last executing test programs: 1m29.489116698s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 1m29.489058708s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 1m29.489035093s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 1m17.12228311s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 1m15.751313494s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 1m0.526687996s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 59.538472001s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 52.719131912s ago: executing program 1 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005", 0x17}], 0x1}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) (rerun: 32) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r9, 0x8b32, &(0x7f0000000040)) (async) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x9) (async, rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="f80000001a00010000000000fddbdf25ac1414aa000000000000000000a3405473d79085614a0000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008002300190d0000"], 0xf8}}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) (async) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) (async) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000001840)=""/239, 0xef}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000001940)=""/81, 0x51}, {&(0x7f00000019c0)=""/238, 0xee}], 0xa}, 0x8000}, {{&(0x7f0000001ac0)=@hci, 0x80, &(0x7f0000003fc0)=[{0x0}, {&(0x7f0000002e40)=""/118, 0x76}, {0x0}], 0x3}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/3, 0x3}, 0xfffffffb}, {{&(0x7f0000004180)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005480)=[{0x0}], 0x1}, 0x20000}], 0x4, 0x40000000, 0x0) 52.613884516s ago: executing program 1 (id=1196): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0000060000000004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x3, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x7ff}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x240080c5) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYRESDEC=0x0], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x3, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010002508001700000000000100000000f5dfaeef7c1242f389d74918159c91ba379691d64309", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0xfffffffffffffff7) ppoll(&(0x7f0000000080)=[{r2, 0x2488}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x186d485c40df0761}, 0x0) ioctl(r9, 0x8b32, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 52.278726593s ago: executing program 1 (id=1200): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xbd9d4d65b4ba916a, 0x8000}, 0xc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4001}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x19eb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bind$qrtr(r0, &(0x7f00000001c0), 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x5, 0xb, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x80, 0x2, 0x7f}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0xa0, 0x1d, r4, 0xee00}, {0x7ff, 0xffff, 0x2, 0x101, 0x8, 0x80, 0x8, 0x10001}, {0x800, 0x101, 0x80000000, 0x9}, 0xf, 0x6e6bb4, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x2, 0x0, 0x4, 0x2, 0x6}}, 0xe8) connect$qrtr(r0, &(0x7f0000000400)={0x2a, 0xffffffff, 0x8000}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0xc, 0x67, 0x9, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xe4, 0x0, 0x0, 0x70bd25}, @sadb_x_sec_ctx={0xc, 0x18, 0x48, 0x3, 0x56, "4013f78f08298f98538decc98b6cfda1280b96e86a4da954da6e5a44b46eb6f152ff1e10324b87fc3f391dffc1f73568ebccff0644cc26ae611e6851963da41ea1e2abe110a875ecd6a83738e334d9d087ee0b831c83"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x80000000}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0x9}]}, 0xa0}}, 0x40) write(r3, &(0x7f00000005c0)="aa39c375319d4fda7815e0052f3861d2e61170fd80e84f7da28dd4f8bc90f00850176acb9567a1781a572ed44f47e1721afdddd4e5ef45e0b2c2005bacb144741d16fb507649b538ce7f349c99b8c1c60b89c339e694be72531124d197715ef5bd40b2fb07b801aae635cf92", 0x6c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) pwritev(r6, &(0x7f0000000b80)=[{&(0x7f00000006c0)="8f9e1a926703dc78b3ca6943d9753a7e8cfdd7193ab91793d5e6830d4f61cb4f2a2034107bffad1924615cba8c72ef4c77bf7e26b177d75e9f7b473bd9560e30a5c16233147ecd930d15629f73815940490509d512b4aa79f50e1916516537c3a0d8c6e05ed29e617f9688dd49f068ca713654960084f525d5bb31a20c2cbd5e654abd74", 0x84}, {&(0x7f0000000780)="274843636b0534780f6a9e02587f", 0xe}, {&(0x7f00000007c0)="c0d8f9c3adea37b649a289efca1711d48ea7e86300cbb03077d0b7ac03162a8a129db21c2b69902ec84a9ec1bd0186d4af59c326dea7e31408f28596045438ec0d294b8de9a496bd6a4800e4d9fd05ebbf62641fb1087c264bf86b4260cc53c72e398599b45ef3d2810d72e17217a4dd987aed2eb79a745a249da50562af22fa2a550313cb", 0x85}, {&(0x7f0000000880)="cfbf84cea7c5e2618b101103c2cd691784e7708f434282fb9cb1eecd56a68a49e3ae0bfe3afacab91a7726e97c909a5e87e6d559c31da75d2b61a34f69feee56e17110a0be7c0254cdcf7d735b06d3eeb4f2d8e4f1901d255dbfd0a6dd0be79e335d02549d44511bd436da9af4a369617d062d69566c9983141eeb9aa4e96851e0f1", 0x82}, {&(0x7f0000000940)="9c9a3c1e1bac56c69c4b155956e83e8baae1a374dad66c535a6e81e62ce373a4966d925a49f8d188618c6bb534f4d884333323238ad1d806e4d61b76dad8970602d4203b8accd861e26026ad7299184fa4926d8d377cbc4d8557c408be13682035b2420d0eec48990f0aa517f62b89ddc28eed92d1496c6353332d1beba82fc89c95b6b99ca815389d8700e1c47dc580a3cc9a6335f647d3548600e613370cadebf0d4c2c7a94ec10c8d286ed79975540f955dcac91b43c2881529fca1793c5da0955b2794a47cc5a47c7b53b88a4a59d510d73a50ddccd42655fe0f", 0xdc}, {&(0x7f0000000a40)="e49ea94286ba795c18cc575f5eb283b4cb75a3f0961c72b3f103d40f23df3a42e724ffa69976be5e1cfd29b156e9c79fc28615904b3732febbfe5febee20374611290b613afdb7205cbc25e0b73ac2e4f899bc", 0x53}, {&(0x7f0000000ac0)="ec05fd46bff2b672a94fc8935b7b6687f5d70c7ff341b9783358ae978794f9354e79c29898aac83762642f60782114759b7d87feb6cf94c06b177f4bc0c4dfbf2a17b22a3ed2efb5b7e98b63973d4755f7281446673c1fa181ad830088a3e0042992b9ce5af149e2a956c2868f8bfcc855a74f4f7bd2f9515698d900b31e0d48605dacb5df0e36e1b90c8c", 0x8b}], 0x7, 0x7, 0x1) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r7, &(0x7f0000000c40), 0x9) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r7}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x4}, {0x5, 0x5}, {0x0, 0xca}, {0x9, 0x6}, {0x9, 0x6}, {0x8, 0x6}, {0x8, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3a, 0x2}, {0x0, 0x3}], "ba77ce8b43c02cfa"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x5}, {0x9, 0x7}], "40e00df4550910b8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{}, {0x7, 0x2}, {0x0, 0x3}, {0x9, 0x6}, {0x9, 0x3}, {0xd, 0x4}, {0x9, 0x6}, {0xff, 0x1}, {0xcc, 0x1}, {0x8, 0x2}, {}, {0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x7f, 0x5}, {0xc, 0x1}], "c5bd40c6462a5a73"}}]}, 0x74}}, 0x24048040) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000e40)={{}, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz0\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000001e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/245, 0xf5}], 0x2, &(0x7f00000020c0)=""/211, 0xd3}, 0x6}, {{&(0x7f00000021c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/94, 0x5e}], 0x2}, 0x7}, {{&(0x7f0000003300)=@nl=@proc, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/71, 0x47}, {&(0x7f0000003400)=""/38, 0x26}], 0x2}, 0xe9}, {{&(0x7f0000003480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/221, 0xdd}], 0x1, &(0x7f0000003640)=""/238, 0xee}, 0x3}], 0x4, 0x100, &(0x7f0000003840)) writev(r3, &(0x7f0000003b80)=[{&(0x7f0000003880)=']', 0x1}, {&(0x7f00000038c0)="1047670e719815cf58e4c736d27b3f168033da05aec2ee966aca7949c6e192c53db0ff34754e477a4eaf03ea4b27c3845ef38bfbafcdb16a65c74b8ad14606d862e334ed7f26645ce36394ee37057888fbec63847660a3baeb4d3536e8e507bfb0d50411f48690fc2c3368f50c524e07afc458cd62e300a8809741fca47902867c6d11e15e1ac645e87d65aae86fd9d3356aff4f983d0cdb332427073fe51269883ca2303feda5aaa63f8d951f909555c8ecccd2de94a8fe6d6eb35915c53e06cedb381c38559e2c18cf81734ce1ef8f16ef3af482190acd5e060c91eb4aaaedc46b", 0xe2}, {&(0x7f00000039c0)="3c7a2c71cd2add7c5c740638ea9fdcea958f0f8d44219ab7a19ff7d0c100d85a806cca61067b973178f225c7ebc9150ad6e925d4fe3bcaca03dfce1285c846c7d0b50f49eeacece0f909848e58e93e7a5f08686e4e379d1126da15583ea26dfea06d2f99645b81c8bed6e438b1b0984806fffd428ef12be5458a5dd727c1b26aa1a8797b761a81d6c582e761ade50996cd5399838c1f641663c36bcd981007754076e18322157b1278b4158fcf96b34a2663fb9da7f8ab41a5b7088ece14c82947cbbaf73279fb802d111024b1135cab6509f2206a1ee6370d9ad860e0cfb0bedbb3fb47699215c3", 0xe8}, {&(0x7f0000003ac0)="655414b88a0c10d49c8af07dc412d382e3d1c6b39e8260ff179890f1f1f3670da26520f42f80ee3695c230dfb19168304de8afd12f7cee85b1aa02f47318fb70a2b53a4f6f49e643837c23d9190d6c652d04b2eb458896a8b21c10cff09f75b37b3b0b0f82d5c55871e15e3e0abe6f71f87cf6f9508de780e84b112cf9da9ba8c962cf56fbb3a1", 0x87}], 0x4) setsockopt$MRT_DEL_MFC_PROXY(r11, 0x0, 0xd3, &(0x7f0000003bc0)={@private=0xa010100, @private=0xa010102, 0x0, "8bc09860e25a57dd47a24887776a8bd9e7225e5993c0d427abdba8ceade6c118", 0xfffffffa, 0x1, 0x3, 0x7}, 0x3c) 41.831873213s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 40.327045804s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 38.526754467s ago: executing program 1 (id=1200): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xbd9d4d65b4ba916a, 0x8000}, 0xc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4001}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x19eb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bind$qrtr(r0, &(0x7f00000001c0), 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x5, 0xb, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x80, 0x2, 0x7f}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0xa0, 0x1d, r4, 0xee00}, {0x7ff, 0xffff, 0x2, 0x101, 0x8, 0x80, 0x8, 0x10001}, {0x800, 0x101, 0x80000000, 0x9}, 0xf, 0x6e6bb4, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x2, 0x0, 0x4, 0x2, 0x6}}, 0xe8) connect$qrtr(r0, &(0x7f0000000400)={0x2a, 0xffffffff, 0x8000}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0xc, 0x67, 0x9, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xe4, 0x0, 0x0, 0x70bd25}, @sadb_x_sec_ctx={0xc, 0x18, 0x48, 0x3, 0x56, "4013f78f08298f98538decc98b6cfda1280b96e86a4da954da6e5a44b46eb6f152ff1e10324b87fc3f391dffc1f73568ebccff0644cc26ae611e6851963da41ea1e2abe110a875ecd6a83738e334d9d087ee0b831c83"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x80000000}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0x9}]}, 0xa0}}, 0x40) write(r3, &(0x7f00000005c0)="aa39c375319d4fda7815e0052f3861d2e61170fd80e84f7da28dd4f8bc90f00850176acb9567a1781a572ed44f47e1721afdddd4e5ef45e0b2c2005bacb144741d16fb507649b538ce7f349c99b8c1c60b89c339e694be72531124d197715ef5bd40b2fb07b801aae635cf92", 0x6c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) pwritev(r6, &(0x7f0000000b80)=[{&(0x7f00000006c0)="8f9e1a926703dc78b3ca6943d9753a7e8cfdd7193ab91793d5e6830d4f61cb4f2a2034107bffad1924615cba8c72ef4c77bf7e26b177d75e9f7b473bd9560e30a5c16233147ecd930d15629f73815940490509d512b4aa79f50e1916516537c3a0d8c6e05ed29e617f9688dd49f068ca713654960084f525d5bb31a20c2cbd5e654abd74", 0x84}, {&(0x7f0000000780)="274843636b0534780f6a9e02587f", 0xe}, {&(0x7f00000007c0)="c0d8f9c3adea37b649a289efca1711d48ea7e86300cbb03077d0b7ac03162a8a129db21c2b69902ec84a9ec1bd0186d4af59c326dea7e31408f28596045438ec0d294b8de9a496bd6a4800e4d9fd05ebbf62641fb1087c264bf86b4260cc53c72e398599b45ef3d2810d72e17217a4dd987aed2eb79a745a249da50562af22fa2a550313cb", 0x85}, {&(0x7f0000000880)="cfbf84cea7c5e2618b101103c2cd691784e7708f434282fb9cb1eecd56a68a49e3ae0bfe3afacab91a7726e97c909a5e87e6d559c31da75d2b61a34f69feee56e17110a0be7c0254cdcf7d735b06d3eeb4f2d8e4f1901d255dbfd0a6dd0be79e335d02549d44511bd436da9af4a369617d062d69566c9983141eeb9aa4e96851e0f1", 0x82}, {&(0x7f0000000940)="9c9a3c1e1bac56c69c4b155956e83e8baae1a374dad66c535a6e81e62ce373a4966d925a49f8d188618c6bb534f4d884333323238ad1d806e4d61b76dad8970602d4203b8accd861e26026ad7299184fa4926d8d377cbc4d8557c408be13682035b2420d0eec48990f0aa517f62b89ddc28eed92d1496c6353332d1beba82fc89c95b6b99ca815389d8700e1c47dc580a3cc9a6335f647d3548600e613370cadebf0d4c2c7a94ec10c8d286ed79975540f955dcac91b43c2881529fca1793c5da0955b2794a47cc5a47c7b53b88a4a59d510d73a50ddccd42655fe0f", 0xdc}, {&(0x7f0000000a40)="e49ea94286ba795c18cc575f5eb283b4cb75a3f0961c72b3f103d40f23df3a42e724ffa69976be5e1cfd29b156e9c79fc28615904b3732febbfe5febee20374611290b613afdb7205cbc25e0b73ac2e4f899bc", 0x53}, {&(0x7f0000000ac0)="ec05fd46bff2b672a94fc8935b7b6687f5d70c7ff341b9783358ae978794f9354e79c29898aac83762642f60782114759b7d87feb6cf94c06b177f4bc0c4dfbf2a17b22a3ed2efb5b7e98b63973d4755f7281446673c1fa181ad830088a3e0042992b9ce5af149e2a956c2868f8bfcc855a74f4f7bd2f9515698d900b31e0d48605dacb5df0e36e1b90c8c", 0x8b}], 0x7, 0x7, 0x1) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r7, &(0x7f0000000c40), 0x9) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r7}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x4}, {0x5, 0x5}, {0x0, 0xca}, {0x9, 0x6}, {0x9, 0x6}, {0x8, 0x6}, {0x8, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3a, 0x2}, {0x0, 0x3}], "ba77ce8b43c02cfa"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x5}, {0x9, 0x7}], "40e00df4550910b8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{}, {0x7, 0x2}, {0x0, 0x3}, {0x9, 0x6}, {0x9, 0x3}, {0xd, 0x4}, {0x9, 0x6}, {0xff, 0x1}, {0xcc, 0x1}, {0x8, 0x2}, {}, {0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x7f, 0x5}, {0xc, 0x1}], "c5bd40c6462a5a73"}}]}, 0x74}}, 0x24048040) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000e40)={{}, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz0\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000001e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/245, 0xf5}], 0x2, &(0x7f00000020c0)=""/211, 0xd3}, 0x6}, {{&(0x7f00000021c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/94, 0x5e}], 0x2}, 0x7}, {{&(0x7f0000003300)=@nl=@proc, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/71, 0x47}, {&(0x7f0000003400)=""/38, 0x26}], 0x2}, 0xe9}, {{&(0x7f0000003480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/221, 0xdd}], 0x1, &(0x7f0000003640)=""/238, 0xee}, 0x3}], 0x4, 0x100, &(0x7f0000003840)) writev(r3, &(0x7f0000003b80)=[{&(0x7f0000003880)=']', 0x1}, {&(0x7f00000038c0)="1047670e719815cf58e4c736d27b3f168033da05aec2ee966aca7949c6e192c53db0ff34754e477a4eaf03ea4b27c3845ef38bfbafcdb16a65c74b8ad14606d862e334ed7f26645ce36394ee37057888fbec63847660a3baeb4d3536e8e507bfb0d50411f48690fc2c3368f50c524e07afc458cd62e300a8809741fca47902867c6d11e15e1ac645e87d65aae86fd9d3356aff4f983d0cdb332427073fe51269883ca2303feda5aaa63f8d951f909555c8ecccd2de94a8fe6d6eb35915c53e06cedb381c38559e2c18cf81734ce1ef8f16ef3af482190acd5e060c91eb4aaaedc46b", 0xe2}, {&(0x7f00000039c0)="3c7a2c71cd2add7c5c740638ea9fdcea958f0f8d44219ab7a19ff7d0c100d85a806cca61067b973178f225c7ebc9150ad6e925d4fe3bcaca03dfce1285c846c7d0b50f49eeacece0f909848e58e93e7a5f08686e4e379d1126da15583ea26dfea06d2f99645b81c8bed6e438b1b0984806fffd428ef12be5458a5dd727c1b26aa1a8797b761a81d6c582e761ade50996cd5399838c1f641663c36bcd981007754076e18322157b1278b4158fcf96b34a2663fb9da7f8ab41a5b7088ece14c82947cbbaf73279fb802d111024b1135cab6509f2206a1ee6370d9ad860e0cfb0bedbb3fb47699215c3", 0xe8}, {&(0x7f0000003ac0)="655414b88a0c10d49c8af07dc412d382e3d1c6b39e8260ff179890f1f1f3670da26520f42f80ee3695c230dfb19168304de8afd12f7cee85b1aa02f47318fb70a2b53a4f6f49e643837c23d9190d6c652d04b2eb458896a8b21c10cff09f75b37b3b0b0f82d5c55871e15e3e0abe6f71f87cf6f9508de780e84b112cf9da9ba8c962cf56fbb3a1", 0x87}], 0x4) setsockopt$MRT_DEL_MFC_PROXY(r11, 0x0, 0xd3, &(0x7f0000003bc0)={@private=0xa010100, @private=0xa010102, 0x0, "8bc09860e25a57dd47a24887776a8bd9e7225e5993c0d427abdba8ceade6c118", 0xfffffffa, 0x1, 0x3, 0x7}, 0x3c) 21.619075936s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 19.014949158s ago: executing program 1 (id=1200): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xbd9d4d65b4ba916a, 0x8000}, 0xc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4001}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x19eb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bind$qrtr(r0, &(0x7f00000001c0), 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x5, 0xb, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x80, 0x2, 0x7f}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0xa0, 0x1d, r4, 0xee00}, {0x7ff, 0xffff, 0x2, 0x101, 0x8, 0x80, 0x8, 0x10001}, {0x800, 0x101, 0x80000000, 0x9}, 0xf, 0x6e6bb4, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x2, 0x0, 0x4, 0x2, 0x6}}, 0xe8) connect$qrtr(r0, &(0x7f0000000400)={0x2a, 0xffffffff, 0x8000}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0xc, 0x67, 0x9, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xe4, 0x0, 0x0, 0x70bd25}, @sadb_x_sec_ctx={0xc, 0x18, 0x48, 0x3, 0x56, "4013f78f08298f98538decc98b6cfda1280b96e86a4da954da6e5a44b46eb6f152ff1e10324b87fc3f391dffc1f73568ebccff0644cc26ae611e6851963da41ea1e2abe110a875ecd6a83738e334d9d087ee0b831c83"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x80000000}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0x9}]}, 0xa0}}, 0x40) write(r3, &(0x7f00000005c0)="aa39c375319d4fda7815e0052f3861d2e61170fd80e84f7da28dd4f8bc90f00850176acb9567a1781a572ed44f47e1721afdddd4e5ef45e0b2c2005bacb144741d16fb507649b538ce7f349c99b8c1c60b89c339e694be72531124d197715ef5bd40b2fb07b801aae635cf92", 0x6c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) pwritev(r6, &(0x7f0000000b80)=[{&(0x7f00000006c0)="8f9e1a926703dc78b3ca6943d9753a7e8cfdd7193ab91793d5e6830d4f61cb4f2a2034107bffad1924615cba8c72ef4c77bf7e26b177d75e9f7b473bd9560e30a5c16233147ecd930d15629f73815940490509d512b4aa79f50e1916516537c3a0d8c6e05ed29e617f9688dd49f068ca713654960084f525d5bb31a20c2cbd5e654abd74", 0x84}, {&(0x7f0000000780)="274843636b0534780f6a9e02587f", 0xe}, {&(0x7f00000007c0)="c0d8f9c3adea37b649a289efca1711d48ea7e86300cbb03077d0b7ac03162a8a129db21c2b69902ec84a9ec1bd0186d4af59c326dea7e31408f28596045438ec0d294b8de9a496bd6a4800e4d9fd05ebbf62641fb1087c264bf86b4260cc53c72e398599b45ef3d2810d72e17217a4dd987aed2eb79a745a249da50562af22fa2a550313cb", 0x85}, {&(0x7f0000000880)="cfbf84cea7c5e2618b101103c2cd691784e7708f434282fb9cb1eecd56a68a49e3ae0bfe3afacab91a7726e97c909a5e87e6d559c31da75d2b61a34f69feee56e17110a0be7c0254cdcf7d735b06d3eeb4f2d8e4f1901d255dbfd0a6dd0be79e335d02549d44511bd436da9af4a369617d062d69566c9983141eeb9aa4e96851e0f1", 0x82}, {&(0x7f0000000940)="9c9a3c1e1bac56c69c4b155956e83e8baae1a374dad66c535a6e81e62ce373a4966d925a49f8d188618c6bb534f4d884333323238ad1d806e4d61b76dad8970602d4203b8accd861e26026ad7299184fa4926d8d377cbc4d8557c408be13682035b2420d0eec48990f0aa517f62b89ddc28eed92d1496c6353332d1beba82fc89c95b6b99ca815389d8700e1c47dc580a3cc9a6335f647d3548600e613370cadebf0d4c2c7a94ec10c8d286ed79975540f955dcac91b43c2881529fca1793c5da0955b2794a47cc5a47c7b53b88a4a59d510d73a50ddccd42655fe0f", 0xdc}, {&(0x7f0000000a40)="e49ea94286ba795c18cc575f5eb283b4cb75a3f0961c72b3f103d40f23df3a42e724ffa69976be5e1cfd29b156e9c79fc28615904b3732febbfe5febee20374611290b613afdb7205cbc25e0b73ac2e4f899bc", 0x53}, {&(0x7f0000000ac0)="ec05fd46bff2b672a94fc8935b7b6687f5d70c7ff341b9783358ae978794f9354e79c29898aac83762642f60782114759b7d87feb6cf94c06b177f4bc0c4dfbf2a17b22a3ed2efb5b7e98b63973d4755f7281446673c1fa181ad830088a3e0042992b9ce5af149e2a956c2868f8bfcc855a74f4f7bd2f9515698d900b31e0d48605dacb5df0e36e1b90c8c", 0x8b}], 0x7, 0x7, 0x1) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r7, &(0x7f0000000c40), 0x9) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r7}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x4}, {0x5, 0x5}, {0x0, 0xca}, {0x9, 0x6}, {0x9, 0x6}, {0x8, 0x6}, {0x8, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3a, 0x2}, {0x0, 0x3}], "ba77ce8b43c02cfa"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x5}, {0x9, 0x7}], "40e00df4550910b8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{}, {0x7, 0x2}, {0x0, 0x3}, {0x9, 0x6}, {0x9, 0x3}, {0xd, 0x4}, {0x9, 0x6}, {0xff, 0x1}, {0xcc, 0x1}, {0x8, 0x2}, {}, {0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x7f, 0x5}, {0xc, 0x1}], "c5bd40c6462a5a73"}}]}, 0x74}}, 0x24048040) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000e40)={{}, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz0\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000001e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/245, 0xf5}], 0x2, &(0x7f00000020c0)=""/211, 0xd3}, 0x6}, {{&(0x7f00000021c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/94, 0x5e}], 0x2}, 0x7}, {{&(0x7f0000003300)=@nl=@proc, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/71, 0x47}, {&(0x7f0000003400)=""/38, 0x26}], 0x2}, 0xe9}, {{&(0x7f0000003480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/221, 0xdd}], 0x1, &(0x7f0000003640)=""/238, 0xee}, 0x3}], 0x4, 0x100, &(0x7f0000003840)) writev(r3, &(0x7f0000003b80)=[{&(0x7f0000003880)=']', 0x1}, {&(0x7f00000038c0)="1047670e719815cf58e4c736d27b3f168033da05aec2ee966aca7949c6e192c53db0ff34754e477a4eaf03ea4b27c3845ef38bfbafcdb16a65c74b8ad14606d862e334ed7f26645ce36394ee37057888fbec63847660a3baeb4d3536e8e507bfb0d50411f48690fc2c3368f50c524e07afc458cd62e300a8809741fca47902867c6d11e15e1ac645e87d65aae86fd9d3356aff4f983d0cdb332427073fe51269883ca2303feda5aaa63f8d951f909555c8ecccd2de94a8fe6d6eb35915c53e06cedb381c38559e2c18cf81734ce1ef8f16ef3af482190acd5e060c91eb4aaaedc46b", 0xe2}, {&(0x7f00000039c0)="3c7a2c71cd2add7c5c740638ea9fdcea958f0f8d44219ab7a19ff7d0c100d85a806cca61067b973178f225c7ebc9150ad6e925d4fe3bcaca03dfce1285c846c7d0b50f49eeacece0f909848e58e93e7a5f08686e4e379d1126da15583ea26dfea06d2f99645b81c8bed6e438b1b0984806fffd428ef12be5458a5dd727c1b26aa1a8797b761a81d6c582e761ade50996cd5399838c1f641663c36bcd981007754076e18322157b1278b4158fcf96b34a2663fb9da7f8ab41a5b7088ece14c82947cbbaf73279fb802d111024b1135cab6509f2206a1ee6370d9ad860e0cfb0bedbb3fb47699215c3", 0xe8}, {&(0x7f0000003ac0)="655414b88a0c10d49c8af07dc412d382e3d1c6b39e8260ff179890f1f1f3670da26520f42f80ee3695c230dfb19168304de8afd12f7cee85b1aa02f47318fb70a2b53a4f6f49e643837c23d9190d6c652d04b2eb458896a8b21c10cff09f75b37b3b0b0f82d5c55871e15e3e0abe6f71f87cf6f9508de780e84b112cf9da9ba8c962cf56fbb3a1", 0x87}], 0x4) setsockopt$MRT_DEL_MFC_PROXY(r11, 0x0, 0xd3, &(0x7f0000003bc0)={@private=0xa010100, @private=0xa010102, 0x0, "8bc09860e25a57dd47a24887776a8bd9e7225e5993c0d427abdba8ceade6c118", 0xfffffffa, 0x1, 0x3, 0x7}, 0x3c) 16.586160148s ago: executing program 3 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103ff0100000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) 4.017823022s ago: executing program 4 (id=1429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0xf3, "75ae7fe46ba3451ecab8d4788355bdb48b8b86f14d22ee1e3aec1421fd0a7674d5d85a8f46deca0ed8d67b8a50261084f6c97893e27ffe80c0d4ae018219e3bec8a3b51b9ebea553a6b9a4d48f1f335b7bcbe90032c92420e538f288199982f3f71a34a73d3f8d656faa6b31abfad78e329079e70253b0a4fa845c048341c56bfbd9096fe1ae8f5c0965d3cad42839618b27991e90c1111d0d67ccb178b4dff296da59654cf1de572cb4b2b88e57746ffc5218a1d3dbc9e7cf8e21d7b83134e6e09226953b3e9c920e0de338c06c0ebe757f03a01433f4dc3b2ec8ab04ca4bc05e9e785d2b739005f3b3c4216dffacae836c8b"}) sendfile(r0, r0, &(0x7f0000000180)=0x3, 0xc9a) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x80c00) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x8, &(0x7f0000000380)=@raw=[@map_fd, @call={0x85, 0x0, 0x0, 0x43}, @jmp={0x5, 0x1, 0xa, 0x7, 0x7, 0xfffffffffffffff4}, @ringbuf_query], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xa, &(0x7f0000000400)=""/10, 0x40f00, 0x40, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0x5, 0x7fff8000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x3, 0x7, 0x4}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f0000000340), &(0x7f0000000600)=r4}, 0x20) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f0000000680)=@default) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000006c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e24, 0x6, @remote, 0x6}, @in6={0xa, 0x4e22, 0xffffffff, @private1, 0x6}, @in6={0xa, 0x4e22, 0x2, @empty, 0x2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0x88a0}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}], 0xb8) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000880)=0x9, &(0x7f00000008c0)=0x4) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000c00)={&(0x7f0000000940)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000980)="4a5e2e189550b226af69c844b60be1c04837716752ef94ecfd2bdc17bc8b0a1c5dc32f6149fde55379240e0f3803d03bb16703eec80e8ea77192cd5e56b53df648dc8b86480029689042ccb5b2bd33b2cdd430daaf5342625e17c1fcc850dae32271bafc08ba346fc962ca45806c37776c399a8a2112a3d2536bc617d24f799d053b9f238770e24d16d3e16555a061c962c3c6a351131aae23953be3d0610f083662d6bb318281af6e48f6d03af560949453ea8629d9e630315aa56fd6e0ad61f77781ed5a", 0xc5}, {&(0x7f0000000a80)="ba046a2f70f86cd25aaffe04a9156c726fe323530a6943083f28feacb7800d90410e9b69391a47d4b5b69d88", 0x2c}, {&(0x7f0000000ac0)="c1aa547a913debdd13d43e4f00048cdd2b870c023473edb9494e57426b28030002b53040c2211b5ffb0dc8a50ddd6a034293fd5e353655ecdda6ee36eba03c8d968414de1ffdb07cd075e378da1f050eb84b58e340eeab5dfe8d00e7355dc0f480097fa009daf5cc52869f74bdaaa82f864589a362c2aea2df2e0309fa502eea4f50206ecdb28996", 0x88}], 0x3, &(0x7f0000000bc0)="9cfb06d475cd3fa740a4bc834d4eca6cf1d84287755d8aae34be52674e41e5fc926086d2", 0x24, 0x20000885}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r9) bind$inet6(r6, &(0x7f0000000c80)={0xa, 0x4e24, 0x54df, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000cc0)={0x0, 0xfffe, 0xb8, "301b5b13b5a8f29576db55584c62b1989c0aea8263deb622326cc94c2fc9f6391b22188d95685d3c4ea70556e8ffc05d76662c6e70a75dbb197d8610e7a3e9d1c45614bbb5158af707c6ad3f942db121a05fedcdcb00a35d6452f8358163735e2fa6d082c4471d13f0edab89ae46079a9efdf5e1b2cb29d951b4f101aa18b72a3f61f1f104352372c0abe6a3e9304916498dad8269014751fe4b2580a594129c1b86858b9f10be42c103730c568b4bbd67f88f8be1e6c7fc"}, 0xc0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000dc0)={0x1, &(0x7f0000000d80)=[{0x3, 0x4, 0xcd, 0x200093ed}]}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r10, 0x8002f515, &(0x7f0000000e00)) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000e40)={0x3, 0x5}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept(r5, &(0x7f0000000e80)=@x25={0x9, @remote}, &(0x7f0000000f00)=0x80) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000f40)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x3, 0x7, 0x532, 0x100, 0x8000000000000000, 0x20, r2}) socket$nl_route(0x10, 0x3, 0x0) 3.851278587s ago: executing program 4 (id=1430): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c000180080018"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 3.850561371s ago: executing program 2 (id=1431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x20}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r5, 0xc08ba000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x39c, 0x8, 0x300, 0x70bd29, 0x25dfdbfb, {0x16}, [@nested={0xb1, 0x86, 0x0, 0x1, [@generic="7149582523ae2cbc90f0053baa730bc7a0468803fe528e77a8a29c12598d97", @typed={0x4d, 0x99, 0x0, 0x0, @binary="40619759c18d3dd94efd497129e57b3b111520d80451edd8229c42f126d8ab576b79b52f1b31ad2cd6e40fc94baca96949e00d9aad03cc39f3a40bc113ad0b385f58b62e9f1c1e50f7"}, @typed={0x29, 0xd0, 0x0, 0x0, @binary="9d1d22671f89bb51688a8fa06df4cb2380d3cbd2afe6034dc1d414989dab220e55c478dbfc"}, @typed={0x8, 0x142, 0x0, 0x0, @str='*}@\x00'}, @generic="fb0d5f109fa21e23b3a1"]}, @nested={0xd8, 0x81, 0x0, 0x1, [@generic="261d09722f2ca1a99a266810018db764ee1b0bb4efddb8bf92dd8c1152f2a43db26796390f944cab407be1176e9abcd1f77351df1ff73a8b1405bd7412540b2fe32a781fba9e7886e421cb962d0db0b491bd253976945c5a1510ad192f43a4a9dedb3300db7c7f6c5f0e04b105cfe3e51456eb1c48a12d60a4405ba5c4e2fc185be0da2c3d3cf511984b078fd5149ff4489df0a685e5d36c4f32c67898f49667257515067fdf4143208f448bfb548648d656f3fc14c8dc8af4af524cba8c414e43e6f78d84c8b81bfe2c438894f54ccc5b572e15"]}, @generic="fc14e6ea8b83692ccc0622", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@mcast2}, @generic="ee7bcb283f495fc6c99511e86ac433dbeb467c26fb4a1128623bf4fe48b0a2584369ea22d379cc38c3f61c0936c1f1383899933adae9eca4eebf3b8b30d532c54c26cd5c246d3b16ac63685a", @generic="4a552d1a104799aa42ff840c57dff61757f3453b79a3559e239bb4ac073b68d451740276eae39be5adba34c1f71463ccf1d6429fcc6c72575b7eea03565eae113ff6cdeaf19445974f38edc4b8a269dd2a90cb6cba3ae71ae963ac7f05942ff732fa0d77b590945ed25a82d34074735f78a8c4bd7e31a56464ffa674", @generic="36ee3aa187e25f29077cd5bdef7a1aca0656d0746284470d512342f919054efc3ad6786eaa86c763b2438506aad461f11a5d6902277f4ca41c23f2a01c792a72daeab30d058679a8d4ee673789dc0bea97ffae9a2c8074bc1f25c1ffe6170d9e751b344064e8c3c46d23bf88a999356c29a184fa5f29ba2f0e35f73eec1493bf273dc05a85ddfcc78b5eca4da94ea9017f66777f6de55a83b93ae9d4ab2960512644f89ce061e2b3572cdaffa3c712f058b10933955376f5eed752f7e7288e4d72613d82831bad83e0f21850e276a83ece087a82e2f0af0958eb5b67d1ef31c1237ba316af8e86d1152799183d3c2bcda68c", @generic="8763aac3a2760360af74754fdbf71523cb83e3aa3348e4baca0c153ad71c9b46c73d04"]}, 0x39c}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x20}], 0x1}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r5, 0xc08ba000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x39c, 0x8, 0x300, 0x70bd29, 0x25dfdbfb, {0x16}, [@nested={0xb1, 0x86, 0x0, 0x1, [@generic="7149582523ae2cbc90f0053baa730bc7a0468803fe528e77a8a29c12598d97", @typed={0x4d, 0x99, 0x0, 0x0, @binary="40619759c18d3dd94efd497129e57b3b111520d80451edd8229c42f126d8ab576b79b52f1b31ad2cd6e40fc94baca96949e00d9aad03cc39f3a40bc113ad0b385f58b62e9f1c1e50f7"}, @typed={0x29, 0xd0, 0x0, 0x0, @binary="9d1d22671f89bb51688a8fa06df4cb2380d3cbd2afe6034dc1d414989dab220e55c478dbfc"}, @typed={0x8, 0x142, 0x0, 0x0, @str='*}@\x00'}, @generic="fb0d5f109fa21e23b3a1"]}, @nested={0xd8, 0x81, 0x0, 0x1, [@generic="261d09722f2ca1a99a266810018db764ee1b0bb4efddb8bf92dd8c1152f2a43db26796390f944cab407be1176e9abcd1f77351df1ff73a8b1405bd7412540b2fe32a781fba9e7886e421cb962d0db0b491bd253976945c5a1510ad192f43a4a9dedb3300db7c7f6c5f0e04b105cfe3e51456eb1c48a12d60a4405ba5c4e2fc185be0da2c3d3cf511984b078fd5149ff4489df0a685e5d36c4f32c67898f49667257515067fdf4143208f448bfb548648d656f3fc14c8dc8af4af524cba8c414e43e6f78d84c8b81bfe2c438894f54ccc5b572e15"]}, @generic="fc14e6ea8b83692ccc0622", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@mcast2}, @generic="ee7bcb283f495fc6c99511e86ac433dbeb467c26fb4a1128623bf4fe48b0a2584369ea22d379cc38c3f61c0936c1f1383899933adae9eca4eebf3b8b30d532c54c26cd5c246d3b16ac63685a", @generic="4a552d1a104799aa42ff840c57dff61757f3453b79a3559e239bb4ac073b68d451740276eae39be5adba34c1f71463ccf1d6429fcc6c72575b7eea03565eae113ff6cdeaf19445974f38edc4b8a269dd2a90cb6cba3ae71ae963ac7f05942ff732fa0d77b590945ed25a82d34074735f78a8c4bd7e31a56464ffa674", @generic="36ee3aa187e25f29077cd5bdef7a1aca0656d0746284470d512342f919054efc3ad6786eaa86c763b2438506aad461f11a5d6902277f4ca41c23f2a01c792a72daeab30d058679a8d4ee673789dc0bea97ffae9a2c8074bc1f25c1ffe6170d9e751b344064e8c3c46d23bf88a999356c29a184fa5f29ba2f0e35f73eec1493bf273dc05a85ddfcc78b5eca4da94ea9017f66777f6de55a83b93ae9d4ab2960512644f89ce061e2b3572cdaffa3c712f058b10933955376f5eed752f7e7288e4d72613d82831bad83e0f21850e276a83ece087a82e2f0af0958eb5b67d1ef31c1237ba316af8e86d1152799183d3c2bcda68c", @generic="8763aac3a2760360af74754fdbf71523cb83e3aa3348e4baca0c153ad71c9b46c73d04"]}, 0x39c}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) (async) 3.623350438s ago: executing program 2 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.411540547s ago: executing program 0 (id=834): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x3a) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="fe86a6a3e5e6f7530c2e69876c75634d4786b759fff6582798b7e15c1763f0e83fb231e9313c188dc46da8a8f9da2cd4b1e2879a60789d8253835c8255f302847817e8a49fe7cedc8791def2cdfb60dfb530a9f1bff86a88f01a01ad706047c7f74f162cadcd7868f7bc9b9107b2201221105b4e0245ccfe8e9e5a6b79729e82dea651661601b97dc4403272ec6c59dd40d3a0e1a9e089fce836e1ec28619d31c4303e535509bdf7104c47d880083c38f05d274ba6e653176606995cf1b5e9dc6d0cf762"}, {&(0x7f0000000080)="71f7f10f059a6a01adb6395bbaa01abde9"}, {&(0x7f00000000c0)="8a2f51d6fe33d4dcbb6ba1882c2473a085158827d2db1a3e06bee35e7c99ae8d5d"}, {&(0x7f0000000240)="aab74223fd8887108358d5869b883d1907e627ac00b46a93fd522e42cc4e257bccc7fcb5b7ba1a35309d1c1c2e2892cbf88917015ae9b7d737211bf1fcb0e4dcb5cb2cf962a3e6f8f3abb4c3bec54be950b134f3b607922abff4fc8be1dec81686d704402d5ef8da02ee80f42247d80ba4cc47840d788c91f467f5c908d13c343f2fc251c324f4abaaf6a8cae21329b521d52b100c9e3bc4f4b73b834dc95bd390803c15976483997b8b7a92bcb77996d6d3da8b3b03998db5fe5c029318824cff6ab638560cd637327d075c0f"}, {&(0x7f0000000340)="f374a7f1a3ced1d9c348a0244b2f5bc6078632b76d7cd3df02a5c34f63afd74aafed0a3f33d805d484f42a2870416f2cef78a409d32dbea33af5f3a8b3483bbe9c5cc3cfc6f6573cc899471cd45670a1b434c36f50a83a83038b33646b929ef15be0f7a188f961726846551537ddcf8bd2f3f572fea96a07bc4ac53820884e48024d12fbf584b4339c9b3eafc8f9cc0fe7d658d7d89cffe637ed5e84f75642165d0c8e5e4024b72072bacfdc0b8537c04a57fe30b649901a56610f9ec2e3fe10e522b75db23bc176fe2e522b1fd516ae2d38bed0b0f36d174c85962d51492a3b88c1292ed48fce0c89958c27031c"}], 0x52}}], 0x400000000000172, 0x4000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x9, 0x4}, {0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}}, 0x0) 2.176046307s ago: executing program 1 (id=1200): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xbd9d4d65b4ba916a, 0x8000}, 0xc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4001}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x19eb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bind$qrtr(r0, &(0x7f00000001c0), 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x5, 0xb, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x80, 0x2, 0x7f}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0xa0, 0x1d, r4, 0xee00}, {0x7ff, 0xffff, 0x2, 0x101, 0x8, 0x80, 0x8, 0x10001}, {0x800, 0x101, 0x80000000, 0x9}, 0xf, 0x6e6bb4, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x2, 0x0, 0x4, 0x2, 0x6}}, 0xe8) connect$qrtr(r0, &(0x7f0000000400)={0x2a, 0xffffffff, 0x8000}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0xc, 0x67, 0x9, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xe4, 0x0, 0x0, 0x70bd25}, @sadb_x_sec_ctx={0xc, 0x18, 0x48, 0x3, 0x56, "4013f78f08298f98538decc98b6cfda1280b96e86a4da954da6e5a44b46eb6f152ff1e10324b87fc3f391dffc1f73568ebccff0644cc26ae611e6851963da41ea1e2abe110a875ecd6a83738e334d9d087ee0b831c83"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x80000000}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0x9}]}, 0xa0}}, 0x40) write(r3, &(0x7f00000005c0)="aa39c375319d4fda7815e0052f3861d2e61170fd80e84f7da28dd4f8bc90f00850176acb9567a1781a572ed44f47e1721afdddd4e5ef45e0b2c2005bacb144741d16fb507649b538ce7f349c99b8c1c60b89c339e694be72531124d197715ef5bd40b2fb07b801aae635cf92", 0x6c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) pwritev(r6, &(0x7f0000000b80)=[{&(0x7f00000006c0)="8f9e1a926703dc78b3ca6943d9753a7e8cfdd7193ab91793d5e6830d4f61cb4f2a2034107bffad1924615cba8c72ef4c77bf7e26b177d75e9f7b473bd9560e30a5c16233147ecd930d15629f73815940490509d512b4aa79f50e1916516537c3a0d8c6e05ed29e617f9688dd49f068ca713654960084f525d5bb31a20c2cbd5e654abd74", 0x84}, {&(0x7f0000000780)="274843636b0534780f6a9e02587f", 0xe}, {&(0x7f00000007c0)="c0d8f9c3adea37b649a289efca1711d48ea7e86300cbb03077d0b7ac03162a8a129db21c2b69902ec84a9ec1bd0186d4af59c326dea7e31408f28596045438ec0d294b8de9a496bd6a4800e4d9fd05ebbf62641fb1087c264bf86b4260cc53c72e398599b45ef3d2810d72e17217a4dd987aed2eb79a745a249da50562af22fa2a550313cb", 0x85}, {&(0x7f0000000880)="cfbf84cea7c5e2618b101103c2cd691784e7708f434282fb9cb1eecd56a68a49e3ae0bfe3afacab91a7726e97c909a5e87e6d559c31da75d2b61a34f69feee56e17110a0be7c0254cdcf7d735b06d3eeb4f2d8e4f1901d255dbfd0a6dd0be79e335d02549d44511bd436da9af4a369617d062d69566c9983141eeb9aa4e96851e0f1", 0x82}, {&(0x7f0000000940)="9c9a3c1e1bac56c69c4b155956e83e8baae1a374dad66c535a6e81e62ce373a4966d925a49f8d188618c6bb534f4d884333323238ad1d806e4d61b76dad8970602d4203b8accd861e26026ad7299184fa4926d8d377cbc4d8557c408be13682035b2420d0eec48990f0aa517f62b89ddc28eed92d1496c6353332d1beba82fc89c95b6b99ca815389d8700e1c47dc580a3cc9a6335f647d3548600e613370cadebf0d4c2c7a94ec10c8d286ed79975540f955dcac91b43c2881529fca1793c5da0955b2794a47cc5a47c7b53b88a4a59d510d73a50ddccd42655fe0f", 0xdc}, {&(0x7f0000000a40)="e49ea94286ba795c18cc575f5eb283b4cb75a3f0961c72b3f103d40f23df3a42e724ffa69976be5e1cfd29b156e9c79fc28615904b3732febbfe5febee20374611290b613afdb7205cbc25e0b73ac2e4f899bc", 0x53}, {&(0x7f0000000ac0)="ec05fd46bff2b672a94fc8935b7b6687f5d70c7ff341b9783358ae978794f9354e79c29898aac83762642f60782114759b7d87feb6cf94c06b177f4bc0c4dfbf2a17b22a3ed2efb5b7e98b63973d4755f7281446673c1fa181ad830088a3e0042992b9ce5af149e2a956c2868f8bfcc855a74f4f7bd2f9515698d900b31e0d48605dacb5df0e36e1b90c8c", 0x8b}], 0x7, 0x7, 0x1) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r7, &(0x7f0000000c40), 0x9) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r7}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x4}, {0x5, 0x5}, {0x0, 0xca}, {0x9, 0x6}, {0x9, 0x6}, {0x8, 0x6}, {0x8, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3a, 0x2}, {0x0, 0x3}], "ba77ce8b43c02cfa"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x5}, {0x9, 0x7}], "40e00df4550910b8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{}, {0x7, 0x2}, {0x0, 0x3}, {0x9, 0x6}, {0x9, 0x3}, {0xd, 0x4}, {0x9, 0x6}, {0xff, 0x1}, {0xcc, 0x1}, {0x8, 0x2}, {}, {0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x7f, 0x5}, {0xc, 0x1}], "c5bd40c6462a5a73"}}]}, 0x74}}, 0x24048040) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000e40)={{}, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz0\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000001e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/245, 0xf5}], 0x2, &(0x7f00000020c0)=""/211, 0xd3}, 0x6}, {{&(0x7f00000021c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/94, 0x5e}], 0x2}, 0x7}, {{&(0x7f0000003300)=@nl=@proc, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/71, 0x47}, {&(0x7f0000003400)=""/38, 0x26}], 0x2}, 0xe9}, {{&(0x7f0000003480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/221, 0xdd}], 0x1, &(0x7f0000003640)=""/238, 0xee}, 0x3}], 0x4, 0x100, &(0x7f0000003840)) writev(r3, &(0x7f0000003b80)=[{&(0x7f0000003880)=']', 0x1}, {&(0x7f00000038c0)="1047670e719815cf58e4c736d27b3f168033da05aec2ee966aca7949c6e192c53db0ff34754e477a4eaf03ea4b27c3845ef38bfbafcdb16a65c74b8ad14606d862e334ed7f26645ce36394ee37057888fbec63847660a3baeb4d3536e8e507bfb0d50411f48690fc2c3368f50c524e07afc458cd62e300a8809741fca47902867c6d11e15e1ac645e87d65aae86fd9d3356aff4f983d0cdb332427073fe51269883ca2303feda5aaa63f8d951f909555c8ecccd2de94a8fe6d6eb35915c53e06cedb381c38559e2c18cf81734ce1ef8f16ef3af482190acd5e060c91eb4aaaedc46b", 0xe2}, {&(0x7f00000039c0)="3c7a2c71cd2add7c5c740638ea9fdcea958f0f8d44219ab7a19ff7d0c100d85a806cca61067b973178f225c7ebc9150ad6e925d4fe3bcaca03dfce1285c846c7d0b50f49eeacece0f909848e58e93e7a5f08686e4e379d1126da15583ea26dfea06d2f99645b81c8bed6e438b1b0984806fffd428ef12be5458a5dd727c1b26aa1a8797b761a81d6c582e761ade50996cd5399838c1f641663c36bcd981007754076e18322157b1278b4158fcf96b34a2663fb9da7f8ab41a5b7088ece14c82947cbbaf73279fb802d111024b1135cab6509f2206a1ee6370d9ad860e0cfb0bedbb3fb47699215c3", 0xe8}, {&(0x7f0000003ac0)="655414b88a0c10d49c8af07dc412d382e3d1c6b39e8260ff179890f1f1f3670da26520f42f80ee3695c230dfb19168304de8afd12f7cee85b1aa02f47318fb70a2b53a4f6f49e643837c23d9190d6c652d04b2eb458896a8b21c10cff09f75b37b3b0b0f82d5c55871e15e3e0abe6f71f87cf6f9508de780e84b112cf9da9ba8c962cf56fbb3a1", 0x87}], 0x4) setsockopt$MRT_DEL_MFC_PROXY(r11, 0x0, 0xd3, &(0x7f0000003bc0)={@private=0xa010100, @private=0xa010102, 0x0, "8bc09860e25a57dd47a24887776a8bd9e7225e5993c0d427abdba8ceade6c118", 0xfffffffa, 0x1, 0x3, 0x7}, 0x3c) 1.565769104s ago: executing program 2 (id=1433): r0 = socket(0x3, 0x80005, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x3, 0x400c275, 0x0, 0x32, 0x100000}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2, 0x6f, "84c38f790e053776202e32a9769c2a1a648ef52b8f4c4143de58e473416c86b6952067d4343c19f4a7f029bbb0aad2e089a276e4e9a3086961c8c4c59df21aa744fc95473dfd49a82d1db23b193483261107815249861461563f858f16f801fdc9035e8a4cf8a71b1d191ded2c3133"}, &(0x7f0000000080)=0x77) 1.565384035s ago: executing program 4 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x4000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 1.375377759s ago: executing program 2 (id=1435): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001780)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) 1.282044937s ago: executing program 2 (id=1436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x4, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0x4, 0xfffffffe}}}}, 0x30}}, 0x2c040880) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 1.197785198s ago: executing program 4 (id=1437): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f00000008c0)=r1, 0x4) 999.158712ms ago: executing program 4 (id=1438): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[], 0xfe33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000b45805d3f4bb97f2000008000300", @ANYRES32=r4, @ANYBLOB="40007a80"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x128, 0x128, 0x1f8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "02bd", 0x1}}, @common=@srh={{0x30}, {0xff, 0x22, 0x0, 0x2, 0x5d0e, 0x10}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7c3, 0x1}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'lo\x00', 'vcan0\x00', {}, {}, 0x33, 0x6, 0x7, 0x61}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x7, 0x1, [0x4, 0xf9f7, 0x5, 0x0, 0x8a, 0x7, 0x7f, 0xfff6, 0x9bc, 0x9, 0x100, 0x8, 0x2, 0x5, 0x3, 0x5], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 25.737691ms ago: executing program 4 (id=1439): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r5, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 2 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010100, 0x6}]}, @ssrr={0x89, 0x1f, 0xc4, [@remote, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) kernel console output (not intermixed with test programs): tadv_slave_0 [ 213.607132][T10294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.617851][T10294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.628134][T10294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.638907][T10294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.650347][T10294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.662479][T10294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.671731][T10294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.681365][T10294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.690903][T10294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.787975][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.808100][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.841256][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.851692][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.012747][ T3476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.407794][ T3476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.750016][ T3476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.853613][T10297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.865754][T10297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.874877][T10297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.883745][T10297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.894647][T10297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.978897][ T3476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.263390][T10389] chnl_net:caif_netlink_parms(): no params data found [ 215.397685][ T3476] bridge_slave_1: left allmulticast mode [ 215.403372][ T3476] bridge_slave_1: left promiscuous mode [ 215.409600][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.420535][ T3476] bridge_slave_0: left allmulticast mode [ 215.427403][ T3476] bridge_slave_0: left promiscuous mode [ 215.433115][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.738121][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.748869][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.762240][ T3476] bond0 (unregistering): Released all slaves [ 215.828116][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.836546][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.843879][T10389] bridge_slave_0: entered allmulticast mode [ 215.852005][T10389] bridge_slave_0: entered promiscuous mode [ 215.873074][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.880874][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.888760][T10389] bridge_slave_1: entered allmulticast mode [ 215.897315][T10389] bridge_slave_1: entered promiscuous mode [ 215.960809][T10389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.982627][T10389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.090904][T10389] team0: Port device team_slave_0 added [ 216.117664][T10389] team0: Port device team_slave_1 added [ 216.238281][ T3476] hsr_slave_0: left promiscuous mode [ 216.254441][ T3476] hsr_slave_1: left promiscuous mode [ 216.260616][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.284877][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.301645][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.309777][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.354711][ T3476] veth1_macvtap: left promiscuous mode [ 216.360333][ T3476] veth0_macvtap: left promiscuous mode [ 216.384614][ T3476] veth1_vlan: left promiscuous mode [ 216.390008][ T3476] veth0_vlan: left promiscuous mode [ 216.525263][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.534287][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.547072][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.562765][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.571584][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.774808][T10297] Bluetooth: hci4: command 0x0405 tx timeout [ 216.937135][T10081] Bluetooth: hci0: command tx timeout [ 217.068292][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 217.103343][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 217.465902][T10420] netlink: 'syz.2.954': attribute type 8 has an invalid length. [ 217.493186][T10389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.516797][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.558040][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.955'. [ 217.579231][T10389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.593392][T10389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.600954][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.664165][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'. [ 217.685946][T10389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.001258][T10438] netlink: 'syz.2.957': attribute type 4 has an invalid length. [ 218.031541][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 218.240808][T10389] hsr_slave_0: entered promiscuous mode [ 218.255495][T10389] hsr_slave_1: entered promiscuous mode [ 218.273538][T10389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.290899][T10389] Cannot create hsr debugfs directory [ 218.579543][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 218.605097][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 218.624584][T10081] Bluetooth: hci3: command tx timeout [ 218.958967][T10483] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 218.974239][T10485] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 219.005795][T10485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'. [ 219.011638][ T3476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.026514][T10081] Bluetooth: hci0: command tx timeout [ 219.067462][T10487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.966'. [ 219.077818][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 219.089953][T10487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 219.103743][T10485] dummy0: entered promiscuous mode [ 219.126015][T10487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.966'. [ 219.213336][T10485] bond0: (slave dummy0): Releasing backup interface [ 219.308540][T10485] bridge0: port 3(dummy0) entered blocking state [ 219.334984][T10485] bridge0: port 3(dummy0) entered disabled state [ 219.343207][T10485] dummy0: entered allmulticast mode [ 219.432815][ T3476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.597648][ T3476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.853064][ T3476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.943015][T10406] chnl_net:caif_netlink_parms(): no params data found [ 220.652774][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.694538][T10081] Bluetooth: hci3: command tx timeout [ 220.710869][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.746889][T10406] bridge_slave_0: entered allmulticast mode [ 220.773328][T10406] bridge_slave_0: entered promiscuous mode [ 220.811076][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.837899][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.869454][T10406] bridge_slave_1: entered allmulticast mode [ 220.883386][T10406] bridge_slave_1: entered promiscuous mode [ 220.993324][T10406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.008748][T10406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.044575][ T3476] bridge_slave_1: left allmulticast mode [ 221.051434][ T3476] bridge_slave_1: left promiscuous mode [ 221.057698][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.091685][ T3476] bridge_slave_0: left allmulticast mode [ 221.098203][T10081] Bluetooth: hci0: command tx timeout [ 221.111257][ T3476] bridge_slave_0: left promiscuous mode [ 221.117753][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.526721][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.538987][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.549452][ T3476] bond0 (unregistering): Released all slaves [ 221.699251][T10406] team0: Port device team_slave_0 added [ 221.721298][T10406] team0: Port device team_slave_1 added [ 221.959677][T10406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.968317][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.020011][T10406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.060974][T10389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.098735][T10389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.221563][T10406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.257484][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.343566][T10406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.482504][T10389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.529430][T10389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.775362][T10081] Bluetooth: hci3: command tx timeout [ 222.853531][T10406] hsr_slave_0: entered promiscuous mode [ 222.871014][T10406] hsr_slave_1: entered promiscuous mode [ 222.878731][T10406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.886836][T10406] Cannot create hsr debugfs directory [ 222.948134][ T3476] hsr_slave_0: left promiscuous mode [ 222.963241][ T3476] hsr_slave_1: left promiscuous mode [ 222.973324][T10617] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 222.995238][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.013063][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.019203][T10617] __nla_validate_parse: 130 callbacks suppressed [ 223.019224][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 223.041405][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.059800][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.083966][ T3476] veth1_macvtap: left promiscuous mode [ 223.103214][ T3476] veth0_macvtap: left promiscuous mode [ 223.114549][ T3476] veth1_vlan: left promiscuous mode [ 223.120132][ T3476] veth0_vlan: left promiscuous mode [ 223.175414][T10081] Bluetooth: hci0: command tx timeout [ 223.698885][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 223.738946][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 224.267331][T10632] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 224.330631][T10632] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 224.503780][T10637] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.675050][T10646] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 224.686633][T10644] syz_tun: entered allmulticast mode [ 224.793886][T10644] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 224.835171][T10644] dvmrp0: left allmulticast mode [ 224.855084][T10081] Bluetooth: hci3: command tx timeout [ 225.010027][T10643] syz_tun: left allmulticast mode [ 225.109939][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 225.152343][T10389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.222172][T10389] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.282708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.289987][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.376770][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.383935][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.480357][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1010'. [ 225.682931][T10406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.750150][T10406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.797485][T10406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.854702][T10406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.270887][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 226.302658][T10406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.342028][T10716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1021'. [ 226.427521][T10406] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.468532][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.475743][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.543870][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.551126][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.755556][T10389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.018039][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.038830][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.200868][T10389] veth0_vlan: entered promiscuous mode [ 227.257459][T10389] veth1_vlan: entered promiscuous mode [ 227.385231][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 227.425400][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 227.433501][T10389] veth0_macvtap: entered promiscuous mode [ 227.458840][T10762] netlink: 'syz.4.1031': attribute type 12 has an invalid length. [ 227.495868][T10762] netlink: 'syz.4.1031': attribute type 29 has an invalid length. [ 227.504058][T10762] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1031'. [ 227.545946][T10763] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1031'. [ 227.617259][T10389] veth1_macvtap: entered promiscuous mode [ 227.629760][T10764] xt_CT: No such helper "snmp" [ 227.698375][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.788126][T10389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.807639][T10389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.855564][T10389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.881548][T10389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.917537][T10389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.972218][T10389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.011779][T10389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.048170][T10389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.096466][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 228.107051][T10389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.142939][T10389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.179126][T10389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.201295][T10389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.466331][T10406] veth0_vlan: entered promiscuous mode [ 228.549753][T10406] veth1_vlan: entered promiscuous mode [ 228.593717][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.619800][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.703787][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.719569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.817618][T10406] veth0_macvtap: entered promiscuous mode [ 228.871477][T10824] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1045'. [ 228.940463][T10406] veth1_macvtap: entered promiscuous mode [ 229.021402][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.075108][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.123691][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.154540][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.181092][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.204494][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.233499][T10406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.302685][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 229.345370][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.403135][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.423753][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.438424][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.450927][T10406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.569015][T10406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.595562][T10406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.615139][T10406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.623892][T10406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.923586][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.026005][T10860] bond2: entered promiscuous mode [ 230.031905][T10860] bond2: entered allmulticast mode [ 230.057729][T10860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.172893][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.312174][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.342223][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.380434][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.422760][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.470639][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.479571][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.800659][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'. [ 230.838672][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 230.848167][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 230.907648][T10888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'. [ 230.933615][ T36] bridge_slave_1: left allmulticast mode [ 230.950060][ T36] bridge_slave_1: left promiscuous mode [ 230.968750][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.012776][ T36] bridge_slave_0: left allmulticast mode [ 231.029135][ T36] bridge_slave_0: left promiscuous mode [ 231.050741][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.243462][T10297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.260445][T10297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.270132][T10297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.284647][T10297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.296570][T10297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.854243][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.869797][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.882615][ T36] bond0 (unregistering): Released all slaves [ 232.283945][ T36] hsr_slave_0: left promiscuous mode [ 232.293525][ T36] hsr_slave_1: left promiscuous mode [ 232.300405][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.308814][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.319404][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.327189][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.353459][ T36] veth1_macvtap: left promiscuous mode [ 232.360434][ T36] veth0_macvtap: left promiscuous mode [ 232.366494][ T36] veth1_vlan: left promiscuous mode [ 232.371852][ T36] veth0_vlan: left promiscuous mode [ 232.973954][ T120] IPVS: starting estimator thread 0... [ 233.016761][T10081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.026801][T10081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.037527][T10081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.057884][T10081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.070151][T10081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.085972][T10943] IPVS: using max 34 ests per chain, 81600 per kthread [ 233.116043][ T36] team0 (unregistering): Port device team_slave_1 removed [ 233.159386][ T36] team0 (unregistering): Port device team_slave_0 removed [ 233.344814][T10081] Bluetooth: hci0: command tx timeout [ 233.528504][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 234.022599][T10903] chnl_net:caif_netlink_parms(): no params data found [ 234.150225][T10970] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 234.207691][T10970] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 234.230001][T10970] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1068'. [ 234.411768][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1069'. [ 234.780287][T10944] chnl_net:caif_netlink_parms(): no params data found [ 234.814968][T10992] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1074'. [ 234.957850][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.967892][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.978831][T10903] bridge_slave_0: entered allmulticast mode [ 234.989105][T10903] bridge_slave_0: entered promiscuous mode [ 235.057440][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.086380][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.094894][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.102162][T10903] bridge_slave_1: entered allmulticast mode [ 235.110487][T10903] bridge_slave_1: entered promiscuous mode [ 235.179369][T10081] Bluetooth: hci3: command tx timeout [ 235.327330][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.414675][T10081] Bluetooth: hci0: command tx timeout [ 235.649287][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.759382][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.920058][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.973154][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 236.107758][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.243304][T10903] team0: Port device team_slave_0 added [ 236.382786][T10903] team0: Port device team_slave_1 added [ 236.400703][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 236.441603][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.457788][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.471216][T11050] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 236.471403][T10944] bridge_slave_0: entered allmulticast mode [ 236.518026][T11050] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1084'. [ 236.520926][T10944] bridge_slave_0: entered promiscuous mode [ 236.576262][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 236.592879][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1084'. [ 236.624889][T11049] netlink: 'syz.4.1084': attribute type 11 has an invalid length. [ 236.694950][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.702159][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.719204][T10944] bridge_slave_1: entered allmulticast mode [ 236.733207][T10944] bridge_slave_1: entered promiscuous mode [ 236.750639][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.761420][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.795779][T11059] sctp: [Deprecated]: syz.1.1086 (pid 11059) Use of int in maxseg socket option. [ 236.795779][T11059] Use struct sctp_assoc_value instead [ 236.810206][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.944155][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.953598][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.987012][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.031392][T10944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.164585][T10944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.191234][T11072] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 237.208963][T11072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1089'. [ 237.255270][T10081] Bluetooth: hci3: command tx timeout [ 237.292649][T10903] hsr_slave_0: entered promiscuous mode [ 237.319050][T10903] hsr_slave_1: entered promiscuous mode [ 237.329787][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.342685][T10903] Cannot create hsr debugfs directory [ 237.408392][T10944] team0: Port device team_slave_0 added [ 237.466524][T10944] team0: Port device team_slave_1 added [ 237.589272][ T36] bridge_slave_1: left allmulticast mode [ 237.604658][ T36] bridge_slave_1: left promiscuous mode [ 237.624611][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.659654][ T36] bridge_slave_0: left allmulticast mode [ 237.669642][ T36] bridge_slave_0: left promiscuous mode [ 237.684233][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.872259][T11090] netlink: 'syz.2.1094': attribute type 28 has an invalid length. [ 238.017630][T10081] block nbd1: Receive control failed (result -32) [ 238.103222][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.114737][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.125560][ T36] bond0 (unregistering): Released all slaves [ 238.284197][T10944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.306296][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.370252][T10944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.385957][T10944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.393194][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.422201][T10944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.735238][T11107] __nla_validate_parse: 1 callbacks suppressed [ 238.735257][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 238.751657][T11107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1096'. [ 238.952980][T11118] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 238.985671][T10944] hsr_slave_0: entered promiscuous mode [ 238.994305][T10944] hsr_slave_1: entered promiscuous mode [ 239.027052][T10944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.043849][T10944] Cannot create hsr debugfs directory [ 239.082789][T11118] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 239.207858][ T36] hsr_slave_0: left promiscuous mode [ 239.211415][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 239.232217][ T36] hsr_slave_1: left promiscuous mode [ 239.241265][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.248794][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.257328][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.264890][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.286762][ T36] veth1_macvtap: left promiscuous mode [ 239.292367][ T36] veth0_macvtap: left promiscuous mode [ 239.299328][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1100'. [ 239.308947][ T36] veth1_vlan: left promiscuous mode [ 239.314250][ T36] veth0_vlan: left promiscuous mode [ 239.344558][T10081] Bluetooth: hci3: command tx timeout [ 239.548435][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 239.770443][ T36] team0 (unregistering): Port device team_slave_1 removed [ 239.813344][ T36] team0 (unregistering): Port device team_slave_0 removed [ 240.352758][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1102'. [ 240.619095][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 240.633140][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 240.640168][T11153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1106'. [ 240.706154][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 240.736955][T11153] netlink: 'syz.4.1106': attribute type 5 has an invalid length. [ 241.194200][T11164] netlink: 'syz.4.1111': attribute type 2 has an invalid length. [ 241.390120][T10903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.419201][T10903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.424510][T10081] Bluetooth: hci3: command tx timeout [ 241.449359][T10903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.620483][T11186] dvmrp0: entered allmulticast mode [ 241.629223][T10903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.699166][T11179] dvmrp0: left allmulticast mode [ 242.096310][T11204] bridge0: port 4(batadv2) entered blocking state [ 242.114609][T11204] bridge0: port 4(batadv2) entered disabled state [ 242.121392][T11204] batadv2: entered allmulticast mode [ 242.133484][T11204] batadv2: entered promiscuous mode [ 242.319298][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.448388][T11219] netlink: 'syz.1.1121': attribute type 23 has an invalid length. [ 242.449224][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.540771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.547992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.586610][ T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 242.596138][ T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 242.652037][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.659272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.672396][T11231] openvswitch: netlink: Key type 30 is not supported [ 242.689248][T11219] Cannot find add_set index 0 as target [ 242.743235][T10944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.797069][T10944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.861936][T10944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.923944][T10944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.280772][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.364936][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.603541][T10944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.776403][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.788545][T10944] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.840631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.847830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.898660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.905871][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.927864][T11277] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.128519][T10903] veth0_vlan: entered promiscuous mode [ 244.216755][T10903] veth1_vlan: entered promiscuous mode [ 244.341092][T11295] __nla_validate_parse: 8 callbacks suppressed [ 244.341110][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 244.347497][T11289] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 244.347523][T11289] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 244.380577][T10903] veth0_macvtap: entered promiscuous mode [ 244.397008][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1138'. [ 244.428885][T10903] veth1_macvtap: entered promiscuous mode [ 244.456913][T11295] gretap1: entered promiscuous mode [ 244.462225][T11295] gretap1: entered allmulticast mode [ 244.566906][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.620638][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.640879][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.674500][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.696775][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.815259][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.842803][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.865908][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.971312][T10903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.991931][T10903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.002877][T10903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.018437][T10903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.075102][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.280965][T10944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.539323][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.551264][T10944] veth0_vlan: entered promiscuous mode [ 245.591702][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.669122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.679955][T11343] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1152'. [ 245.688299][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 245.707669][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 245.717701][T10944] veth1_vlan: entered promiscuous mode [ 245.745851][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.772784][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.917005][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.939170][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.981824][T10944] veth0_macvtap: entered promiscuous mode [ 246.000537][T11357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1156'. [ 246.017664][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 246.027144][T11357] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1156'. [ 246.048328][T10944] veth1_macvtap: entered promiscuous mode [ 246.062196][T11357] netlink: 'syz.4.1156': attribute type 3 has an invalid length. [ 246.077558][T11357] netlink: 'syz.4.1156': attribute type 2 has an invalid length. [ 246.086341][T11357] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1156'. [ 246.145484][T11357] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 246.157732][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.170194][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.180934][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.191739][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.202228][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.228652][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.240685][T10944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.280798][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.300904][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1159'. [ 246.304974][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.327365][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.342572][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.360316][T10944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.423426][T10944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.440675][T10944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.450449][T10944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.460456][T10944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.499159][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.640856][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.753219][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.761988][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.794263][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.828125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.841036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.889582][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.053250][ T36] bridge_slave_1: left allmulticast mode [ 247.060830][ T36] bridge_slave_1: left promiscuous mode [ 247.067811][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.078724][ T36] bridge_slave_0: left allmulticast mode [ 247.084785][ T36] bridge_slave_0: left promiscuous mode [ 247.090613][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.631131][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.644121][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.657415][ T36] bond0 (unregistering): Released all slaves [ 247.748852][T10297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.764888][T10297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.773381][T10297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.790211][T10297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.800351][T10297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.121360][ T36] hsr_slave_0: left promiscuous mode [ 248.128618][ T36] hsr_slave_1: left promiscuous mode [ 248.142632][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.151162][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.165595][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.173034][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.214637][ T36] veth1_macvtap: left promiscuous mode [ 248.220237][ T36] veth0_macvtap: left promiscuous mode [ 248.226049][ T36] veth1_vlan: left promiscuous mode [ 248.231401][ T36] veth0_vlan: left promiscuous mode [ 249.044938][ T36] team0 (unregistering): Port device team_slave_1 removed [ 249.142956][ T36] team0 (unregistering): Port device team_slave_0 removed [ 249.218737][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 249.233059][T10297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.242652][T10297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.250700][T10297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.250708][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 249.253275][T10297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.284847][T10297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.655312][T11409] macvtap0: mtu less than device minimum [ 249.894711][T10297] Bluetooth: hci0: command tx timeout [ 250.193987][T11438] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 250.213205][T11447] nbd: must specify a device to reconfigure [ 250.307404][T11452] __nla_validate_parse: 3 callbacks suppressed [ 250.307423][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 250.404048][T11378] chnl_net:caif_netlink_parms(): no params data found [ 250.441021][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 250.484408][T11436] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 250.675947][T11464] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 250.711450][T11420] chnl_net:caif_netlink_parms(): no params data found [ 250.796866][T11464] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.906401][T11473] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1177'. [ 250.926883][T11473] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 250.997788][T11477] veth0: entered promiscuous mode [ 251.088571][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.096165][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.103341][T11378] bridge_slave_0: entered allmulticast mode [ 251.111280][T11378] bridge_slave_0: entered promiscuous mode [ 251.230951][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.249975][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.258759][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.266518][T11378] bridge_slave_1: entered allmulticast mode [ 251.273882][T11378] bridge_slave_1: entered promiscuous mode [ 251.280809][T11468] veth0: left promiscuous mode [ 251.291775][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1181'. [ 251.334856][T10297] Bluetooth: hci3: command tx timeout [ 251.451245][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.518515][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.623573][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.647555][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.662727][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1184'. [ 251.750287][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.760615][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.769104][T11420] bridge_slave_0: entered allmulticast mode [ 251.777620][T11420] bridge_slave_0: entered promiscuous mode [ 251.840047][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.861872][T11378] team0: Port device team_slave_0 added [ 251.879170][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.906237][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.925773][T11420] bridge_slave_1: entered allmulticast mode [ 251.964535][T11420] bridge_slave_1: entered promiscuous mode [ 251.984995][T10297] Bluetooth: hci0: command tx timeout [ 252.102886][T11378] team0: Port device team_slave_1 added [ 252.256580][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.285031][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.292154][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.321192][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.401297][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.525359][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.532369][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.616002][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 252.620287][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.744802][T11420] team0: Port device team_slave_0 added [ 252.768544][T11420] team0: Port device team_slave_1 added [ 252.785599][T11547] netlink: 'syz.2.1188': attribute type 3 has an invalid length. [ 252.811917][T11547] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1188'. [ 253.306235][T11378] hsr_slave_0: entered promiscuous mode [ 253.333835][T11378] hsr_slave_1: entered promiscuous mode [ 253.366045][T11378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.390904][T11378] Cannot create hsr debugfs directory [ 253.409253][ T36] bridge_slave_1: left allmulticast mode [ 253.424820][T10297] Bluetooth: hci3: command tx timeout [ 253.435427][ T36] bridge_slave_1: left promiscuous mode [ 253.453650][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.464123][ T36] bridge_slave_0: left allmulticast mode [ 253.476268][ T36] bridge_slave_0: left promiscuous mode [ 253.482038][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.802417][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.813467][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.825041][ T36] bond0 (unregistering): Released all slaves [ 253.839348][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.847170][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.874947][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.909787][T11558] lo: entered promiscuous mode [ 253.929442][T11558] netlink: 'syz.1.1192': attribute type 2 has an invalid length. [ 253.937696][T11558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.049799][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.061778][T10297] Bluetooth: hci0: command tx timeout [ 254.063670][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.097336][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.109209][T11563] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 254.187272][T11420] hsr_slave_0: entered promiscuous mode [ 254.193917][T11420] hsr_slave_1: entered promiscuous mode [ 254.207655][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.221771][T11420] Cannot create hsr debugfs directory [ 254.326031][T11563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.364109][T11568] bond4: (slave gretap1): making interface the new active one [ 254.372765][T11568] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 254.508400][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 254.551842][T11576] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1197'. [ 254.955946][ T36] hsr_slave_0: left promiscuous mode [ 254.962205][ T36] hsr_slave_1: left promiscuous mode [ 254.981456][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.989198][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.999434][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.007026][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.112744][ T36] veth1_macvtap: left promiscuous mode [ 255.135569][ T36] veth0_macvtap: left promiscuous mode [ 255.141276][ T36] veth1_vlan: left promiscuous mode [ 255.201096][ T36] veth0_vlan: left promiscuous mode [ 255.508255][T10297] Bluetooth: hci3: command tx timeout [ 255.625906][T10081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.635413][T10081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.643372][T10081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.652456][T10081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.663227][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.675948][T10081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.090243][ T36] team0 (unregistering): Port device team_slave_1 removed [ 256.127450][ T36] team0 (unregistering): Port device team_slave_0 removed [ 256.135039][T10297] Bluetooth: hci0: command tx timeout [ 256.816687][T11635] x_tables: duplicate underflow at hook 1 [ 257.077148][T11643] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.239122][T11651] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1214'. [ 257.574839][T10297] Bluetooth: hci3: command tx timeout [ 257.734566][T10297] Bluetooth: hci2: command tx timeout [ 257.859387][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 257.967246][T11617] chnl_net:caif_netlink_parms(): no params data found [ 258.002545][T11685] xfrm0: entered promiscuous mode [ 258.007900][T11685] xfrm0: entered allmulticast mode [ 258.022672][T11684] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1222'. [ 258.588462][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.604093][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.613640][T11617] bridge_slave_0: entered allmulticast mode [ 258.638497][T11617] bridge_slave_0: entered promiscuous mode [ 258.665037][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.672268][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.712844][T11617] bridge_slave_1: entered allmulticast mode [ 258.732310][T11617] bridge_slave_1: entered promiscuous mode [ 258.763605][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'. [ 258.772968][T11717] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1228'. [ 258.838872][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.851181][T11378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.884039][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.907924][T11721] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 258.996674][T11617] team0: Port device team_slave_0 added [ 259.003089][T11378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.046454][T11722] veth5: entered promiscuous mode [ 259.052437][T11721] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 259.167219][T11617] team0: Port device team_slave_1 added [ 259.237299][T11378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.252471][T11378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.309884][T11736] dvmrp0: entered allmulticast mode [ 259.343965][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.357914][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.392275][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.406673][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.413816][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.446432][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.612830][T11745] xt_limit: Overflow, try lower: 2147483649/128 [ 259.660610][T11617] hsr_slave_0: entered promiscuous mode [ 259.692102][T11617] hsr_slave_1: entered promiscuous mode [ 259.711308][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.744704][T11617] Cannot create hsr debugfs directory [ 259.791362][T11749] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1236'. [ 259.815262][T10297] Bluetooth: hci2: command tx timeout [ 260.091301][T11420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.158611][T11420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.290629][T11420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.380049][T11420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.565499][T11773] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1240'. [ 260.593605][T11617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.622469][T11773] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 260.774802][T11776] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 260.831843][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.866831][T11617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.915633][T11776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.978740][T11617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.042095][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.084179][T11617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.125975][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.133119][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.161348][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.168706][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.376959][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.477947][T11617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.513310][T11617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.542839][T11617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.587781][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.648499][T11617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.698070][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.705329][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.778118][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.785436][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.896976][T10297] Bluetooth: hci2: command tx timeout [ 261.990307][T11803] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.143314][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.386343][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.458634][T11378] veth0_vlan: entered promiscuous mode [ 262.522482][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.568342][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.575570][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.595978][T11378] veth1_vlan: entered promiscuous mode [ 262.640908][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.648244][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.843160][T11378] veth0_macvtap: entered promiscuous mode [ 262.899047][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.935832][T11378] veth1_macvtap: entered promiscuous mode [ 263.129689][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.155988][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.174667][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.186977][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.199242][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.261396][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.279942][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.293048][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.343257][T11378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.373061][T11378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.411506][T11378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.431128][T11378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.517348][T11420] veth0_vlan: entered promiscuous mode [ 263.527053][T11847] Cannot find del_set index 5 as target [ 263.612639][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.680093][T11420] veth1_vlan: entered promiscuous mode [ 263.757324][T11850] lo: entered promiscuous mode [ 263.768605][T11850] netlink: 'syz.4.1255': attribute type 2 has an invalid length. [ 263.803523][T11850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.830845][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.850328][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.966520][T11420] veth0_macvtap: entered promiscuous mode [ 263.979881][T10297] Bluetooth: hci2: command tx timeout [ 263.992704][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.023731][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.049346][T11420] veth1_macvtap: entered promiscuous mode [ 264.105582][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 264.118851][T11617] veth0_vlan: entered promiscuous mode [ 264.167424][T11617] veth1_vlan: entered promiscuous mode [ 264.202704][T11865] bridge0: port 3(gretap0) entered disabled state [ 264.209455][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.217740][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.290732][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.324544][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.345888][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.364733][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.384499][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.421719][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.449329][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.504786][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.526293][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.542720][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.568421][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.598092][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.750912][T11420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.775297][T11420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.784063][T11420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.803546][T11420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.867609][T11617] veth0_macvtap: entered promiscuous mode [ 264.952820][T11617] veth1_macvtap: entered promiscuous mode [ 265.112921][ T3476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.214136][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.249713][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.260765][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.271683][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.282047][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.293643][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.310267][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.322150][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.335870][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.486570][ T3476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.555862][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.565410][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.579284][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.586771][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.604401][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.615128][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.633509][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.644454][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.668492][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.716129][T11617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.733060][T11617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.745613][T11617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.761370][T11617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.800862][ T3476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.869980][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.887408][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.924287][ T3476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.137472][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.161829][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.284674][ T3476] bridge_slave_1: left allmulticast mode [ 266.290406][ T3476] bridge_slave_1: left promiscuous mode [ 266.314413][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.463113][ T3476] bridge_slave_0: left allmulticast mode [ 266.482816][ T3476] bridge_slave_0: left promiscuous mode [ 266.515501][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.039457][T10081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.052913][T10081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.061286][T10081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.071992][T10081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.079897][T10081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.301742][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.313495][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.335511][ T3476] bond0 (unregistering): Released all slaves [ 267.511482][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.520404][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.874804][ T3476] hsr_slave_0: left promiscuous mode [ 267.880985][ T3476] hsr_slave_1: left promiscuous mode [ 267.898095][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.911925][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.922650][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.934385][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.990618][ T3476] veth1_macvtap: left promiscuous mode [ 268.006343][ T3476] veth0_macvtap: left promiscuous mode [ 268.012051][ T3476] veth1_vlan: left promiscuous mode [ 268.041205][ T3476] veth0_vlan: left promiscuous mode [ 269.095322][T10081] Bluetooth: hci0: command tx timeout [ 269.160957][T10297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.181282][T10297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.190514][T10297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.201079][T10297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.217469][T10297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.314127][T10297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.331669][T10297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.347769][T10297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.365326][T10297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.373286][T10297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.543078][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 269.608317][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 270.449071][T12011] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1270'. [ 270.624132][T11930] chnl_net:caif_netlink_parms(): no params data found [ 270.815788][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 270.865772][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 271.055733][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 271.174693][T10297] Bluetooth: hci0: command tx timeout [ 271.255703][T10297] Bluetooth: hci2: command tx timeout [ 271.424413][T10297] Bluetooth: hci3: command tx timeout [ 271.500927][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.531193][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.559564][T11930] bridge_slave_0: entered allmulticast mode [ 271.579613][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 271.591771][T11930] bridge_slave_0: entered promiscuous mode [ 271.648293][T11985] chnl_net:caif_netlink_parms(): no params data found [ 271.705575][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.751680][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.773350][T11930] bridge_slave_1: entered allmulticast mode [ 271.807053][T11930] bridge_slave_1: entered promiscuous mode [ 271.893370][T11982] chnl_net:caif_netlink_parms(): no params data found [ 271.939843][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.958229][T12063] xt_CT: No such helper "snmp" [ 271.959977][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.009448][T12061] IPv6: Can't replace route, no match found [ 272.208068][T11930] team0: Port device team_slave_0 added [ 272.273177][T11930] team0: Port device team_slave_1 added [ 272.434178][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.454531][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.490866][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.558424][ T3476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.591333][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.603658][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.618461][T11985] bridge_slave_0: entered allmulticast mode [ 272.634482][T11985] bridge_slave_0: entered promiscuous mode [ 272.643598][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.652746][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.680880][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.722923][T11982] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.730323][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.738698][T11982] bridge_slave_0: entered allmulticast mode [ 272.746942][T11982] bridge_slave_0: entered promiscuous mode [ 272.761696][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.769349][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.794993][T11982] bridge_slave_1: entered allmulticast mode [ 272.802689][T11982] bridge_slave_1: entered promiscuous mode [ 272.850079][ T3476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.877788][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.891278][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.901532][T11985] bridge_slave_1: entered allmulticast mode [ 272.920560][T11985] bridge_slave_1: entered promiscuous mode [ 272.961941][ T3476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.120840][T12095] tunl0: entered promiscuous mode [ 273.135500][T12095] netlink: 'syz.2.1283': attribute type 3 has an invalid length. [ 273.172841][T12095] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1283'. [ 273.254530][T10297] Bluetooth: hci0: command tx timeout [ 273.288454][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.333559][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.344742][T10297] Bluetooth: hci2: command tx timeout [ 273.416793][T12108] netlink: 'syz.4.1284': attribute type 21 has an invalid length. [ 273.468869][ T3476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.494673][T10297] Bluetooth: hci3: command tx timeout [ 273.550380][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.601560][T11930] hsr_slave_0: entered promiscuous mode [ 273.609375][T11930] hsr_slave_1: entered promiscuous mode [ 273.618056][T11930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.626574][T11930] Cannot create hsr debugfs directory [ 273.632250][T12108] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1284'. [ 273.648788][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.711542][T11985] team0: Port device team_slave_0 added [ 273.778386][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1285'. [ 273.811631][T11985] team0: Port device team_slave_1 added [ 273.841979][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1286'. [ 273.851273][T12118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1286'. [ 273.899556][T11982] team0: Port device team_slave_0 added [ 274.018349][T11982] team0: Port device team_slave_1 added [ 274.058778][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.071579][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.122306][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.279247][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.303960][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.341056][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.438836][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.473532][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.529584][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.609852][T12141] Cannot find set identified by id 752 to match [ 274.632787][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.642061][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.672580][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.880026][ T3476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.963727][T11985] hsr_slave_0: entered promiscuous mode [ 274.975941][T11985] hsr_slave_1: entered promiscuous mode [ 274.982583][T11985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.999817][T11985] Cannot create hsr debugfs directory [ 275.066493][ T3476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.108350][T12153] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 275.203296][ T3476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.334925][T10297] Bluetooth: hci0: command tx timeout [ 275.414661][T10297] Bluetooth: hci2: command tx timeout [ 275.517349][ T3476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.574563][T10297] Bluetooth: hci3: command tx timeout [ 275.621842][T11982] hsr_slave_0: entered promiscuous mode [ 275.631784][T11982] hsr_slave_1: entered promiscuous mode [ 275.640206][T11982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.664453][T11982] Cannot create hsr debugfs directory [ 276.126301][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 276.324665][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 276.362646][ T3476] bridge_slave_1: left allmulticast mode [ 276.378919][ T3476] bridge_slave_1: left promiscuous mode [ 276.386056][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.397830][ T3476] bridge_slave_0: left allmulticast mode [ 276.403528][ T3476] bridge_slave_0: left promiscuous mode [ 276.415686][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.449376][ T3476] bridge_slave_1: left allmulticast mode [ 276.466664][ T3476] bridge_slave_1: left promiscuous mode [ 276.472573][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.491256][ T3476] bridge_slave_0: left allmulticast mode [ 276.499084][ T3476] bridge_slave_0: left promiscuous mode [ 276.508921][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.771588][T12195] xt_ecn: cannot match TCP bits for non-tcp packets [ 276.782382][T12195] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 276.844011][T12197] xt_ecn: cannot match TCP bits for non-tcp packets [ 277.158684][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.175313][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.185814][ T3476] bond0 (unregistering): Released all slaves [ 277.281559][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.292823][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.306745][ T3476] bond0 (unregistering): Released all slaves [ 277.495790][T10297] Bluetooth: hci2: command tx timeout [ 277.566423][T11930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.589875][T11930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.613802][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 277.636065][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 277.657136][T12205] sctp: [Deprecated]: syz.2.1302 (pid 12205) Use of int in maxseg socket option. [ 277.657136][T12205] Use struct sctp_assoc_value instead [ 277.674459][T10297] Bluetooth: hci3: command tx timeout [ 277.771150][T11930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.804092][T11930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.916182][T12216] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 278.072253][T12222] netlink: 'syz.2.1306': attribute type 9 has an invalid length. [ 278.273739][T12235] unknown channel width for channel at 909000KHz? [ 278.362429][T12234] unknown channel width for channel at 909000KHz? [ 278.662849][T12248] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1312'. [ 278.672669][T12248] netlink: zone id is out of range [ 278.678624][T12248] netlink: zone id is out of range [ 278.683888][T12248] netlink: zone id is out of range [ 278.689661][T12248] netlink: get zone limit has 8 unknown bytes [ 278.703752][ T3476] hsr_slave_0: left promiscuous mode [ 278.710382][ T3476] hsr_slave_1: left promiscuous mode [ 278.716787][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.724996][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.733209][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.754095][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.773245][ T3476] hsr_slave_0: left promiscuous mode [ 278.780839][ T3476] hsr_slave_1: left promiscuous mode [ 278.789470][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.797337][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.809900][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.817923][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.864222][ T3476] veth1_macvtap: left promiscuous mode [ 278.870949][ T3476] veth0_macvtap: left promiscuous mode [ 278.877752][ T3476] veth1_vlan: left promiscuous mode [ 278.883225][ T3476] veth0_vlan: left promiscuous mode [ 278.892680][ T3476] veth1_macvtap: left promiscuous mode [ 278.898490][ T3476] veth0_macvtap: left promiscuous mode [ 278.904868][ T3476] veth1_vlan: left promiscuous mode [ 278.910375][ T3476] veth0_vlan: left promiscuous mode [ 278.935945][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 279.508447][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 279.555995][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 280.249059][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 280.288413][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 280.680028][T12257] dvmrp0: left allmulticast mode [ 280.695179][T12257] dvmrp1: left allmulticast mode [ 280.910189][T12261] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 281.017761][T12261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.040125][T11985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.139561][T11985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.171136][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.213051][T12268] veth7: entered promiscuous mode [ 281.232604][T11985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.414253][T11985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.525672][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.723793][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.731052][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.798572][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.805820][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.848410][T12292] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 282.146130][T11982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.188333][T11982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.227835][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.243454][T12305] Cannot find set identified by id 65535 to match [ 282.251182][T12302] bond0: entered promiscuous mode [ 282.277175][T12302] bond_slave_0: entered promiscuous mode [ 282.307019][T12302] bond_slave_1: entered promiscuous mode [ 282.341790][T11982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.399641][T11982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.469726][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.506582][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.513731][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.577842][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.585031][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.663452][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.942566][T11930] veth0_vlan: entered promiscuous mode [ 282.980168][T11982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.059688][T11930] veth1_vlan: entered promiscuous mode [ 283.143477][T11982] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.223331][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.230551][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.262472][T11930] veth0_macvtap: entered promiscuous mode [ 283.280271][T11930] veth1_macvtap: entered promiscuous mode [ 283.338191][T12351] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 283.350392][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.357632][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.392738][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.405092][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.436089][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.457067][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.479980][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.501431][T12351] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 283.570914][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.608596][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.623764][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.776190][T11930] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.791917][T11930] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.811646][T11930] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.822677][T11930] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.857080][T12372] Bluetooth: MGMT ver 1.23 [ 283.876916][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.421598][T11985] veth0_vlan: entered promiscuous mode [ 284.468772][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.499508][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.638621][T11985] veth1_vlan: entered promiscuous mode [ 284.719990][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.729473][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.745460][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.833880][T11985] veth0_macvtap: entered promiscuous mode [ 284.899021][T11985] veth1_macvtap: entered promiscuous mode [ 285.112883][T11982] veth0_vlan: entered promiscuous mode [ 285.197581][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.241443][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.268199][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.281340][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.301153][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.323856][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.337410][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.425009][T12430] veth1_to_team: entered promiscuous mode [ 285.440979][T11982] veth1_vlan: entered promiscuous mode [ 285.499110][T12431] veth1_to_team (unregistering): left promiscuous mode [ 285.547216][T12431] team0: Port device team_slave_1 removed [ 285.598961][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.639377][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.650967][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.663481][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.674444][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.687315][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.753627][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.778757][T11985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.789281][T11985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.810104][T11985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.820097][T11985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.851647][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.916479][T11982] veth0_macvtap: entered promiscuous mode [ 285.951186][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.990015][T11982] veth1_macvtap: entered promiscuous mode [ 286.086473][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.099434][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.110680][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.122137][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.132719][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.145254][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.161747][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.173240][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.186727][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.227753][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.238107][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.286840][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.308646][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.322551][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.340935][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.352035][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.372633][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.402589][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.517597][T11982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.530970][T11982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.547820][T11982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.560584][T11982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.643127][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.684629][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.726706][ T36] bridge_slave_1: left allmulticast mode [ 286.732423][ T36] bridge_slave_1: left promiscuous mode [ 286.736650][T12454] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1350'. [ 286.754510][T12454] nbd: illegal input index 61504 [ 286.759862][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.811130][ T36] bridge_slave_0: left allmulticast mode [ 286.834082][ T36] bridge_slave_0: left promiscuous mode [ 286.848454][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.263484][T10081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.282832][T10081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.291467][T10081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.306104][T10081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.326304][T10081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.542114][T12474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.602953][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.619690][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.629949][ T36] bond0 (unregistering): Released all slaves [ 287.812047][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 287.896633][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.932882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.179297][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.205356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.342914][ T36] hsr_slave_0: left promiscuous mode [ 288.354654][ T36] hsr_slave_1: left promiscuous mode [ 288.361494][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.389652][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.478074][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 288.488167][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.512201][T12493] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 288.518695][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.591270][ T36] veth1_macvtap: left promiscuous mode [ 288.628775][ T36] veth0_macvtap: left promiscuous mode [ 288.645302][ T36] veth1_vlan: left promiscuous mode [ 288.652989][ T36] veth0_vlan: left promiscuous mode [ 289.187279][T10081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.197089][T10081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.207495][T10081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.234099][T10081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.259450][T10081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.430069][T10297] Bluetooth: hci0: command tx timeout [ 289.562900][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 289.631574][ T36] team0 (unregistering): Port device team_slave_1 removed [ 289.679806][ T36] team0 (unregistering): Port device team_slave_0 removed [ 290.169536][T12509] tunl0: left promiscuous mode [ 290.257848][T12515] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1357'. [ 290.319529][T12509] xfrm0: left promiscuous mode [ 290.326655][T12509] xfrm0: left allmulticast mode [ 290.391627][T12509] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 290.437654][T12509] tipc: Resetting bearer [ 290.507189][T12509] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.524707][T12509] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.539757][T12509] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.550591][T12509] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.621966][T12509] syzkaller0: left promiscuous mode [ 290.627299][T12509] syzkaller0: left allmulticast mode [ 290.635744][T12509] xfrm1: left allmulticast mode [ 290.648762][T12509] vlan2: left allmulticast mode [ 290.653644][T12509] veth1: left allmulticast mode [ 290.663608][T12509] gretap1: left promiscuous mode [ 290.670521][T12509] gretap1: left allmulticast mode [ 291.090481][T12468] chnl_net:caif_netlink_parms(): no params data found [ 291.339364][T10297] Bluetooth: hci2: command tx timeout [ 291.343578][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.505157][T10297] Bluetooth: hci0: command tx timeout [ 291.524231][T12505] chnl_net:caif_netlink_parms(): no params data found [ 291.547623][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.555613][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.562856][T12468] bridge_slave_0: entered allmulticast mode [ 291.571077][T12468] bridge_slave_0: entered promiscuous mode [ 291.615977][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.640497][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.648066][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.656262][T12468] bridge_slave_1: entered allmulticast mode [ 291.663295][T12468] bridge_slave_1: entered promiscuous mode [ 291.712933][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.751227][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.765007][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.831122][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.874036][T12468] team0: Port device team_slave_0 added [ 291.896237][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.903418][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.914223][T12505] bridge_slave_0: entered allmulticast mode [ 291.928530][T12505] bridge_slave_0: entered promiscuous mode [ 291.967833][T12468] team0: Port device team_slave_1 added [ 292.005919][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 292.073950][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.091738][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.112056][T12505] bridge_slave_1: entered allmulticast mode [ 292.123789][T12505] bridge_slave_1: entered promiscuous mode [ 292.179247][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.206462][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.272567][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 292.282153][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.325457][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.332435][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.400332][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.582072][T10081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.599202][T10081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.612861][T10081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.622381][T10081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.634721][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.634840][T10081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.659055][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.933372][T12468] hsr_slave_0: entered promiscuous mode [ 292.959182][T12468] hsr_slave_1: entered promiscuous mode [ 292.975587][T12468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.983185][T12468] Cannot create hsr debugfs directory [ 293.001686][T12581] x_tables: duplicate underflow at hook 3 [ 293.013488][T12582] x_tables: duplicate underflow at hook 3 [ 293.066710][T12505] team0: Port device team_slave_0 added [ 293.239129][T12505] team0: Port device team_slave_1 added [ 293.415343][T10081] Bluetooth: hci2: command tx timeout [ 293.442969][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 293.477602][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.513052][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.523401][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.559775][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.574633][T10081] Bluetooth: hci0: command tx timeout [ 293.656193][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.672851][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.680317][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.706730][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.818481][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.961917][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.996757][T12505] hsr_slave_0: entered promiscuous mode [ 294.006918][T12505] hsr_slave_1: entered promiscuous mode [ 294.013462][T12505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.030653][T12505] Cannot create hsr debugfs directory [ 294.703125][T10081] Bluetooth: hci3: command tx timeout [ 294.968487][T12651] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 295.047190][T12569] chnl_net:caif_netlink_parms(): no params data found [ 295.070392][T12653] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 295.159441][T12648] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 295.199697][ T36] bridge_slave_1: left allmulticast mode [ 295.206911][ T36] bridge_slave_1: left promiscuous mode [ 295.213211][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.236672][ T36] bridge_slave_0: left allmulticast mode [ 295.242555][ T36] bridge_slave_0: left promiscuous mode [ 295.251028][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.273925][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 295.283307][ T36] bridge_slave_1: left allmulticast mode [ 295.289980][ T36] bridge_slave_1: left promiscuous mode [ 295.296609][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.304505][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 295.334894][ T36] bridge_slave_0: left allmulticast mode [ 295.340773][ T36] bridge_slave_0: left promiscuous mode [ 295.354544][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.371602][T12662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.495111][T10081] Bluetooth: hci2: command tx timeout [ 295.655029][T10081] Bluetooth: hci0: command tx timeout [ 295.985978][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.997869][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.009264][ T36] bond0 (unregistering): Released all slaves [ 296.113497][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.124751][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.135279][ T36] bond0 (unregistering): Released all slaves [ 296.196357][T12669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1383'. [ 296.217511][T12669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1383'. [ 296.294058][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 296.307570][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1385'. [ 296.545461][T12569] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.564756][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.572109][T12569] bridge_slave_0: entered allmulticast mode [ 296.594262][T12569] bridge_slave_0: entered promiscuous mode [ 296.606913][T12569] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.615176][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.622582][T12569] bridge_slave_1: entered allmulticast mode [ 296.630615][T12569] bridge_slave_1: entered promiscuous mode [ 296.713564][T12697] tipc: Enabled bearer , priority 0 [ 296.785153][T10081] Bluetooth: hci3: command tx timeout [ 296.801014][T12468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.875776][T12569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.940989][T12468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.969618][T12468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.023964][T12569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.027047][T12700] raw_sendmsg: syz.2.1392 forgot to set AF_INET. Fix it! [ 297.080441][T12468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.181453][T12713] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 297.239093][T12569] team0: Port device team_slave_0 added [ 297.248699][T12569] team0: Port device team_slave_1 added [ 297.284275][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1396'. [ 297.425706][T12569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.432703][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.441534][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 297.471789][T12569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.492782][ T36] hsr_slave_0: left promiscuous mode [ 297.500448][ T36] hsr_slave_1: left promiscuous mode [ 297.506780][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.514207][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.522704][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.531583][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.543854][ T36] hsr_slave_0: left promiscuous mode [ 297.550656][ T36] hsr_slave_1: left promiscuous mode [ 297.556792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.564220][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.572479][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.580026][T10081] Bluetooth: hci2: command tx timeout [ 297.586341][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.626141][ T36] veth1_macvtap: left promiscuous mode [ 297.631775][ T36] veth0_macvtap: left promiscuous mode [ 297.638019][ T36] veth1_vlan: left promiscuous mode [ 297.643404][ T36] veth0_vlan: left promiscuous mode [ 297.650652][ T36] veth1_macvtap: left promiscuous mode [ 297.656557][ T36] veth0_macvtap: left promiscuous mode [ 297.662157][ T36] veth1_vlan: left promiscuous mode [ 297.667560][ T36] veth0_vlan: left promiscuous mode [ 298.252558][ T36] team0 (unregistering): Port device team_slave_1 removed [ 298.293528][ T36] team0 (unregistering): Port device team_slave_0 removed [ 298.854677][T10081] Bluetooth: hci3: command tx timeout [ 298.968313][ T36] team0 (unregistering): Port device team_slave_1 removed [ 299.008759][ T36] team0 (unregistering): Port device team_slave_0 removed [ 299.394472][T12723] bridge_slave_0 (unregistering): left allmulticast mode [ 299.401837][T12723] bridge_slave_0 (unregistering): left promiscuous mode [ 299.414563][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.439107][T12723] veth0_to_bridge (unregistering): left allmulticast mode [ 299.446561][T12723] veth0_to_bridge (unregistering): left promiscuous mode [ 299.453650][T12723] bridge0: port 4(veth0_to_bridge) entered disabled state [ 299.470853][T12569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.478162][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.507802][T12569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.693739][T12569] hsr_slave_0: entered promiscuous mode [ 299.703144][T12569] hsr_slave_1: entered promiscuous mode [ 299.711303][T12569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.719828][T12569] Cannot create hsr debugfs directory [ 299.766353][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1402'. [ 300.149479][T12505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.185999][T12505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.226508][T12505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.243094][T12505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.251090][T12751] netlink: 'syz.4.1407': attribute type 8 has an invalid length. [ 300.283701][T12468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.493828][T12468] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.528577][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.535840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.595689][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.602936][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.651290][T12757] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 300.673017][T12756] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 300.940843][T10081] Bluetooth: hci3: command tx timeout [ 300.998810][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.159344][T12505] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.176929][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.184128][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.239192][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.246420][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.321812][T12569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.354720][T12780] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 301.374875][T12569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.384983][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 301.397000][T12569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.416618][T12782] xt_hashlimit: invalid rate [ 301.424227][T12569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.438102][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 301.450088][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 301.460636][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 301.469603][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 301.508363][T12782] bond4: entered promiscuous mode [ 301.514130][T12782] bond4: entered allmulticast mode [ 301.525245][T12782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.636014][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.661530][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.675707][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.739856][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.766664][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.779741][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.849813][T12468] veth0_vlan: entered promiscuous mode [ 301.858405][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.887783][T12468] veth1_vlan: entered promiscuous mode [ 301.894236][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.983443][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.001814][T12569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.093369][T12468] veth0_macvtap: entered promiscuous mode [ 302.125432][T12569] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.143117][T12468] veth1_macvtap: entered promiscuous mode [ 302.167414][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.174639][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.206229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.210095][T12803] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1423'. [ 302.213401][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.246788][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.308758][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.324128][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.339702][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.343033][T12807] Unsupported ieee802154 address type: 0 [ 302.357077][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.378211][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.392909][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.404103][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.417215][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.431044][T12468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.440461][T12468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.449397][T12468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.459369][T12468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.480923][T12810] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 302.721155][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 302.739437][T12505] veth0_vlan: entered promiscuous mode [ 302.772176][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.794695][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.801396][T12505] veth1_vlan: entered promiscuous mode [ 303.007215][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.020311][T12505] veth0_macvtap: entered promiscuous mode [ 303.039175][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.072266][T12505] veth1_macvtap: entered promiscuous mode [ 303.087775][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 303.116596][T12829] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1431'. [ 303.149915][T12569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.158222][T12830] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.267681][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.278952][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.290645][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.301517][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.311982][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.322673][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.334225][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.367191][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.377932][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.389054][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.399877][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.411619][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.549962][ T1308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.598134][T12505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.607426][T12505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.620781][T12505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.631609][T12505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.707386][ T1308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.821209][ T1308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.848140][T12569] veth0_vlan: entered promiscuous mode [ 303.877043][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.901057][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.955412][ T1308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.985760][T12569] veth1_vlan: entered promiscuous mode [ 304.004904][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.012780][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.108122][T12569] veth0_macvtap: entered promiscuous mode [ 304.143367][T12569] veth1_macvtap: entered promiscuous mode [ 304.224208][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.236723][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.251154][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.261867][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.272254][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.282913][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.293203][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.305630][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.317052][T12569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.344037][ T1308] bridge_slave_1: left allmulticast mode [ 304.350283][ T1308] bridge_slave_1: left promiscuous mode [ 304.358683][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.368285][ T1308] bridge_slave_0: left allmulticast mode [ 304.374028][ T1308] bridge_slave_0: left promiscuous mode [ 304.380838][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.872464][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.885342][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.897488][ T1308] bond0 (unregistering): Released all slaves [ 304.933359][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.946649][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.958031][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.968904][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.979180][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.989985][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.002624][T12569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.046270][T12569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.070142][T12569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.081163][T10297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.089679][T12569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.090646][T10297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.103174][T12569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.107937][T10297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.123290][T10297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.132421][T10297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.337880][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.354496][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.542679][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.564700][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.634828][ T1308] hsr_slave_0: left promiscuous mode [ 305.648078][ T1308] hsr_slave_1: left promiscuous mode [ 305.654249][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.684993][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.705161][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.712622][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.727615][T12857] nbd: device at index 2 is going down [ 305.811933][ T1308] veth1_macvtap: left promiscuous mode [ 305.824420][ T1308] veth0_macvtap: left promiscuous mode [ 305.830185][ T1308] veth1_vlan: left promiscuous mode [ 305.844453][ T1308] veth0_vlan: left promiscuous mode [ 305.898296][T10297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.908794][T10297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.919759][T10297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.929325][T10297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.939891][T10297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.356810][ T1308] team0 (unregistering): Port device team_slave_1 removed [ 306.394160][ T1308] team0 (unregistering): Port device team_slave_0 removed [ 306.855524][ C1] ================================================================== [ 306.863639][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 306.871593][ C1] Read of size 2 at addr ffff8880296fc02a by task syz-executor/12569 [ 306.879685][ C1] [ 306.882073][ C1] CPU: 1 UID: 0 PID: 12569 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.882100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 306.882121][ C1] Call Trace: [ 306.882133][ C1] [ 306.882141][ C1] dump_stack_lvl+0x189/0x250 [ 306.882174][ C1] ? __virt_addr_valid+0x18c/0x540 [ 306.882200][ C1] ? rcu_is_watching+0x15/0xb0 [ 306.882231][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.882259][ C1] ? rcu_is_watching+0x15/0xb0 [ 306.882288][ C1] ? lock_release+0x4b/0x3e0 [ 306.882317][ C1] ? __virt_addr_valid+0x18c/0x540 [ 306.882342][ C1] ? __virt_addr_valid+0x469/0x540 [ 306.882369][ C1] print_report+0xb4/0x290 [ 306.882393][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 306.882421][ C1] kasan_report+0x118/0x150 [ 306.882448][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 306.882498][ C1] rose_timer_expiry+0x471/0x4b0 [ 306.882526][ C1] call_timer_fn+0x17b/0x5f0 [ 306.882570][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 306.882598][ C1] ? call_timer_fn+0xbe/0x5f0 [ 306.882635][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 306.882665][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.882682][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.882701][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 306.882728][ C1] __run_timer_base+0x61a/0x860 [ 306.882767][ C1] ? ktime_get+0x3e/0x1f0 [ 306.882794][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 306.882817][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 306.882848][ C1] run_timer_softirq+0xb7/0x180 [ 306.882874][ C1] handle_softirqs+0x283/0x870 [ 306.882907][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 306.882928][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 306.882964][ C1] __irq_exit_rcu+0xca/0x1f0 [ 306.882981][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 306.883004][ C1] irq_exit_rcu+0x9/0x30 [ 306.883019][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 306.883039][ C1] [ 306.883046][ C1] [ 306.883054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.883077][ C1] RIP: 0010:filter_irq_stacks+0x32/0xa0 [ 306.883100][ C1] Code: 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 84 fd 74 00 49 8b 04 de 48 3d 30 02 00 81 0f 93 [ 306.883119][ C1] RSP: 0018:ffffc90003def720 EFLAGS: 00000246 [ 306.883148][ C1] RAX: 1ffff920007bdf02 RBX: 000000000000000a RCX: 0000000000000001 [ 306.883162][ C1] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffc90003def7c0 [ 306.883175][ C1] RBP: ffffc90003def9e8 R08: 0000000000000000 R09: 0000000000000000 [ 306.883188][ C1] R10: 0000000000000000 R11: ffffffff81ce8486 R12: 000000000000000c [ 306.883200][ C1] R13: dffffc0000000000 R14: ffffc90003def7c0 R15: ffffc90003def810 [ 306.883219][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 306.883255][ C1] stack_depot_save_flags+0x40/0x910 [ 306.883276][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 306.883310][ C1] ? kmem_cache_free+0x169/0x3f0 [ 306.883331][ C1] ? exit_mmap+0x593/0xba0 [ 306.883354][ C1] ? __mmput+0x118/0x420 [ 306.883382][ C1] kasan_save_stack+0x4d/0x60 [ 306.883399][ C1] ? kasan_save_stack+0x3e/0x60 [ 306.883416][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 306.883443][ C1] ? kmem_cache_free+0x2ee/0x3f0 [ 306.883464][ C1] ? exit_mmap+0x593/0xba0 [ 306.883494][ C1] ? __mmput+0x118/0x420 [ 306.883521][ C1] ? exit_mm+0x1da/0x2c0 [ 306.883541][ C1] ? do_exit+0x859/0x2550 [ 306.883561][ C1] ? do_group_exit+0x21c/0x2d0 [ 306.883582][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 306.883605][ C1] ? x64_sys_call+0x21ba/0x21c0 [ 306.883622][ C1] ? do_syscall_64+0xf6/0x210 [ 306.883643][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.883683][ C1] ? __phys_addr+0xba/0x170 [ 306.883706][ C1] ? exit_mmap+0x593/0xba0 [ 306.883729][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 306.883757][ C1] kmem_cache_free+0x2ee/0x3f0 [ 306.883781][ C1] exit_mmap+0x593/0xba0 [ 306.883806][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 306.883829][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 306.883857][ C1] ? __pfx_exit_aio+0x10/0x10 [ 306.883882][ C1] ? uprobe_clear_state+0x274/0x290 [ 306.883905][ C1] __mmput+0x118/0x420 [ 306.883933][ C1] exit_mm+0x1da/0x2c0 [ 306.883955][ C1] ? __pfx_exit_mm+0x10/0x10 [ 306.883977][ C1] ? taskstats_exit+0x43c/0xa30 [ 306.883999][ C1] ? tty_audit_exit+0x153/0x200 [ 306.884017][ C1] do_exit+0x859/0x2550 [ 306.884046][ C1] ? __pfx_do_exit+0x10/0x10 [ 306.884074][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.884091][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.884111][ C1] do_group_exit+0x21c/0x2d0 [ 306.884134][ C1] __x64_sys_exit_group+0x3f/0x40 [ 306.884155][ C1] x64_sys_call+0x21ba/0x21c0 [ 306.884169][ C1] do_syscall_64+0xf6/0x210 [ 306.884189][ C1] ? clear_bhb_loop+0x45/0xa0 [ 306.884210][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.884228][ C1] RIP: 0033:0x7f14bb78e969 [ 306.884253][ C1] Code: Unable to access opcode bytes at 0x7f14bb78e93f. [ 306.884262][ C1] RSP: 002b:00007fff1641b2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 306.884281][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14bb78e969 [ 306.884294][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 306.884304][ C1] RBP: 00007f14bb7ee8f0 R08: 00007fff16419097 R09: 0000000000000003 [ 306.884316][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.884328][ C1] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff1641b4b0 [ 306.884348][ C1] [ 306.884355][ C1] [ 307.425978][ C1] Allocated by task 9: [ 307.430046][ C1] kasan_save_track+0x3e/0x80 [ 307.434732][ C1] __kasan_kmalloc+0x93/0xb0 [ 307.439321][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 307.444176][ C1] switchdev_deferred_enqueue+0x2d/0x240 [ 307.449826][ C1] br_switchdev_mdb_notify+0x369/0x410 [ 307.455308][ C1] br_mdb_notify+0x68/0x970 [ 307.459819][ C1] __br_multicast_add_group+0x6b5/0xa30 [ 307.465371][ C1] br_multicast_rcv+0x3a5f/0x74b0 [ 307.470406][ C1] br_handle_frame_finish+0x78a/0x1950 [ 307.475879][ C1] br_nf_hook_thresh+0x3bf/0x490 [ 307.480827][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 307.486804][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 307.492277][ C1] br_handle_frame+0x97f/0x14c0 [ 307.497132][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 307.502905][ C1] __netif_receive_skb+0x72/0x380 [ 307.508034][ C1] process_backlog+0x60e/0x14f0 [ 307.512883][ C1] __napi_poll+0xc4/0x480 [ 307.517301][ C1] net_rx_action+0x6ea/0xdf0 [ 307.521883][ C1] handle_softirqs+0x283/0x870 [ 307.526648][ C1] do_softirq+0xec/0x180 [ 307.530927][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 307.536136][ C1] __dev_queue_xmit+0x1cd7/0x3a70 [ 307.541186][ C1] ip6_finish_output2+0x11bc/0x16a0 [ 307.546382][ C1] ip6_finish_output+0x234/0x7d0 [ 307.551312][ C1] NF_HOOK+0x9e/0x380 [ 307.555298][ C1] mld_sendpack+0x800/0xd80 [ 307.559805][ C1] mld_ifc_work+0x835/0xde0 [ 307.564310][ C1] process_scheduled_works+0xadb/0x17a0 [ 307.569869][ C1] worker_thread+0x8a0/0xda0 [ 307.574464][ C1] kthread+0x70e/0x8a0 [ 307.578538][ C1] ret_from_fork+0x4b/0x80 [ 307.582952][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.587732][ C1] [ 307.590057][ C1] Freed by task 9: [ 307.593772][ C1] kasan_save_track+0x3e/0x80 [ 307.598451][ C1] kasan_save_free_info+0x46/0x50 [ 307.603481][ C1] __kasan_slab_free+0x62/0x70 [ 307.608262][ C1] kfree+0x193/0x440 [ 307.612166][ C1] switchdev_deferred_process+0x203/0x2b0 [ 307.617888][ C1] switchdev_deferred_process_work+0x13/0x20 [ 307.623888][ C1] process_scheduled_works+0xadb/0x17a0 [ 307.629454][ C1] worker_thread+0x8a0/0xda0 [ 307.634060][ C1] kthread+0x70e/0x8a0 [ 307.638144][ C1] ret_from_fork+0x4b/0x80 [ 307.642577][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.647352][ C1] [ 307.649675][ C1] The buggy address belongs to the object at ffff8880296fc000 [ 307.649675][ C1] which belongs to the cache kmalloc-512 of size 512 [ 307.663733][ C1] The buggy address is located 42 bytes inside of [ 307.663733][ C1] freed 512-byte region [ffff8880296fc000, ffff8880296fc200) [ 307.677457][ C1] [ 307.679779][ C1] The buggy address belongs to the physical page: [ 307.686201][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296fc [ 307.694975][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 307.703474][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 307.711028][ C1] page_type: f5(slab) [ 307.715027][ C1] raw: 00fff00000000040 ffff88801a041c80 ffffea0001f50400 dead000000000002 [ 307.723609][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 307.732189][ C1] head: 00fff00000000040 ffff88801a041c80 ffffea0001f50400 dead000000000002 [ 307.740856][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 307.749528][ C1] head: 00fff00000000002 ffffea0000a5bf01 00000000ffffffff 00000000ffffffff [ 307.758205][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 307.766870][ C1] page dumped because: kasan: bad access detected [ 307.773286][ C1] page_owner tracks the page as allocated [ 307.779024][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5942, tgid 5940 (syz.1.12), ts 90422157064, free_ts 89987414871 [ 307.800319][ C1] post_alloc_hook+0x1d8/0x230 [ 307.805117][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 307.810668][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 307.816480][ C1] alloc_pages_mpol+0x232/0x4a0 [ 307.821327][ C1] allocate_slab+0x8a/0x3b0 [ 307.825826][ C1] ___slab_alloc+0xbfc/0x1480 [ 307.830529][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 307.835907][ C1] __ipv6_dev_mc_inc+0x420/0xaf0 [ 307.840855][ C1] ipv6_add_dev+0xe63/0x1370 [ 307.845454][ C1] addrconf_notify+0x794/0x1010 [ 307.850308][ C1] notifier_call_chain+0x1b3/0x3e0 [ 307.855434][ C1] register_netdevice+0x1608/0x1af0 [ 307.860633][ C1] veth_newlink+0x42f/0xa50 [ 307.865151][ C1] rtnl_newlink_create+0x305/0xaf0 [ 307.870262][ C1] rtnl_newlink+0x16d6/0x1c70 [ 307.874939][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 307.879877][ C1] page last free pid 5188 tgid 5188 stack trace: [ 307.886200][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 307.891405][ C1] __slab_free+0x326/0x400 [ 307.895822][ C1] qlist_free_all+0x9a/0x140 [ 307.900430][ C1] kasan_quarantine_reduce+0x148/0x160 [ 307.905884][ C1] __kasan_slab_alloc+0x22/0x80 [ 307.910731][ C1] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 307.917162][ C1] kmalloc_reserve+0x136/0x290 [ 307.921919][ C1] __alloc_skb+0x142/0x2d0 [ 307.926330][ C1] alloc_skb_with_frags+0xca/0x890 [ 307.931450][ C1] sock_alloc_send_pskb+0x857/0x990 [ 307.936650][ C1] unix_dgram_sendmsg+0x5c2/0x17c0 [ 307.941754][ C1] __sock_sendmsg+0x219/0x270 [ 307.946429][ C1] __sys_sendto+0x3bd/0x520 [ 307.950932][ C1] __x64_sys_sendto+0xde/0x100 [ 307.955698][ C1] do_syscall_64+0xf6/0x210 [ 307.960205][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.966101][ C1] [ 307.968425][ C1] Memory state around the buggy address: [ 307.974056][ C1] ffff8880296fbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 307.982134][ C1] ffff8880296fbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 307.990203][ C1] >ffff8880296fc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.998260][ C1] ^ [ 308.003621][ C1] ffff8880296fc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.011679][ C1] ffff8880296fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.019835][ C1] ================================================================== [ 308.028005][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 308.035234][ C1] CPU: 1 UID: 0 PID: 12569 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 308.047499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 308.057582][ C1] Call Trace: [ 308.060880][ C1] [ 308.063741][ C1] dump_stack_lvl+0x99/0x250 [ 308.068351][ C1] ? __asan_memcpy+0x40/0x70 [ 308.072956][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.078172][ C1] ? __pfx__printk+0x10/0x10 [ 308.082766][ C1] panic+0x2db/0x790 [ 308.086689][ C1] ? __pfx_panic+0x10/0x10 [ 308.091115][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 308.097015][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 308.102910][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.109238][ C1] ? print_memory_metadata+0x314/0x400 [ 308.114713][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 308.119844][ C1] check_panic_on_warn+0x89/0xb0 [ 308.124792][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 308.129925][ C1] end_report+0x78/0x160 [ 308.134261][ C1] kasan_report+0x129/0x150 [ 308.138778][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 308.143907][ C1] rose_timer_expiry+0x471/0x4b0 [ 308.148871][ C1] call_timer_fn+0x17b/0x5f0 [ 308.153467][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 308.158935][ C1] ? call_timer_fn+0xbe/0x5f0 [ 308.163638][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 308.168781][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.174012][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.179487][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 308.184963][ C1] __run_timer_base+0x61a/0x860 [ 308.189847][ C1] ? ktime_get+0x3e/0x1f0 [ 308.194201][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 308.199588][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 308.205847][ C1] run_timer_softirq+0xb7/0x180 [ 308.210707][ C1] handle_softirqs+0x283/0x870 [ 308.215490][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 308.220278][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 308.225580][ C1] __irq_exit_rcu+0xca/0x1f0 [ 308.230190][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 308.235441][ C1] irq_exit_rcu+0x9/0x30 [ 308.239704][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 308.245357][ C1] [ 308.248296][ C1] [ 308.251242][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.257240][ C1] RIP: 0010:filter_irq_stacks+0x32/0xa0 [ 308.262852][ C1] Code: 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 84 fd 74 00 49 8b 04 de 48 3d 30 02 00 81 0f 93 [ 308.282561][ C1] RSP: 0018:ffffc90003def720 EFLAGS: 00000246 [ 308.288638][ C1] RAX: 1ffff920007bdf02 RBX: 000000000000000a RCX: 0000000000000001 [ 308.296620][ C1] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffc90003def7c0 [ 308.304635][ C1] RBP: ffffc90003def9e8 R08: 0000000000000000 R09: 0000000000000000 [ 308.312615][ C1] R10: 0000000000000000 R11: ffffffff81ce8486 R12: 000000000000000c [ 308.320587][ C1] R13: dffffc0000000000 R14: ffffc90003def7c0 R15: ffffc90003def810 [ 308.328572][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 308.333792][ C1] stack_depot_save_flags+0x40/0x910 [ 308.339102][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 308.344676][ C1] ? kmem_cache_free+0x169/0x3f0 [ 308.349615][ C1] ? exit_mmap+0x593/0xba0 [ 308.354037][ C1] ? __mmput+0x118/0x420 [ 308.358311][ C1] kasan_save_stack+0x4d/0x60 [ 308.362994][ C1] ? kasan_save_stack+0x3e/0x60 [ 308.367864][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 308.373244][ C1] ? kmem_cache_free+0x2ee/0x3f0 [ 308.378226][ C1] ? exit_mmap+0x593/0xba0 [ 308.382651][ C1] ? __mmput+0x118/0x420 [ 308.386907][ C1] ? exit_mm+0x1da/0x2c0 [ 308.391154][ C1] ? do_exit+0x859/0x2550 [ 308.395493][ C1] ? do_group_exit+0x21c/0x2d0 [ 308.400265][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 308.405478][ C1] ? x64_sys_call+0x21ba/0x21c0 [ 308.410336][ C1] ? do_syscall_64+0xf6/0x210 [ 308.415019][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.421540][ C1] ? __phys_addr+0xba/0x170 [ 308.426050][ C1] ? exit_mmap+0x593/0xba0 [ 308.430479][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 308.435692][ C1] kmem_cache_free+0x2ee/0x3f0 [ 308.440466][ C1] exit_mmap+0x593/0xba0 [ 308.444714][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 308.449509][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 308.455159][ C1] ? __pfx_exit_aio+0x10/0x10 [ 308.459851][ C1] ? uprobe_clear_state+0x274/0x290 [ 308.465053][ C1] __mmput+0x118/0x420 [ 308.469196][ C1] exit_mm+0x1da/0x2c0 [ 308.473316][ C1] ? __pfx_exit_mm+0x10/0x10 [ 308.477951][ C1] ? taskstats_exit+0x43c/0xa30 [ 308.482828][ C1] ? tty_audit_exit+0x153/0x200 [ 308.487684][ C1] do_exit+0x859/0x2550 [ 308.491853][ C1] ? __pfx_do_exit+0x10/0x10 [ 308.496449][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.501664][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.506872][ C1] do_group_exit+0x21c/0x2d0 [ 308.511477][ C1] __x64_sys_exit_group+0x3f/0x40 [ 308.516512][ C1] x64_sys_call+0x21ba/0x21c0 [ 308.521206][ C1] do_syscall_64+0xf6/0x210 [ 308.525739][ C1] ? clear_bhb_loop+0x45/0xa0 [ 308.530451][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.536356][ C1] RIP: 0033:0x7f14bb78e969 [ 308.541129][ C1] Code: Unable to access opcode bytes at 0x7f14bb78e93f. [ 308.548165][ C1] RSP: 002b:00007fff1641b2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 308.556677][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14bb78e969 [ 308.564771][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 308.572762][ C1] RBP: 00007f14bb7ee8f0 R08: 00007fff16419097 R09: 0000000000000003 [ 308.580753][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.588828][ C1] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff1641b4b0 [ 308.596818][ C1] [ 308.600095][ C1] Kernel Offset: disabled [ 308.604434][ C1] Rebooting in 86400 seconds..