02fd36f3a41b9ba5f878dbf3b1064dbf5fb906a0a96595ca3b15e2e795047c861f7aad3a8c42a1025f8f6d0603dd1078987f9197e6bbd80db396b39941ee1f22c0d62383a6bd5353f0173c5279f8424401253b60f8b693539ecd3c113f689cb5f91c343f0ebfb5285f3722f90b91571a97c63f7229bdaf236b4ce0888c055acbaa645eac9dca37f41f08eebed02542f1e74d239ee8ae403da41a6eeea24d0fd71baa3e367769fb26ebd73aa91949596e16a04d8be90cf0d5e9a6f55c27b21ffadfe2b13f3b22f5a23d22c984238d1eaab57c61062de6ff78388705ed79ddce4948363a607fe176d591cb3bcefd9fbcb15c8245af822b09f4e8f698d166eae72b0a289b0374ee19b257f459235224fde49589f439aacd8039cecdc44ae9009e1a081bfbe7053416f95db4be0c5a38c08067d5aa5551c0de9f0ac42f16bb7b6aaf02fa029d5da1590131346c3347406ac4c31573b96852b8b2cd891c986e27e91a63e28ec55a9ae24717f09d2fe8815e585113d7b83ed0560ec83caef3b3fa136bb422147a183809a95014a8e8e777d95c469f7beada572b521d82d360815d332a55c499faeb70f8f7dc8a35a0e0cff53a20cf2e4bde242f0a16e30eaf57607c402e19d28146bb3f41031f60e2c89dacd38372c243c8a8baa0cd497253917a7ff0ac6a0e05dd9651cf6a45f5527d0d7f1987f80ca2d359a3e0fb635f4d4b56c1903d171154d0e383943fa90b184baf3aa8b43f72e69e9104a288b898ed563d2600eca07cf64a409819467629c6e7e2961a4591004c0f14562b3f02854bdaad198cdb1bd9aa6195148ae47dc590bff290b80e790278c7c90e2a2b1ee7cae48f2a6db20a1927d4f3f8a13b997ccdaebbe738c37a83383af0651d5cfad8322455176dd30e5e540aefe2b58e2532a2c0c472bbeb55ca0b25f035cd4003adfac6f69a9a326a1322a82dbb1b6949d55d58c391445f913582b17ed497b508ab75097d75ee5654fe2d0b835c8e3139ec0a30ae7b14066d8c0c3ee5eeaa9df397ecf823595747e22f501df09cd9a9ac084288e46c573dc008e6b42dc3f5d9c934a7af8cd49ab3b63e740cce809fb8261c788694c4d8308aa2fa61d1c96d3b34f522da6baa1a8b756eae09844341d5423ccc6a74d7eb8d4db6aadd39c8d0904c5393a4b63bee507001702d75f9f7e66ac172eb975e660f20bb6bd56b9a0d718d5f3c8ba71daae0998c8756d17b561e843249efd273cfe7b633b3e5552dc77effd455de4cc5ef54cf51986c41f9b2d21af7227ae4e57f437d53a024d98efd89bd3bfe2e3b7375a5edf327ac8f016701ac36f53b21cb6dafa6137b7550e078a485e2438531ee0526ee56802d93b5ec88522893f667d5d7022e1d3d0d518214bae03d9004441a3f462ad7a434489f3ebf36dc7f64c18faff6b3dcf9a73952aa6c8d0c999fbc0ec22bc7cae457ad1590801f6a157794b6f559d2020c983bc89772c6d563d902d4f2f2130be9b5a122dc8c9c27cdc0773f2d8d4db93746c435009b47a5de46ea6574558b4384312f09231695aed0a123dfb3d65d12d4d9d166e56b45b80cd9bd379b8d10759c5f590fc9a68ca5aadbc64fd1da53701b286b84040eb761987715d3606064ac7e048d6e643da8c6cc4864670b80551b50acc27d28b56766d1df8461c09b2d17c5453964737b4f5dfbe0cee371feb856bae0aaa92c85f9771b84659f8d67b8cde87f7e021c02115380ff6c7ab17fba16818082b112d750845ce91dd5a8e55072182ce0171049fd92fe6476fff5950025fd947a15df326d21a3760f5bb21a09d675175254cbf431ea655d31005e53515a8c633c34da993b847392ed730d5a580f0d8fe4b9f9d15ed106125416eb507e1f4adf944bb0c024891ff129ce871facadc737e39deebca38a2eb2a34193445e61f7b20524d2fc5b4d4e5d75be837a04d11f935a612f1b77ce3ea19e957826200ae76e28c63afe9baf700675d0db47490189af6bbd69564b73dc0d5f0150ae271f79a7dd5e0eb0913c6b827452b77b81c538d6a6ba639386ea42793dfa70e15698fd20df36d5f0ca7bd9930e69d41b7b3fbd9c6bf0b7b0b83366fe082587339b7cb34d9d35710be67721ddb55bcf70d14272d37a45933dde82ff31de9d29164900a6f1abdd90dd85ebc139d7fca5e38827c28c95e1178b79626cc5416cfb682d855bc607caf941d6857f974b36273cb9e178202918bd2cc1cf8adb78c4753b77950c6f020974ea0eeed55a3c835d06282253936ec30af7aca3edd170c9b53aeca654f08a8dfa7bb93d29eab1756d6b0f42c9a4d795b4f25660b4d3147b18658c11695b5bf1e3e5e0eb97317691878b3219c08890f552d716697ff745a36e190070584dd47c58a0fc19cab662d356dbf1ab5098a0f074945f71ed8f523839148e56af1a3d8c25b94b83b3ffa0d9878166f2e84630a8ed52967557afe2e044379b86582920600f7f1240ba8cc16895fbd0198140ac017319d2b2cf9634b0dc148c31ef4550930afa94b05283a39f28463e0e45d0561f48e03b71dc802d59eb5e4a43187d25c267010284f", 0x841}], 0x37}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.179107652s ago: executing program 1 (id=811): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') r1 = socket(0x21, 0x2, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x110, 0x4e, 0x0, 0x20000000) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x49, 0x7, 0x1, 0x96e}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 2.064114846s ago: executing program 2 (id=812): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x11, 0x0, &(0x7f0000002580)) sendmsg$NFT_BATCH(r1, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000700000018001680bd"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {0x4}, {0x7, 0x0, 0x4}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x78}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x25]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.937019702s ago: executing program 1 (id=813): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000440)={&(0x7f0000000840)={0x1d, r3, 0x0, {0x0, 0x0, 0x5}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x408d5}, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x5) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) connect$rds(r5, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r6, 0x34, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'dvmrp0\x00'}}, 0x1e) 1.781918288s ago: executing program 2 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fff8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x1, 0x81, 0x6, 0x2, 0x2]}}]}]}]}, 0x3c}}, 0x0) 1.745952586s ago: executing program 0 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x204c801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000000010000000000080000000000010000050d00000004000000020000000000000000000000da00"], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x204c801}, 0x4000000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000000010000000000080000000000010000050d00000004000000020000000000000000000000da00"], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) 1.525001671s ago: executing program 1 (id=816): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6}}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x800}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1.524578317s ago: executing program 2 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="000091000180c20000001f000000000088a8000086dd"], 0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c", @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.41406602s ago: executing program 1 (id=819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1e0101000000000000000000000000000008003300000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f44f000008001d00000000000c0008"], 0x10c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xee) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000000c0)=0x6, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124d00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) listen(r2, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x8920, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendto$inet(r1, &(0x7f0000000280)="6784f7b3a705c0118b8eb713cdb29423859dc23e38c7fcd3d228fe04d0e6dd1ac21c7afc47d46532597cf741b07d7bbfa22b041ed2cc9b4ed95f84cee47e61e213a34a2cf9eb48b44758a9e48da350d425ad393d627174ca21115f8b1a", 0x5d, 0xc89d, 0x0, 0x1a) 1.21292979s ago: executing program 2 (id=820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf25040000000800020002000000080002000200ea040800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="0a727199046bc634644269fb1aa53661b58bcf3f0ed3f018196d95204f96e0a519cbb4ae273248afcbd8e3cb9f4bf0b70cd79f1d9ba699f87508517963c426535006529a8e60f487a26b6ea399df669f07284e164be40638361c3fa34079659ec06be48dee7bc26ac820b2afbdb14d121e41519738b925eb1aaa92", @ANYRESOCT=r1], 0x4c}, 0x8, 0x3000000000002}, 0x2c004000) 805.05407ms ago: executing program 3 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2a8059fd9ecb993feabf9ee4296b882324000000c3", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xe8, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xeeb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x301}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x380}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_KEYS={0x68, 0x51, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "bdc46bc7d9e009fba28d186c"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x8, 0x4, "b10184be"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d8bbb65d02ac6dcb29dd3f2336"}]}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x77}, {0x78}, {0x30}, {0x1b}, {0x48, 0x1}, {0x60, 0x1}, {0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x30, 0x1}, {0x30}, {0x30, 0x1}, {0x1b}, {0x6c, 0x1}, {0x18, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x2, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0x24, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x9, 0x1}, {0x6c, 0x1}, {0x4, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40800}, 0x4008844) sendmmsg$alg(r4, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xd8}], 0x1, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="00f99000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000000000100050380e6060000000500a2000500000008000c006400000008000d0000000000"], 0x64}}, 0x0) 803.818801ms ago: executing program 0 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r4, 0x0, {0x2, 0xff}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x3c) setsockopt(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x7, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34517, 0x59c0}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xfffffffffffffeb8, 0x4, @multicast}, {0xa, 0x4, @multicast}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x4c5}]}, 0x98}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r8, 0x0, 0x5, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa'}, 0x30) 751.068007ms ago: executing program 3 (id=826): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r3}, 0x10) sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000480)=""/203, &(0x7f0000000100)=0xcb) 669.690681ms ago: executing program 3 (id=827): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c5}, 0x20004004) 524.887133ms ago: executing program 3 (id=828): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bea}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4042481}, 0xc008880) 490.730957ms ago: executing program 1 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x1, 0x81, 0x6, 0x2, 0x2]}}]}]}]}, 0x44}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r4, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18002004}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 400.919054ms ago: executing program 0 (id=830): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100), &(0x7f00000002c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff8b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 312.811195ms ago: executing program 3 (id=831): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) (async) 262.098662ms ago: executing program 2 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d99", 0x3}], 0x1}}], 0x2, 0x0) (async) shutdown(r3, 0x1) (async) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010000000000000000000000000010000300686173683a69702c6d616a92adc4e055bca17a32000000000c0007800800080000000000050001000700000005000400000000000500050002000000"], 0x54}}, 0x0) 214.694078ms ago: executing program 0 (id=833): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e1b, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}], 0x1, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r2, r3, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 121.470026ms ago: executing program 1 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4, @void, @void, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x1, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x20000020) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a"], 0x54}}, 0x0) writev(r2, &(0x7f0000000040), 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000000000000000000000a6c000000060a0b04000000000000000002000100400004803c0001800b00010065787468647200002c00028008000340800000000800014000000013050002000000000008000640000000020800044000000007090030000000000900020073797a3200000000140000001100d70586dc01000000000000000000519b97051705a3c623113354d18589a10714549640ad05c9c374c6c7c16fc6570abbe44b9d29aad3125cba13ebd948c9cec3c1cf006646e55c9f71d005995f1fb494720487662ee91d8ac081cd8c7353531a623a345ce76e"], 0x94}}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'io'}, {0x2d, 'rlimit'}, {0x2d, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'pids'}, {0x2b, 'memory'}, {0x2d, 'cpuacct'}]}, 0x34) 120.917476ms ago: executing program 3 (id=835): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x20, 0x7, 0x9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x0, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0xe, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x9, 0x3, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x2, 0x2, 0x0, 0x18, 0x10}, @generic={0x3, 0x4, 0x6, 0x3, 0xb}]}, &(0x7f0000000500)='syzkaller\x00', 0xdacf, 0xeb, &(0x7f00000006c0)=""/235, 0x41000, 0x0, '\x00', r1, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x437b, 0x40}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x2, 0x3, 0x0, 0x2}, {0x4, 0x4, 0x5, 0x9}, {0x2, 0x3, 0x0, 0x3}, {0x2, 0x1, 0xa, 0x6}, {0x1, 0x4, 0xc, 0x93970326822df249}, {0x1, 0x2, 0x3, 0xc}, {0x3, 0x3, 0x4, 0xc}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0xffffff24, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r7, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000980)=[0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0, 0xd3, &(0x7f0000001a80)=[{}], 0x8, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)="4ba72cc01d27f474d6e64cfd81685544f4ec3f08", 0x14}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000001000"/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r11, &(0x7f0000000a40)="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", &(0x7f0000000380)=""/12}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r12}, &(0x7f00000001c0), &(0x7f0000000200)=r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r14, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\v*V\x00', @ANYRES32=r6, @ANYBLOB="00000000001400002400128009000100626f6e64000000001400028008000300042000000800070001000000"], 0x44}}, 0x0) 53.999142ms ago: executing program 2 (id=836): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000ffe0f5058500000000000000ea31256a8ae29869d062eef6241f00000000000006"], &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) 0s ago: executing program 0 (id=837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, 0x0}, 0x31) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="3903464f1e000000000008002000080003005b"], 0x1c}}, 0x20000040) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x10010, r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x18, "e24174167de90d09b3017ce3a483569223b04b3160769598"}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x401, 0x7}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 52.713233][ T5816] cgroup: Unknown subsys name 'net' [ 52.830159][ T5816] cgroup: Unknown subsys name 'cpuset' [ 52.838783][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.125304][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.309787][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.318260][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.326570][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.332911][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.334822][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.344105][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.356275][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.365511][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.365585][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.382216][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.382294][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.390510][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.405647][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.413391][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.415588][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.421910][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.429378][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.440878][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.444044][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.450662][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.465697][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.468255][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.474289][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.483413][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.490984][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.496266][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.502672][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.509775][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.523782][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.532910][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.958367][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 56.968422][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 57.059449][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 57.138492][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 57.170954][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.179322][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.186742][ T5827] bridge_slave_0: entered allmulticast mode [ 57.194646][ T5827] bridge_slave_0: entered promiscuous mode [ 57.204335][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.211579][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.219265][ T5827] bridge_slave_1: entered allmulticast mode [ 57.225823][ T5827] bridge_slave_1: entered promiscuous mode [ 57.233003][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 57.293111][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.300483][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.308296][ T5826] bridge_slave_0: entered allmulticast mode [ 57.316102][ T5826] bridge_slave_0: entered promiscuous mode [ 57.341195][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.375954][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.384198][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.392011][ T5826] bridge_slave_1: entered allmulticast mode [ 57.398862][ T5826] bridge_slave_1: entered promiscuous mode [ 57.407547][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.467998][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.475226][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.482745][ T5829] bridge_slave_0: entered allmulticast mode [ 57.490404][ T5829] bridge_slave_0: entered promiscuous mode [ 57.535963][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.543782][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.552012][ T5829] bridge_slave_1: entered allmulticast mode [ 57.558951][ T5829] bridge_slave_1: entered promiscuous mode [ 57.568543][ T5827] team0: Port device team_slave_0 added [ 57.584744][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.596281][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.633793][ T5827] team0: Port device team_slave_1 added [ 57.651260][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.677339][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.684596][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.692279][ T5828] bridge_slave_0: entered allmulticast mode [ 57.699149][ T5828] bridge_slave_0: entered promiscuous mode [ 57.716418][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.739319][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.747313][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.754520][ T5831] bridge_slave_0: entered allmulticast mode [ 57.762125][ T5831] bridge_slave_0: entered promiscuous mode [ 57.769770][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.777784][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.784960][ T5828] bridge_slave_1: entered allmulticast mode [ 57.791991][ T5828] bridge_slave_1: entered promiscuous mode [ 57.815929][ T5826] team0: Port device team_slave_0 added [ 57.823727][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.836567][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.844866][ T5831] bridge_slave_1: entered allmulticast mode [ 57.852670][ T5831] bridge_slave_1: entered promiscuous mode [ 57.874846][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.882366][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.909114][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.922060][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.929409][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.955697][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.970707][ T5829] team0: Port device team_slave_0 added [ 57.978798][ T5826] team0: Port device team_slave_1 added [ 57.985981][ T5829] team0: Port device team_slave_1 added [ 58.041729][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.052051][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.059422][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.085809][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.099875][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.113890][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.132571][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.151275][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.158554][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.185075][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.211294][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.218715][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.245302][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.270938][ T5831] team0: Port device team_slave_0 added [ 58.293070][ T5828] team0: Port device team_slave_0 added [ 58.301451][ T5828] team0: Port device team_slave_1 added [ 58.308619][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.315954][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.344058][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.359261][ T5831] team0: Port device team_slave_1 added [ 58.399354][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.406549][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.434684][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.452331][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.460702][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.488508][ T5834] Bluetooth: hci2: command tx timeout [ 58.492902][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.510034][ T5827] hsr_slave_0: entered promiscuous mode [ 58.517251][ T5827] hsr_slave_1: entered promiscuous mode [ 58.533833][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.540957][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.567792][ T5834] Bluetooth: hci0: command tx timeout [ 58.573452][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.577061][ T5834] Bluetooth: hci4: command tx timeout [ 58.590767][ T5842] Bluetooth: hci1: command tx timeout [ 58.631676][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.638975][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.652513][ T5834] Bluetooth: hci3: command tx timeout [ 58.665914][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.688299][ T5826] hsr_slave_0: entered promiscuous mode [ 58.694732][ T5826] hsr_slave_1: entered promiscuous mode [ 58.701223][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.709217][ T5826] Cannot create hsr debugfs directory [ 58.724426][ T5829] hsr_slave_0: entered promiscuous mode [ 58.731350][ T5829] hsr_slave_1: entered promiscuous mode [ 58.737938][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.745511][ T5829] Cannot create hsr debugfs directory [ 58.827575][ T5828] hsr_slave_0: entered promiscuous mode [ 58.834223][ T5828] hsr_slave_1: entered promiscuous mode [ 58.841534][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.850105][ T5828] Cannot create hsr debugfs directory [ 58.861176][ T5831] hsr_slave_0: entered promiscuous mode [ 58.870325][ T5831] hsr_slave_1: entered promiscuous mode [ 58.877152][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.884717][ T5831] Cannot create hsr debugfs directory [ 59.174463][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.211426][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.247341][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.269078][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.300024][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.313613][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.339109][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.352887][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.371569][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.387448][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.416229][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.428736][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.516068][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.533016][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.550649][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.582730][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.633961][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.658367][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.682752][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.710459][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.733102][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.783277][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.802967][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.829556][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.837214][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.850446][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.858280][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.883471][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.920658][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.950351][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.958065][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.996463][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.003709][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.038249][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.112115][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.120601][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.133447][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.141220][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.161421][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.232474][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.284043][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.303030][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.344835][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.395916][ T5827] veth0_vlan: entered promiscuous mode [ 60.424488][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.433474][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.452666][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.497956][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.506699][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.534511][ T5827] veth1_vlan: entered promiscuous mode [ 60.551512][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.559336][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.569565][ T5834] Bluetooth: hci2: command tx timeout [ 60.582383][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.599859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.607421][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.637556][ T5834] Bluetooth: hci4: command tx timeout [ 60.643025][ T5834] Bluetooth: hci1: command tx timeout [ 60.646910][ T5842] Bluetooth: hci0: command tx timeout [ 60.684698][ T5827] veth0_macvtap: entered promiscuous mode [ 60.717681][ T5842] Bluetooth: hci3: command tx timeout [ 60.761677][ T5826] veth0_vlan: entered promiscuous mode [ 60.772693][ T5827] veth1_macvtap: entered promiscuous mode [ 60.821905][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.839372][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.859439][ T5826] veth1_vlan: entered promiscuous mode [ 60.900696][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.931026][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.943887][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962382][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973818][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.092400][ T5826] veth0_macvtap: entered promiscuous mode [ 61.165933][ T5826] veth1_macvtap: entered promiscuous mode [ 61.206243][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.234689][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.275907][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.293701][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.313851][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.331945][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.346484][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.360748][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.405758][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.405857][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.426213][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.434333][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.438400][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.457102][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.535553][ T5831] veth0_vlan: entered promiscuous mode [ 61.557393][ T5829] veth0_vlan: entered promiscuous mode [ 61.564358][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.569420][ T5828] veth0_vlan: entered promiscuous mode [ 61.580736][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.623473][ T5828] veth1_vlan: entered promiscuous mode [ 61.641090][ T5831] veth1_vlan: entered promiscuous mode [ 61.682570][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.719682][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.738230][ T5829] veth1_vlan: entered promiscuous mode [ 61.752458][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.819612][ T5831] veth0_macvtap: entered promiscuous mode [ 61.845628][ T5828] veth0_macvtap: entered promiscuous mode [ 61.887636][ T5831] veth1_macvtap: entered promiscuous mode [ 61.903565][ T5828] veth1_macvtap: entered promiscuous mode [ 61.939382][ T5829] veth0_macvtap: entered promiscuous mode [ 61.958859][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.979112][ T5829] veth1_macvtap: entered promiscuous mode [ 61.991581][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.006362][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.032419][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.044277][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.072247][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.092648][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.113135][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.130299][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.145565][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.161604][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.174113][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.186451][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.201846][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.251889][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.276472][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.293527][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.313040][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.331788][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.364546][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.380628][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.394480][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.413950][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.434041][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.450812][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.471954][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.515734][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.527178][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.539083][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.549929][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.573716][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.591204][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.603731][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.615105][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.626379][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.638575][ T5842] Bluetooth: hci2: command tx timeout [ 62.645434][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.657959][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.671241][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.683780][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.698978][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.717049][ T5842] Bluetooth: hci1: command tx timeout [ 62.725104][ T5842] Bluetooth: hci4: command tx timeout [ 62.729414][ T5834] Bluetooth: hci0: command tx timeout [ 62.747009][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.764121][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.774700][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.797647][ T5841] Bluetooth: hci3: command tx timeout [ 62.807986][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.821931][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.833433][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.846364][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.858709][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.874167][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.886597][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.901031][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.918247][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.935689][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.947732][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.959467][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.968814][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.081083][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 63.175538][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.205157][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.252013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.296184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.370640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.381955][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.409351][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.426221][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.514202][ T5940] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 63.529433][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.549264][ T5940] macvlan0: entered promiscuous mode [ 63.560386][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.573486][ T5940] macvlan0: entered allmulticast mode [ 63.609329][ T5940] veth1_vlan: entered allmulticast mode [ 63.622462][ T5944] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 63.631758][ T5940] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 63.656464][ T2209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.709022][ T2209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.003448][ T5953] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.106347][ T5959] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 64.141877][ T5959] netlink: 'syz.4.5': attribute type 9 has an invalid length. [ 64.177533][ T5959] netlink: 169588 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.246983][ T5963] Zero length message leads to an empty skb [ 64.392864][ T5969] dccp_xmit_packet: Payload too large (65475) for featneg. [ 64.757659][ T5841] Bluetooth: hci2: command tx timeout [ 64.818339][ T5841] Bluetooth: hci0: command tx timeout [ 64.824821][ T5841] Bluetooth: hci4: command tx timeout [ 64.830724][ T5841] Bluetooth: hci1: command tx timeout [ 64.878440][ T5842] Bluetooth: hci3: command tx timeout [ 65.007264][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 65.053504][ T6001] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ܻ}ءÑV§jPb= [ 65.079342][ T25] IPVS: starting estimator thread 0... [ 65.207710][ T6002] IPVS: using max 22 ests per chain, 52800 per kthread [ 65.273417][ T6007] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 65.474458][ T6006] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 65.508943][ T6023] netlink: 'syz.1.36': attribute type 8 has an invalid length. [ 65.526221][ T6024] sock: sock_timestamping_bind_phc: sock not bind to device [ 65.548636][ T6006] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 66.050316][ T6056] veth1_macvtap: left promiscuous mode [ 66.072751][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.136792][ T6056] macsec0: entered promiscuous mode [ 66.188856][ T6036] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39'. [ 66.259514][ T6036] veth1_macvtap: entered promiscuous mode [ 66.288270][ T6036] macsec0: left promiscuous mode [ 66.334138][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 66.450122][ T6076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 66.553437][ T6082] unsupported nlmsg_type 40 [ 66.757283][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 66.810958][ T6076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.46'. [ 66.932096][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 67.031587][ T6105] sctp: [Deprecated]: syz.0.54 (pid 6105) Use of int in max_burst socket option deprecated. [ 67.031587][ T6105] Use struct sctp_assoc_value instead [ 67.142630][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 67.721226][ T6140] netlink: 'syz.4.65': attribute type 12 has an invalid length. [ 68.074067][ T6158] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.649853][ T6198] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 68.724544][ T6198] __nla_validate_parse: 4 callbacks suppressed [ 68.724563][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.76'. [ 68.910866][ C1] Unknown status report in ack skb [ 69.119963][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.120861][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 69.156785][ T29] audit: type=1107 audit(1736750482.604:2): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tkUø0gP๞B [ 69.156785][ T29] y+]Q' [ 69.183519][ T6226] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 69.184430][ T6222] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 69.245157][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 69.410488][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 69.657636][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 69.743857][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 69.914943][ T6241] lo: entered allmulticast mode [ 70.480520][ T6288] netlink: 668 bytes leftover after parsing attributes in process `syz.1.94'. [ 70.521130][ T6288] netlink: 668 bytes leftover after parsing attributes in process `syz.1.94'. [ 70.943615][ T6312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.102'. [ 70.990056][ T6312] netlink: 72 bytes leftover after parsing attributes in process `syz.4.102'. [ 71.350633][ T6293] syzkaller1: entered promiscuous mode [ 71.371001][ T6293] syzkaller1: entered allmulticast mode [ 71.438909][ T6328] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 71.607640][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.252367][ T6358] netlink: 'syz.2.116': attribute type 11 has an invalid length. [ 72.371579][ T6360] x_tables: duplicate entry at hook 1 [ 73.484444][ T6409] Cannot find del_set index 4 as target [ 73.647262][ T6422] dummy0: entered promiscuous mode [ 73.665273][ T6422] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 74.454404][ T6464] __nla_validate_parse: 3 callbacks suppressed [ 74.454424][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'. [ 74.517468][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'. [ 74.539917][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 74.552504][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 74.575826][ T6472] netlink: 'syz.3.154': attribute type 7 has an invalid length. [ 74.585583][ T6472] netlink: 'syz.3.154': attribute type 8 has an invalid length. [ 74.600432][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 74.602941][ T6464] erspan0: entered promiscuous mode [ 74.624394][ T6464] batadv_slave_1: entered promiscuous mode [ 74.630280][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 74.649082][ T6471] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.653865][ T6472] erspan0: entered promiscuous mode [ 74.683013][ T6472] batadv_slave_1: entered promiscuous mode [ 74.694261][ T6472] gretap0: entered promiscuous mode [ 74.726729][ T6472] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 74.746980][ T6472] Cannot create hsr debugfs directory [ 74.778931][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.156'. [ 74.794641][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.157'. [ 74.842037][ T6483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.156'. [ 74.897520][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.156'. [ 74.920171][ T6490] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 75.146244][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.414829][ T6517] netlink: 'syz.3.162': attribute type 8 has an invalid length. [ 75.765510][ T6538] nbd: must specify an index to disconnect [ 76.268808][ T6567] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 76.724129][ T52] cfg80211: failed to load regulatory.db [ 78.066257][ T6662] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 78.186233][ T6674] netdevsim netdevsim0: Direct firmware load for . [ 78.186233][ T6674] failed with error -2 [ 78.223554][ T6674] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 78.223554][ T6674] [ 78.350935][ T6685] bridge0: port 3(hsr_slave_1) entered blocking state [ 78.377790][ T6685] bridge0: port 3(hsr_slave_1) entered disabled state [ 78.395391][ T6685] hsr_slave_1: entered allmulticast mode [ 78.426085][ T6685] hsr_slave_1: left allmulticast mode [ 78.579428][ T6701] team1: entered promiscuous mode [ 78.585225][ T6701] 8021q: adding VLAN 0 to HW filter on device team1 [ 78.752284][ T6713] tls_set_device_offload: netdev not found [ 78.981291][ T6725] nbd: socks must be embedded in a SOCK_ITEM attr [ 79.110080][ T6735] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 79.119703][ T6734] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 79.159433][ T6734] team0: Port device netdevsim0 added [ 79.317735][ T6745] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 79.334270][ T6734] syz.0.233 (6734) used greatest stack depth: 17936 bytes left [ 79.334368][ T6745] netlink: 'syz.2.236': attribute type 2 has an invalid length. [ 79.647694][ T8] IPVS: starting estimator thread 0... [ 79.752526][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.761070][ T6770] IPVS: using max 24 ests per chain, 57600 per kthread [ 79.774424][ T6779] __nla_validate_parse: 17 callbacks suppressed [ 79.774445][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'. [ 79.803273][ T6777] batadv_slave_1: entered allmulticast mode [ 80.027204][ T6795] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 80.084582][ T6799] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 80.134775][ T6799] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 80.412653][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 80.662675][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.761767][ T6842] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 81.022545][ T6858] netlink: 'syz.4.268': attribute type 32 has an invalid length. [ 81.161745][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'. [ 81.372602][ T6870] syzkaller0: entered promiscuous mode [ 81.390771][ T6870] syzkaller0: entered allmulticast mode [ 81.406566][ T6869] netlink: 'syz.4.272': attribute type 15 has an invalid length. [ 81.413378][ T6876] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 81.445535][ T6876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.273'. [ 81.486971][ T6876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.273'. [ 81.518834][ T6879] netlink: 72 bytes leftover after parsing attributes in process `syz.0.274'. [ 82.636987][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 83.620208][ T6897] openvswitch: netlink: IP tunnel dst address not specified [ 83.810635][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 83.901383][ T6902] openvswitch: netlink: IP tunnel dst address not specified [ 84.064504][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.074821][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.078322][ T6924] openvswitch: netlink: IP tunnel dst address not specified [ 84.132400][ T6924] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 84.167965][ T6924] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 84.176377][ T6924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.285'. [ 84.243483][ T6924] NCSI netlink: No device for ifindex 0 [ 84.275944][ T6936] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 84.723527][ T6957] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 84.732221][ T6946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.291'. [ 84.782987][ T6953] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 84.865070][ T6967] team0: Device hsr_slave_0 failed to register rx_handler [ 84.885336][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 84.901979][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 84.916322][ T6968] team0: Device hsr_slave_0 failed to register rx_handler [ 84.990305][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.067240][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.128965][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 85.241776][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 85.280364][ T6992] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 85.314118][ T7001] FAULT_INJECTION: forcing a failure. [ 85.314118][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 85.335932][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.1.304 Not tainted 6.13.0-rc6-syzkaller-00133-g47e55e4b410f #0 [ 85.343225][ T7004] x_tables: unsorted underflow at hook 1 [ 85.347973][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.348002][ T7001] Call Trace: [ 85.348011][ T7001] [ 85.348020][ T7001] dump_stack_lvl+0x241/0x360 [ 85.348060][ T7001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.348081][ T7001] ? __pfx__printk+0x10/0x10 [ 85.348104][ T7001] ? __kmalloc_noprof+0xb5/0x4c0 [ 85.348126][ T7001] ? __pfx___might_resched+0x10/0x10 [ 85.348143][ T7001] ? aa_get_newest_label+0xff/0x6f0 [ 85.348166][ T7001] should_fail_ex+0x3b0/0x4e0 [ 85.411904][ T7001] should_failslab+0xac/0x100 [ 85.417749][ T7001] __kmalloc_noprof+0xdd/0x4c0 [ 85.422553][ T7001] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 85.429432][ T7001] ? apparmor_capable+0x13b/0x1b0 [ 85.434829][ T7001] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 85.442289][ T7001] genl_rcv_msg+0x802/0xec0 [ 85.448050][ T7001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.453895][ T7001] ? __pfx_lock_acquire+0x10/0x10 [ 85.459153][ T7001] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 85.465960][ T7001] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 85.472082][ T7001] ? __pfx_nl80211_post_doit+0x10/0x10 [ 85.478712][ T7001] ? __pfx___might_resched+0x10/0x10 [ 85.485112][ T7001] netlink_rcv_skb+0x1e3/0x430 [ 85.490139][ T7001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.495320][ T7001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.501154][ T7001] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 85.508301][ T7001] genl_rcv+0x28/0x40 [ 85.512585][ T7001] netlink_unicast+0x7f6/0x990 [ 85.518050][ T7001] ? __pfx_netlink_unicast+0x10/0x10 [ 85.525563][ T7001] ? __virt_addr_valid+0x45f/0x530 [ 85.532881][ T7001] ? __phys_addr_symbol+0x2f/0x70 [ 85.538478][ T7001] ? __check_object_size+0x47a/0x730 [ 85.544141][ T7001] netlink_sendmsg+0x8e4/0xcb0 [ 85.550344][ T7001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.556446][ T7001] ? aa_sock_msg_perm+0x91/0x160 [ 85.563682][ T7001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.569295][ T7001] __sock_sendmsg+0x221/0x270 [ 85.574361][ T7001] ____sys_sendmsg+0x52a/0x7e0 [ 85.579254][ T7001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.585427][ T7001] ? __fget_files+0x2a/0x410 [ 85.591607][ T7001] ? __fget_files+0x2a/0x410 [ 85.596502][ T7001] __sys_sendmsg+0x269/0x350 [ 85.601213][ T7001] ? __pfx_lock_release+0x10/0x10 [ 85.606348][ T7001] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.611584][ T7001] ? __pfx_vfs_write+0x10/0x10 [ 85.616421][ T7001] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.622788][ T7001] ? do_syscall_64+0x100/0x230 [ 85.627711][ T7001] ? do_syscall_64+0xb6/0x230 [ 85.632431][ T7001] do_syscall_64+0xf3/0x230 [ 85.637056][ T7001] ? clear_bhb_loop+0x35/0x90 [ 85.641838][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.648992][ T7001] RIP: 0033:0x7f30b4585d29 [ 85.653534][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.673778][ T7001] RSP: 002b:00007f30b53ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.682300][ T7001] RAX: ffffffffffffffda RBX: 00007f30b4775fa0 RCX: 00007f30b4585d29 [ 85.690451][ T7001] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 85.698536][ T7001] RBP: 00007f30b53ea090 R08: 0000000000000000 R09: 0000000000000000 [ 85.706655][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.714687][ T7001] R13: 0000000000000000 R14: 00007f30b4775fa0 R15: 00007fff3816ec98 [ 85.722684][ T7001] [ 85.865400][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.307'. [ 85.996931][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 86.183615][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 86.201360][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 86.403655][ T7040] FAULT_INJECTION: forcing a failure. [ 86.403655][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 86.430481][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.0.320 Not tainted 6.13.0-rc6-syzkaller-00133-g47e55e4b410f #0 [ 86.442445][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.454541][ T7040] Call Trace: [ 86.458363][ T7040] [ 86.461436][ T7040] dump_stack_lvl+0x241/0x360 [ 86.469551][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.475712][ T7040] ? __pfx__printk+0x10/0x10 [ 86.480819][ T7040] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 86.487268][ T7040] ? __pfx___might_resched+0x10/0x10 [ 86.493305][ T7040] should_fail_ex+0x3b0/0x4e0 [ 86.498212][ T7040] should_failslab+0xac/0x100 [ 86.504302][ T7040] kmem_cache_alloc_node_noprof+0x77/0x380 [ 86.510406][ T7040] ? __alloc_skb+0x1c3/0x440 [ 86.515273][ T7040] __alloc_skb+0x1c3/0x440 [ 86.520505][ T7040] ? __pfx___alloc_skb+0x10/0x10 [ 86.526190][ T7040] ? netlink_ack_tlv_len+0x6e/0x200 [ 86.531988][ T7040] netlink_ack+0x145/0xa50 [ 86.537127][ T7040] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 86.543243][ T7040] ? __pfx_nl80211_post_doit+0x10/0x10 [ 86.550228][ T7040] ? __pfx___might_resched+0x10/0x10 [ 86.555752][ T7040] netlink_rcv_skb+0x262/0x430 [ 86.561425][ T7040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.566826][ T7040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.572683][ T7040] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 86.580158][ T7040] genl_rcv+0x28/0x40 [ 86.585131][ T7040] netlink_unicast+0x7f6/0x990 [ 86.591481][ T7040] ? __pfx_netlink_unicast+0x10/0x10 [ 86.598907][ T7040] ? __virt_addr_valid+0x45f/0x530 [ 86.604528][ T7040] ? __phys_addr_symbol+0x2f/0x70 [ 86.610732][ T7040] ? __check_object_size+0x47a/0x730 [ 86.616222][ T7040] netlink_sendmsg+0x8e4/0xcb0 [ 86.623341][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.628861][ T7040] ? aa_sock_msg_perm+0x91/0x160 [ 86.636279][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.642225][ T7040] __sock_sendmsg+0x221/0x270 [ 86.647500][ T7040] ____sys_sendmsg+0x52a/0x7e0 [ 86.653273][ T7040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.658775][ T7040] ? __fget_files+0x2a/0x410 [ 86.664500][ T7040] ? __fget_files+0x2a/0x410 [ 86.670695][ T7040] __sys_sendmsg+0x269/0x350 [ 86.676720][ T7040] ? __pfx_lock_release+0x10/0x10 [ 86.684072][ T7040] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.690103][ T7040] ? __pfx_vfs_write+0x10/0x10 [ 86.695488][ T7040] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.702634][ T7040] ? do_syscall_64+0x100/0x230 [ 86.708068][ T7040] ? do_syscall_64+0xb6/0x230 [ 86.712877][ T7040] do_syscall_64+0xf3/0x230 [ 86.717633][ T7040] ? clear_bhb_loop+0x35/0x90 [ 86.723391][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.729415][ T7040] RIP: 0033:0x7fa9c6d85d29 [ 86.735076][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.757497][ T7040] RSP: 002b:00007fa9c7beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.767163][ T7040] RAX: ffffffffffffffda RBX: 00007fa9c6f75fa0 RCX: 00007fa9c6d85d29 [ 86.775360][ T7040] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 86.783727][ T7040] RBP: 00007fa9c7beb090 R08: 0000000000000000 R09: 0000000000000000 [ 86.792251][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.801297][ T7040] R13: 0000000000000000 R14: 00007fa9c6f75fa0 R15: 00007ffceb1b43f8 [ 86.809477][ T7040] [ 86.915456][ T7046] netlink: 156 bytes leftover after parsing attributes in process `syz.0.323'. [ 87.080302][ T7053] tipc: Failed to remove unknown binding: 66,1,1/0:2205804843/2205804845 [ 87.136970][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 87.153578][ T7058] openvswitch: netlink: Flow key attr not present in new flow. [ 87.588490][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 87.603961][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 87.771788][ T7093] validate_nla: 3 callbacks suppressed [ 87.771808][ T7093] netlink: 'syz.1.337': attribute type 3 has an invalid length. [ 87.994445][ T7104] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 88.111569][ T7104] bond1: entered promiscuous mode [ 88.140633][ T7104] bond1: entered allmulticast mode [ 88.159305][ T7104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.621740][ T7136] netlink: 'syz.3.350': attribute type 15 has an invalid length. [ 88.905125][ T7149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.864609][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.900492][ T7202] bridge0: entered allmulticast mode [ 89.953442][ T7211] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.171290][ T7228] Bluetooth: MGMT ver 1.23 [ 90.182498][ T7228] __nla_validate_parse: 16 callbacks suppressed [ 90.182526][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 90.202578][ T7228] netlink: 'syz.2.379': attribute type 8 has an invalid length. [ 90.874394][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 90.886274][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 91.022552][ T7268] netlink: 'syz.3.391': attribute type 7 has an invalid length. [ 91.153473][ T7274] veth1_macvtap: left promiscuous mode [ 91.342514][ T7285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.397'. [ 91.393458][ T7287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.398'. [ 91.527191][ T7289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.398'. [ 91.741739][ T7307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.404'. [ 92.069318][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 92.156419][ T7331] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 92.239414][ T7331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.255447][ T7282] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 93.074948][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 93.141382][ T7383] delete_channel: no stack [ 93.180331][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 93.248388][ T7403] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 93.288138][ T7403] geneve0: entered promiscuous mode [ 93.359510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.360697][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 93.799919][ T7433] netlink: 'syz.3.440': attribute type 29 has an invalid length. [ 93.820787][ T7433] netlink: 'syz.3.440': attribute type 29 has an invalid length. [ 94.501507][ T7476] tipc: Started in network mode [ 94.522391][ T7476] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 94.548376][ T7476] tipc: Enabled bearer , priority 10 [ 95.259859][ T7519] bridge0: entered promiscuous mode [ 95.284857][ T7504] bridge0: left promiscuous mode [ 95.518668][ T7539] __nla_validate_parse: 12 callbacks suppressed [ 95.518690][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 95.635014][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 95.653485][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 95.669059][ T52] tipc: Node number set to 4269801491 [ 95.716936][ T7547] Cannot find set identified by id 0 to match [ 95.752143][ T7547] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 95.934628][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 96.111289][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 96.179747][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 96.384445][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 96.453708][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 96.468035][ T7585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 97.019342][ T7617] xt_addrtype: ipv6 does not support BROADCAST matching [ 97.337975][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 98.003667][ T7675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.025785][ T7675] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 98.051440][ T7677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.099905][ T7677] xt_l2tp: unknown flags: 18 [ 98.144064][ T7677] Bluetooth: MGMT ver 1.23 [ 98.185039][ T7686] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 98.390246][ T7700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.477799][ T7702] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 98.542941][ T7706] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 98.728372][ T7717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.117215][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 99.431345][ T5838] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1 [ 99.454037][ T5838] hid-generic 0005:16C0:05DF.0001: probe with driver hid-generic failed with error -22 [ 99.467666][ T7772] x_tables: duplicate entry at hook 1 [ 99.486080][ T7759] tipc: Started in network mode [ 99.494863][ T7759] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 99.500520][ T7772] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 99.513023][ T7759] tipc: Enabled bearer , priority 10 [ 99.688284][ T7786] xt_l2tp: v2 tid > 0xffff: 150994944 [ 99.749225][ T7790] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 99.984961][ T7806] netlink: 'syz.4.548': attribute type 21 has an invalid length. [ 100.008378][ T7806] netlink: 'syz.4.548': attribute type 11 has an invalid length. [ 100.329504][ T7830] sctp: [Deprecated]: syz.2.553 (pid 7830) Use of int in max_burst socket option deprecated. [ 100.329504][ T7830] Use struct sctp_assoc_value instead [ 100.412440][ T7830] sctp: [Deprecated]: syz.2.553 (pid 7830) Use of int in maxseg socket option. [ 100.412440][ T7830] Use struct sctp_assoc_value instead [ 100.514949][ T7839] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 100.636852][ T8] tipc: Node number set to 4269801491 [ 100.855977][ T7861] __nla_validate_parse: 13 callbacks suppressed [ 100.855996][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 100.872274][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 101.070696][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 101.235569][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.390174][ T7888] netlink: 'syz.4.574': attribute type 8 has an invalid length. [ 101.399025][ T7888] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 101.452583][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 101.485653][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 101.721273][ T7910] netlink: 160 bytes leftover after parsing attributes in process `syz.4.580'. [ 101.747229][ T7910] netlink: 'syz.4.580': attribute type 1 has an invalid length. [ 102.042206][ T7930] IPv6: sit2: Disabled Multicast RS [ 102.075343][ T7930] sit2: entered allmulticast mode [ 102.139354][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 102.167740][ T7933] vlan3: entered promiscuous mode [ 102.626336][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 102.673104][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 102.713042][ T7949] gretap1: entered promiscuous mode [ 102.721732][ T7949] gretap1: entered allmulticast mode [ 103.100157][ T7976] netlink: 'syz.3.603': attribute type 7 has an invalid length. [ 103.117173][ T7976] netlink: 'syz.3.603': attribute type 8 has an invalid length. [ 103.127398][ T7976] netlink: 220 bytes leftover after parsing attributes in process `syz.3.603'. [ 103.187176][ T7976] netlink: 'syz.3.603': attribute type 7 has an invalid length. [ 103.233692][ T7975] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.328296][ T7987] veth5: entered allmulticast mode [ 103.613491][ T8006] trusted_key: syz.3.615 sent an empty control message without MSG_MORE. [ 103.990492][ T8034] validate_nla: 63 callbacks suppressed [ 103.990512][ T8034] netlink: 'syz.0.623': attribute type 12 has an invalid length. [ 104.006809][ T8034] netlink: 'syz.0.623': attribute type 29 has an invalid length. [ 104.168667][ T8039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.240338][ T8043] tipc: Started in network mode [ 104.245539][ T8043] tipc: Node identity , cluster identity 4711 [ 104.277099][ T8043] tipc: Failed to obtain node identity [ 104.283443][ T8043] tipc: Enabling of bearer rejected, failed to enable media [ 104.351580][ T8043] tipc: Started in network mode [ 104.364948][ T8043] tipc: Node identity , cluster identity 4711 [ 104.390707][ T8043] tipc: Failed to obtain node identity [ 104.396508][ T8043] tipc: Enabling of bearer rejected, failed to enable media [ 104.894014][ T8076] syzkaller1: entered promiscuous mode [ 104.914431][ T8076] syzkaller1: entered allmulticast mode [ 105.006322][ T8082] openvswitch: netlink: Flow key attr not present in new flow. [ 105.531568][ T8109] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 106.200255][ T8156] __nla_validate_parse: 50 callbacks suppressed [ 106.200287][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 106.225482][ T8156] netlink: 'syz.3.665': attribute type 9 has an invalid length. [ 106.255390][ T8156] netlink: 244 bytes leftover after parsing attributes in process `syz.3.665'. [ 106.394002][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 106.613001][ T8183] netlink: 248 bytes leftover after parsing attributes in process `syz.2.673'. [ 106.631115][ T8183] NCSI netlink: No device for ifindex 0 [ 106.672905][ T8183] netlink: 'syz.2.673': attribute type 12 has an invalid length. [ 106.821301][ T8193] bond0: entered promiscuous mode [ 106.840857][ T8193] bond_slave_0: entered promiscuous mode [ 106.857896][ T8193] bond_slave_1: entered promiscuous mode [ 106.868903][ T8200] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 106.884053][ T8193] macvlan2: entered promiscuous mode [ 106.897202][ T8200] netlink: 56 bytes leftover after parsing attributes in process `syz.2.677'. [ 106.926306][ T8203] SET target dimension over the limit! [ 107.076357][ T8207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.679'. [ 107.100942][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 107.165519][ T8210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.278666][ T8224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.685'. [ 107.543637][ T8245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.692'. [ 107.544651][ T8243] netlink: 596 bytes leftover after parsing attributes in process `syz.2.690'. [ 108.655295][ T8281] infiniband syz1: set active [ 108.691189][ T8298] ebtables: ebtables: counters copy to user failed while replacing table [ 108.696708][ T8281] infiniband syz1: added bond_slave_1 [ 108.890734][ T8317] netlink: 'syz.3.718': attribute type 3 has an invalid length. [ 109.014894][ T8281] RDS/IB: syz1: added [ 109.040826][ T8281] smc: adding ib device syz1 with port count 1 [ 109.074068][ T8281] smc: ib device syz1 port 1 has pnetid [ 109.443152][ T8359] tipc: Started in network mode [ 109.454971][ T8359] tipc: Node identity 0e5118a9b44b, cluster identity 4711 [ 109.475712][ T8359] tipc: Enabled bearer , priority 0 [ 109.510894][ T8365] erspan0: entered allmulticast mode [ 109.582888][ T8357] tipc: Disabling bearer [ 110.116487][ T8394] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 110.311239][ T8397] xt_hashlimit: size too large, truncated to 1048576 [ 110.766153][ T8421] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.971014][ T8433] pim6reg1: entered promiscuous mode [ 110.978767][ T8433] pim6reg1: entered allmulticast mode [ 111.218276][ T8448] __nla_validate_parse: 13 callbacks suppressed [ 111.218357][ T8448] netlink: 516 bytes leftover after parsing attributes in process `syz.4.752'. [ 111.359491][ T8456] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 111.392409][ T8458] netlink: 'syz.4.752': attribute type 1 has an invalid length. [ 111.411381][ T8454] netlink: 'syz.1.754': attribute type 10 has an invalid length. [ 111.417070][ T8458] netlink: 224 bytes leftover after parsing attributes in process `syz.4.752'. [ 111.441322][ T8462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.756'. [ 111.481630][ T8454] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.509550][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 111.673276][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 111.708836][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 111.747286][ T8477] openvswitch: netlink: Flow actions attr not present in new flow. [ 111.781530][ T8477] gtp0: entered promiscuous mode [ 111.941222][ T8492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.766'. [ 112.168777][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 112.201554][ T8503] x_tables: duplicate underflow at hook 3 [ 112.209046][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 112.225224][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 112.364869][ T8520] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 112.373160][ T8520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.425291][ T8523] netlink: 'syz.0.776': attribute type 5 has an invalid length. [ 112.833932][ T8550] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 112.850061][ T8548] bond2: entered promiscuous mode [ 112.864123][ T8548] bond2: entered allmulticast mode [ 112.881904][ T8548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.915185][ T8551] 8021q: VLANs not supported on lo [ 113.651096][ T8601] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.810401][ T8602] bridge_slave_0 (unregistering): left allmulticast mode [ 113.836353][ T8602] bridge_slave_0 (unregistering): left promiscuous mode [ 113.864346][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.115691][ T8624] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 114.154402][ T8626] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 114.202297][ T8624] macvlan0: entered promiscuous mode [ 114.232233][ T8624] macvlan0: entered allmulticast mode [ 114.283545][ T8624] veth1_vlan: entered allmulticast mode [ 114.342145][ T8624] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 114.411106][ T8626] veth1_vlan: left allmulticast mode [ 116.216305][ T7342] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 116.229047][ T7342] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 116.237659][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-00133-g47e55e4b410f #0 [ 116.248644][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.258899][ T7342] RIP: 0010:klist_del+0x49/0x110 [ 116.263966][ T7342] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 8f 47 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 8f 47 f6 4c 8b 7b 58 48 89 df e8 0f 51 [ 116.283687][ T7342] RSP: 0018:ffffc9000c56f828 EFLAGS: 00010202 [ 116.289956][ T7342] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff8880351e8000 [ 116.298007][ T7342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 116.306006][ T7342] RBP: ffffc9000c56f950 R08: ffffffff82429efa R09: 1ffff1100610ab68 [ 116.314009][ T7342] R10: dffffc0000000000 R11: ffffed100610ab69 R12: dffffc0000000000 [ 116.322012][ T7342] R13: 1ffff1100b4ee30c R14: ffff88805a771860 R15: ffff888033730b88 [ 116.330044][ T7342] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 116.339890][ T7342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.346506][ T7342] CR2: 0000000020000180 CR3: 0000000064fcc000 CR4: 00000000003526f0 [ 116.354513][ T7342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.362601][ T7342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.370712][ T7342] Call Trace: [ 116.374089][ T7342] [ 116.377123][ T7342] ? __die_body+0x5f/0xb0 [ 116.381691][ T7342] ? die_addr+0xb0/0xe0 [ 116.385874][ T7342] ? exc_general_protection+0x3dd/0x5d0 [ 116.391462][ T7342] ? asm_exc_general_protection+0x26/0x30 [ 116.398291][ T7342] ? kernfs_put+0x20a/0x370 [ 116.402918][ T7342] ? klist_del+0x49/0x110 [ 116.407374][ T7342] ? klist_del+0x20/0x110 [ 116.411919][ T7342] device_del+0x2c9/0x9b0 [ 116.416459][ T7342] ? __pfx_device_del+0x10/0x10 [ 116.421957][ T7342] ? netdev_unregister_kobject+0x178/0x250 [ 116.428074][ T7342] unregister_netdevice_many_notify+0x1859/0x1da0 [ 116.435045][ T7342] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 116.443322][ T7342] ? rcu_is_watching+0x15/0xb0 [ 116.448466][ T7342] ? trace_contention_end+0x3c/0x120 [ 116.455339][ T7342] ? __mutex_lock+0x37f/0xee0 [ 116.460897][ T7342] ? __pfx_lock_acquire+0x10/0x10 [ 116.466136][ T7342] ? unregister_netdev+0x12/0x30 [ 116.471743][ T7342] unregister_netdevice_queue+0x303/0x370 [ 116.477645][ T7342] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 116.484578][ T7342] ? down_write+0x18c/0x220 [ 116.489186][ T7342] ? __pfx_down_write+0x10/0x10 [ 116.494166][ T7342] unregister_netdev+0x1c/0x30 [ 116.499155][ T7342] bnep_session+0x2e3c/0x3030 [ 116.504108][ T7342] ? __pfx_bnep_session+0x10/0x10 [ 116.509359][ T7342] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 116.515260][ T7342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 116.521637][ T7342] ? __pfx_woken_wake_function+0x10/0x10 [ 116.527992][ T7342] ? __kthread_parkme+0x169/0x1d0 [ 116.533282][ T7342] ? __pfx_bnep_session+0x10/0x10 [ 116.538408][ T7342] kthread+0x2f0/0x390 [ 116.542521][ T7342] ? __pfx_bnep_session+0x10/0x10 [ 116.547989][ T7342] ? __pfx_kthread+0x10/0x10 [ 116.552594][ T7342] ret_from_fork+0x4b/0x80 [ 116.557207][ T7342] ? __pfx_kthread+0x10/0x10 [ 116.562057][ T7342] ret_from_fork_asm+0x1a/0x30 [ 116.566842][ T7342] [ 116.570049][ T7342] Modules linked in: [ 116.575990][ T7342] ---[ end trace 0000000000000000 ]--- [ 116.582488][ T7342] RIP: 0010:klist_del+0x49/0x110 [ 116.584586][ T8711] __nla_validate_parse: 6 callbacks suppressed [ 116.584603][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 116.588584][ T7342] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 8f 47 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 8f 47 f6 4c 8b 7b 58 48 89 df e8 0f 51 [ 116.594693][ T8711] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 116.605364][ T7342] RSP: 0018:ffffc9000c56f828 EFLAGS: 00010202 [ 116.627634][ T8711] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 116.634822][ T7342] [ 116.649829][ T8711] netlink: 'syz.1.834': attribute type 2 has an invalid length. [ 116.657534][ T7342] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff8880351e8000 [ 116.664040][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.834'. [ 116.668948][ T7342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 116.689162][ T7342] RBP: ffffc9000c56f950 R08: ffffffff82429efa R09: 1ffff1100610ab68 [ 116.698634][ T7342] R10: dffffc0000000000 R11: ffffed100610ab69 R12: dffffc0000000000 [ 116.707404][ T7342] R13: 1ffff1100b4ee30c R14: ffff88805a771860 R15: ffff888033730b88 [ 116.715601][ T7342] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 116.725001][ T7342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.730270][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.834'. [ 116.732199][ T7342] CR2: 00007fa9c6f452d8 CR3: 00000000344b8000 CR4: 00000000003526f0 [ 116.749139][ T7342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.757889][ T7342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.766033][ T7342] Kernel panic - not syncing: Fatal exception [ 116.772597][ T7342] Kernel Offset: disabled [ 116.777106][ T7342] Rebooting in 86400 seconds..