last executing test programs: 1m0.988658929s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 51.475434696s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 50.65380422s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 40.772421075s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 37.492110599s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 31.237342926s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 29.470162173s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="e3fbc9f7e155a6e294f68078cb808c435b48612e93b0d69d1f21fd5564a9f18f996475fb64e12884979b5882a07d51ec37cab390561644521d18773068ad0fc0f6f8df2bb545c05fbfda35eefcf88a020063a2bf6468b302b9831678e59677adb2ec28d0caf29931cf5993e1ce3ba4cf655cf53218d9887589289e133b54050621892724d74ce07d912407878f2a4ec7a10be378467499f110fe42cfa93c4883db8d2c5155a0d94b828405a9de0e8ffae65c255df6ee1e807dd8fa8d384184f735fbc4e62d27f288c6c9c94477590c7ff4eb93131ebb0d6d5dfa82dbafd6a6bd0cc56bc8d7af7e4246389c34a239b98ec85073c76da59b1fe73f14c72c5fa25e77ce2d5849ad97c74e15826752d1d571e6d9377fe1dd1c794795216f2614d25d9a2a019c3f88b59dc971df962e0250e89263a6c3cbaa9f2b0c5d83cffd423c89b83783109d05b53831ba44e31971b5a5444e816b19e16ad69106d8d7339ed0b5707218728ea071db4f59aea059410e48dc0c210eb84552eaa5ff6aa127c9dc3312a6e0bd4eb3eac8bf7b9c4e158fcc69d371246d807fbeabcfb33e9268025d3dd4cdfbdb0e178cdb63493251915b8fcf933b9ac872818fc255fcc6e4d9fcd7cc6e5071928e7f1a5738321897b0d277f0bb661ea6d25d7f6f2b38273561593d62fc363cc77de0352ea0bee8b98ca55474fa1c69d476adb25ae2ab5357008d03c236294544f79039057a5b30d130c2149e755f2b61907e1cd54a56dc53e3c8471e81f83f5e8d97a5474015d24ec97a074394afa27408a73b8e765b79faf100ea3dd0c98fbfa3d113ffe56c0ffd1a30415e82b34cce8289eb6d01ed59fe6a6b0c99a00e4563c0c0c4fecd127fa357c0e12bfed2a1ac23643d91fd4daf12494bd0a8ac520886efe0caea86fe820b1e79b614fec63737d4930508e037ac05fb254fc362b39cd9b341df7d8504a13b8af2055ea1778c6043c119465f79c118e8080941bcbc0c65ba0cb25e1be8de94207dcb3d2863828a6b17f5a37fd64553ecb6d99879e38af6f3b2da109433c0b75faf20de6ee0ae823b17d1462de38d91f6d5292f02276dbf744ff835dee75532659087e91e5c873b321511b7dd74e86813b4ba4a99394559898206e29f149a53acf0483c0a150c5d1a9a050341c3f1822470381408ff787a2486ea81c6128f1b33ab8fb38e4491fd643ef1fb3efa333b5dbc8fb92daf0b957c19513a838355abcf40ddf272d88e2740dc390b94ee82a5b72a1e7c55ff6ee034d8010702dce3de159a34620b5216d3308e0cd64709cd7f4d5b026f4b81d7d43d8acb36c2251ac576b0ca9411e41eb6ba1d1871845ddcd4d95aa876d0baea1a00b59d68a00e191b59f751e54edecbc4aa0df7585e868a055efdb1dee40921d13d55dfb51f1b245ae2b91fad099e510b75b25daac3d2c529b9bdecf5ab6abcbc99c8f2358f60341eec86a4bd6a9cf0df4004124e31a4cc2e2e3c5cf53a90ee16bb4c6c49e9f50c993a8aa575b0b8e018b608f2321bc64afbace952457246dc8a3e4fc9a6c12a7d7d2779e4333072d4ef27d6e0cc2d1a6990a8376dc5dcd488888d9e436b566ecc63fe715b051859119b1399ef9c905fd63874175e5eeab2361bbfe6247921663c4c20bf6db22bf87477886f6778627bd6d5deffd7042c9b12b9a5448ef2425607e7b08fb984239750595e29f8cc241b238531824a6ba35747df767f1ce58403013394ba85a74871660d7e3e479ab54f2163662a9ffd385764bba475f87d56e191a87e1512afa51b41f664425dc0eccb202080327c8160a677054d5430e2af640d4f1bbf1c8e6d38ca007db30e52ae51781d27f5c760797601abecf3622e370f39edacfa7a8559bd1a5a2db1f0eb202f49f84f14231f593baed4ca91188665dc7daaaacdc8c02520c918a10f95f6894fbc735350a8e75b9e31493f200bbfb3824cce202f218c216310bb9d9e5621e03fd6df18b8bbf43f5eb29a1e1a7b8eb12bb28228bc536973f70f50b6c4e9663c12e861bc58d376b2a47298fd72f12e8af2970a806db26649be9876f7963fcdec769265a44048e6332e2dcd73b0637b5079c7f3c50e74bc43317f87bcb08bb0d307a9b85eb236dba7b7529be680454a76992d36fd9a8dab504f2a954ab14b40872460df0480845e307df07e80307920e5079196d14bc68e657f5d322265c6b4408b39e6a9c435ed485752cbb51a1bae60c86dd11579db163f453bacb9e34bc1b4c11498ea5dd95e8e7b8e57af0c66100745892cb16ec12dbdaa462487273bdb582a05376797c2732be2dc63e094442556be6ea8faf70e12834b7e724d516e3d6480b07b0b7c255b1c1079cb0809e84017ecd8116abe2d6cad207669a2104c9754fb265f6c7b01c5af50814d9f7f6bab90ba9010daa18c04e886939a6fde3e1e49f3823f41ee338f3ad24625143b01963bb9da90d60045604045ca4066634cf4da26b13b0a246d5f6e7a4d3e6de02aac171053c978cb6562d31b2eda0a4df9a8c54d6f0c35d59fba466208d0d9d8a38e968f0c116ebe05a7f681d74fa778fc9d3b098cc3181bb66ae6ac5ed3b13f4a4ab741bfcea12f6b7e5faf64d109fdb5d1fe812cd3fbb477146da300e021b161a1a2456993adfc0c7e7acf71f39a0dcc53dc27660a5e2ef022d334af9478b70aeb40667a20f6842630acf5e25a16efe6f377cedc969ec158878985f76a65af80a54c9d6d5d7585017f18376aa67cf8f5086f60e527268ddd87a75bf440fabb97b273d2a5d12c343c27e67968225d3575f4fa4c2de3618388e7a21acfd2ba7a9df2a195c2a36f627a55f34a8de4c46b5ce2d61298f34892f584bef2dfe95ae2f1fd1f8ca9daf85d8de0567eca0303574667bfff7210224b42180646b32b4cfc7c839b5d58f07ae83ce978ded9006619a5900428f4b051b6a539d6234e4aff0bf34c1602fc52d18dd8fa9b65341a843cef1e5160fa1d80d80a1236b14a4b524f472c6b2bb8296e8960c76398394a916df1e9c503256e14325b3dfc6a4ef123132db25a6dbe375525bc56a13067d2f93f6b4b767a4c24e52c716f87fec09875329d47bce4a0f10f7ad897cdc432b04eb1713466613657ba4fe490faa78f1ab3e309fc4ef98c9696e7bb9b32ee7f7c683697efdd78090d68efa86709c3dd49b7a25bccb368f527db6f950c33208c1c2428b702725211cd2094be97656d1695edacab73cfae2403b176fea2a4345b82f9a77946f945eb1555fa233d30d8cc6a836e02d721500f4cb1ae4f2a9e9ae0220a8b1ac5771e9c99dead7877bbbe04ee3b68b0e149deb9cbb09717e57ea163b5ad4cffcd73c83e06773fed4775e8a3a2fbaee8062ea42a72e9e63bde2d648c55984bf80d79da38eeff0e43a62a6c68122235fb8879d114932c19d951bfd3b9f56a20b069bbe630d7530c8fa203000418114489238d3648ee5350abd01eecd0ca952a049bc9e8b89ca6868f453bcda45462af52137ad0f4e354c6ce5e606b9a2a288036e524b403ebc5860a8ed0e282f8337321d855579900918f1f545cec1df3389e96d39a8ffe94e934f71f922a8af2cca5ce04a0e0af87532114d7cfd014938ee3b51ad3b4d64a918ffda6fe9975563e9159ed189e161849922109b799fa29a0f963fd244f3371cf3995f1446e6d9b9da87ebb5b39c10bfc59036bc248a2c859974a86f3e2d1015ea61bd6d75e8abe979f4a1e5a1ca23763041f44c53feca6f94215a806a0b54cbe2bfe4225e190d85115ce936ad1cab3d63bf7bb84046cce2cc8c5ffb16d82664ad152b0740e1db9005d6dc76cb73902642b072b07371a89540162da838754c9c75e63e18169372219dc576fc781122725064df2dd741736c1549918179f3e0815af04cac9ae5dbe3d55329053e2eb581181dcabbf37b47c379ebe9852a27b7e2d02fea7531d849326d6e552b83b810d0fc1cbc4e3c4dbd8a33eda3465d63869d638b20e7e5eeac77697df0313604b6d324c2a2f947d15de8cd580376522ac7f08f2f92bcc94e2b2ccfcc516661a770fe06546c911d18b92c455aaf10d6c06e1a0baf069d8d8de9075050a1a3518e683775d48c00b33e0846611e643634632f8318642501c92aa6f15fc1937f816ed66fb0d569ddc06049a646cda45b2066ba9604fb2b27989f2a837dca90fde6a3933fd61b6d052d8c3cb05002be18fabbdb04152737c14abda16373d08907fadfa3eaf023c91450dbfd06e11ead04a006f113568ac785f45873a6bbcdc12ea2b336a21ef01c39d83a4c7dfeebfed7784b93f65a124dfabc44fc6c0c1c24cce9a91cfcfd8d31c9423", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 20.151398765s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 18.365424501s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 13.113620409s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 8.474856144s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="672812a49b8000a9dabc522632996b256940", @ANYRES32=r3, @ANYBLOB="0500d30006000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="e3fbc9f7e155a6e294f68078cb808c435b48612e93b0d69d1f21fd5564a9f18f996475fb64e12884979b5882a07d51ec37cab390561644521d18773068ad0fc0f6f8df2bb545c05fbfda35eefcf88a020063a2bf6468b302b9831678e59677adb2ec28d0caf29931cf5993e1ce3ba4cf655cf53218d9887589289e133b54050621892724d74ce07d912407878f2a4ec7a10be378467499f110fe42cfa93c4883db8d2c5155a0d94b828405a9de0e8ffae65c255df6ee1e807dd8fa8d384184f735fbc4e62d27f288c6c9c94477590c7ff4eb93131ebb0d6d5dfa82dbafd6a6bd0cc56bc8d7af7e4246389c34a239b98ec85073c76da59b1fe73f14c72c5fa25e77ce2d5849ad97c74e15826752d1d571e6d9377fe1dd1c794795216f2614d25d9a2a019c3f88b59dc971df962e0250e89263a6c3cbaa9f2b0c5d83cffd423c89b83783109d05b53831ba44e31971b5a5444e816b19e16ad69106d8d7339ed0b5707218728ea071db4f59aea059410e48dc0c210eb84552eaa5ff6aa127c9dc3312a6e0bd4eb3eac8bf7b9c4e158fcc69d371246d807fbeabcfb33e9268025d3dd4cdfbdb0e178cdb63493251915b8fcf933b9ac872818fc255fcc6e4d9fcd7cc6e5071928e7f1a5738321897b0d277f0bb661ea6d25d7f6f2b38273561593d62fc363cc77de0352ea0bee8b98ca55474fa1c69d476adb25ae2ab5357008d03c236294544f79039057a5b30d130c2149e755f2b61907e1cd54a56dc53e3c8471e81f83f5e8d97a5474015d24ec97a074394afa27408a73b8e765b79faf100ea3dd0c98fbfa3d113ffe56c0ffd1a30415e82b34cce8289eb6d01ed59fe6a6b0c99a00e4563c0c0c4fecd127fa357c0e12bfed2a1ac23643d91fd4daf12494bd0a8ac520886efe0caea86fe820b1e79b614fec63737d4930508e037ac05fb254fc362b39cd9b341df7d8504a13b8af2055ea1778c6043c119465f79c118e8080941bcbc0c65ba0cb25e1be8de94207dcb3d2863828a6b17f5a37fd64553ecb6d99879e38af6f3b2da109433c0b75faf20de6ee0ae823b17d1462de38d91f6d5292f02276dbf744ff835dee75532659087e91e5c873b321511b7dd74e86813b4ba4a99394559898206e29f149a53acf0483c0a150c5d1a9a050341c3f1822470381408ff787a2486ea81c6128f1b33ab8fb38e4491fd643ef1fb3efa333b5dbc8fb92daf0b957c19513a838355abcf40ddf272d88e2740dc390b94ee82a5b72a1e7c55ff6ee034d8010702dce3de159a34620b5216d3308e0cd64709cd7f4d5b026f4b81d7d43d8acb36c2251ac576b0ca9411e41eb6ba1d1871845ddcd4d95aa876d0baea1a00b59d68a00e191b59f751e54edecbc4aa0df7585e868a055efdb1dee40921d13d55dfb51f1b245ae2b91fad099e510b75b25daac3d2c529b9bdecf5ab6abcbc99c8f2358f60341eec86a4bd6a9cf0df4004124e31a4cc2e2e3c5cf53a90ee16bb4c6c49e9f50c993a8aa575b0b8e018b608f2321bc64afbace952457246dc8a3e4fc9a6c12a7d7d2779e4333072d4ef27d6e0cc2d1a6990a8376dc5dcd488888d9e436b566ecc63fe715b051859119b1399ef9c905fd63874175e5eeab2361bbfe6247921663c4c20bf6db22bf87477886f6778627bd6d5deffd7042c9b12b9a5448ef2425607e7b08fb984239750595e29f8cc241b238531824a6ba35747df767f1ce58403013394ba85a74871660d7e3e479ab54f2163662a9ffd385764bba475f87d56e191a87e1512afa51b41f664425dc0eccb202080327c8160a677054d5430e2af640d4f1bbf1c8e6d38ca007db30e52ae51781d27f5c760797601abecf3622e370f39edacfa7a8559bd1a5a2db1f0eb202f49f84f14231f593baed4ca91188665dc7daaaacdc8c02520c918a10f95f6894fbc735350a8e75b9e31493f200bbfb3824cce202f218c216310bb9d9e5621e03fd6df18b8bbf43f5eb29a1e1a7b8eb12bb28228bc536973f70f50b6c4e9663c12e861bc58d376b2a47298fd72f12e8af2970a806db26649be9876f7963fcdec769265a44048e6332e2dcd73b0637b5079c7f3c50e74bc43317f87bcb08bb0d307a9b85eb236dba7b7529be680454a76992d36fd9a8dab504f2a954ab14b40872460df0480845e307df07e80307920e5079196d14bc68e657f5d322265c6b4408b39e6a9c435ed485752cbb51a1bae60c86dd11579db163f453bacb9e34bc1b4c11498ea5dd95e8e7b8e57af0c66100745892cb16ec12dbdaa462487273bdb582a05376797c2732be2dc63e094442556be6ea8faf70e12834b7e724d516e3d6480b07b0b7c255b1c1079cb0809e84017ecd8116abe2d6cad207669a2104c9754fb265f6c7b01c5af50814d9f7f6bab90ba9010daa18c04e886939a6fde3e1e49f3823f41ee338f3ad24625143b01963bb9da90d60045604045ca4066634cf4da26b13b0a246d5f6e7a4d3e6de02aac171053c978cb6562d31b2eda0a4df9a8c54d6f0c35d59fba466208d0d9d8a38e968f0c116ebe05a7f681d74fa778fc9d3b098cc3181bb66ae6ac5ed3b13f4a4ab741bfcea12f6b7e5faf64d109fdb5d1fe812cd3fbb477146da300e021b161a1a2456993adfc0c7e7acf71f39a0dcc53dc27660a5e2ef022d334af9478b70aeb40667a20f6842630acf5e25a16efe6f377cedc969ec158878985f76a65af80a54c9d6d5d7585017f18376aa67cf8f5086f60e527268ddd87a75bf440fabb97b273d2a5d12c343c27e67968225d3575f4fa4c2de3618388e7a21acfd2ba7a9df2a195c2a36f627a55f34a8de4c46b5ce2d61298f34892f584bef2dfe95ae2f1fd1f8ca9daf85d8de0567eca0303574667bfff7210224b42180646b32b4cfc7c839b5d58f07ae83ce978ded9006619a5900428f4b051b6a539d6234e4aff0bf34c1602fc52d18dd8fa9b65341a843cef1e5160fa1d80d80a1236b14a4b524f472c6b2bb8296e8960c76398394a916df1e9c503256e14325b3dfc6a4ef123132db25a6dbe375525bc56a13067d2f93f6b4b767a4c24e52c716f87fec09875329d47bce4a0f10f7ad897cdc432b04eb1713466613657ba4fe490faa78f1ab3e309fc4ef98c9696e7bb9b32ee7f7c683697efdd78090d68efa86709c3dd49b7a25bccb368f527db6f950c33208c1c2428b702725211cd2094be97656d1695edacab73cfae2403b176fea2a4345b82f9a77946f945eb1555fa233d30d8cc6a836e02d721500f4cb1ae4f2a9e9ae0220a8b1ac5771e9c99dead7877bbbe04ee3b68b0e149deb9cbb09717e57ea163b5ad4cffcd73c83e06773fed4775e8a3a2fbaee8062ea42a72e9e63bde2d648c55984bf80d79da38eeff0e43a62a6c68122235fb8879d114932c19d951bfd3b9f56a20b069bbe630d7530c8fa203000418114489238d3648ee5350abd01eecd0ca952a049bc9e8b89ca6868f453bcda45462af52137ad0f4e354c6ce5e606b9a2a288036e524b403ebc5860a8ed0e282f8337321d855579900918f1f545cec1df3389e96d39a8ffe94e934f71f922a8af2cca5ce04a0e0af87532114d7cfd014938ee3b51ad3b4d64a918ffda6fe9975563e9159ed189e161849922109b799fa29a0f963fd244f3371cf3995f1446e6d9b9da87ebb5b39c10bfc59036bc248a2c859974a86f3e2d1015ea61bd6d75e8abe979f4a1e5a1ca23763041f44c53feca6f94215a806a0b54cbe2bfe4225e190d85115ce936ad1cab3d63bf7bb84046cce2cc8c5ffb16d82664ad152b0740e1db9005d6dc76cb73902642b072b07371a89540162da838754c9c75e63e18169372219dc576fc781122725064df2dd741736c1549918179f3e0815af04cac9ae5dbe3d55329053e2eb581181dcabbf37b47c379ebe9852a27b7e2d02fea7531d849326d6e552b83b810d0fc1cbc4e3c4dbd8a33eda3465d63869d638b20e7e5eeac77697df0313604b6d324c2a2f947d15de8cd580376522ac7f08f2f92bcc94e2b2ccfcc516661a770fe06546c911d18b92c455aaf10d6c06e1a0baf069d8d8de9075050a1a3518e683775d48c00b33e0846611e643634632f8318642501c92aa6f15fc1937f816ed66fb0d569ddc06049a646cda45b2066ba9604fb2b27989f2a837dca90fde6a3933fd61b6d052d8c3cb05002be18fabbdb04152737c14abda16373d08907fadfa3eaf023c91450dbfd06e11ead04a006f113568ac785f45873a6bbcdc12ea2b336a21ef01c39d83a4c7dfeebfed7784b93f65a124dfabc44fc6c0c1c24cce9a91cfcfd8d31c9423", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 4.015457003s ago: executing program 2 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) getsockopt(r0, 0x1, 0x14, &(0x7f0000003ec0)=""/210, &(0x7f0000003fc0)=0xd2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4, 0x7a}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0x7}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.848839074s ago: executing program 0 (id=728): socket(0x1d, 0x2, 0x2006) socket(0x11, 0x800, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 2.295330833s ago: executing program 2 (id=1646): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0xf66f93a48511db7b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xa1, @private0, 0x7f}, 0x1c) 1.823481278s ago: executing program 2 (id=1649): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x400000000040, 0x0, 0x0, 0x400000000040, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)}, 0x78) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x8004}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) sendto(r4, &(0x7f0000000180)="d708bcd9d29790f6357e10ee3b2db33f985f0c1d704832da79c656fcfdd4ba7ef6a173b067684e17bad6777a78c969784610565a0e0e4a", 0x37, 0x8000, &(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x10000}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0xc, &(0x7f0000000440)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0xc, &(0x7f0000000440)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.09045163s ago: executing program 3 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_MTU={0x8, 0x4, 0x6a7}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000df250294470f7dd400050018000000000000000000000000009a25afc6369fe9a2c34b3298addb1820fa80c6404cb40045fa7eac047c99a1403ca5f0d5f03386f2536fd9e053c4907a9a201ff853abbaa3c30e9d1d8825"], 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x3d}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8040) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)=0x6) 1.069073556s ago: executing program 2 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'bridge_slave_0\x00', @multicast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) 716.04712ms ago: executing program 2 (id=1655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev, 0x0, 0xef}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x8895}, @void, @eth={@remote, @random="85f84f1d2a7b", @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x39, 0xbf, 0x67, 0x0, 0xff, 0x11, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0xf, 0x5, [@broadcast, @broadcast, @loopback]}, @noop, @generic={0x83, 0x7, "e7787090ca"}, @lsrr={0x83, 0xb, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}, {0x4e21, 0x4e22, 0x87, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}, "a128e900a2ea07893132183ad29c77ccfd90ed5ddcb3b2ebb263fdb5a4c7f23c8e29e4aeb235bdaa9564b6af5fdafa609fa75aeae9c832696c5134fb3f5051d058ba5096c4a0752159b0471756a1a30a9e475a88bca808115cdfa2015ec64577e01cdf9140e60bacf6f333f923afab608de833b5be5bd2c601af5d"}}}}}}}, 0xd1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) sendto$inet6(r6, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="0c45755bd552e0c2f424bb3a4fdf8808ee", 0x11, 0x8000, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 715.268424ms ago: executing program 3 (id=1656): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 713.988446ms ago: executing program 4 (id=1657): r0 = socket$inet6(0xa, 0x80000, 0x3ff) sendmsg$sock(r0, &(0x7f0000001580)={&(0x7f0000000000)=@generic={0x1e, "9e63f933b178bce4a3cfb29452a683cc9c74d1a4c25ab3083603954153ee9cbb518bf7026ebb7433dd9bfec99f5643a967e02ab3acb11ca5c9e062a029480dec5aff855325cceed0195b7e81960fb11cf7f0a2f50ca0625f9185fc59d50cd438ae254a6668d967ca399e7103ea41b3069857d368ff7eda9d1dcb502c0227"}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000080)="1047f9906e2e0630311f61744cc6631107eb06213f6178713737ce21e2a59b554669a0671f9e3b03f6677418ce9ab7b121a8ed158e4dca5b2abe81673f560633ff3a2da7f5a4b8276ba3a4b67e947963d530fcf8ca3d99ab21759b157d5b00b7e9740448d0dd42755f7ac6e19528b5c1a93b4477a923dd204554fe6e7aba5934582524b1eea97141ccc4280a87204b63ff31527c85b988ecc814841f31d6d9f64d05314f588cef1d27ef61fa488009ed5d2295ba73df3357706cd19a1579a559fbde75b5d894aada0260f216a37f53c1e85ab9780ae321376173cd27780d199eba2f569a9d31e34993da7acaed568d439f1058231019e39a9a30c4cbac2cc039bf9a76f5460b51daafb089567512e43f8c6ce6ea01ac868673a7585bf54ed5594a2e4a211e16fc8b0088413fa848392efc869ede4326a4cd53c34afcf3795b274a3bc614e69e0302b1cc907d22b7768311316f6abef5e964455fb61370077222290c656b0f63338beaef6c0448c34e67b42fa4334d7720f07999fe583102ad2a500436f61d7e084b22c264a09ce3cf48ff6aa7b4646ec5cd0ecea37804f22dbde2e7d3d6e1d378f16b29f20ddf423a8a40af11289ba482f34b3336b81d41a09473910547be84502fb996042241d235dd0f8418658bc3c22eeb585059b40778877361179e1bd995b68908f79ac3eddebd6115e25fd1a0c6259c8276361b794d8fb15a858c01ab18ac39f0736d338c5674e670b71bbf276df103f7be75b175983865595ab7035d2b081c83587553e6f0ca66ea91a9b3a31255600c5d7aeecd92a097d5ed6917e198a7b8957650954b4cc326c8156332b2ef2f04d94f0102e8ab87cb0bc2de98c5251b83a7d402d9d418790e302ea4cd87d56bc3b8104ea9e31894d15597c3d1897a1758edb2ccf2e9b3ced33d1ac444e8da3309a329a3f7a217ce822c119c591d953070b384220d7e5603eddfe09e137a7f9966073f7068dff924ff45f7e205dd19e26d1115cce0d30349cfb709ae6b9ba59583b8047edc9a078e023436060efc058ef21463d879ff6a77b8c5dd9c57a4c65dca0e2728719ce32bc293653becc1beee15fe7dbeb72567abb24615f96b340388180b8b88e7d8e552525b2690b06a017051f50d61f5043780921ed1659a25948d7ceaaad1826c85abfabc852edb96eda630dbd64ad07b1131b1eff8fe82fb7b32d87c60237c55840c5e9cbe5c6f838c9ee08e30c414e62737f3b2f5c38b1f4b99c2dc02ca50ae2e63a858514cbbc913d5f304f8b997e212141b6f34daea7656cddaa2e9a6454d10fe0a9952006348ea8b009a214c5a6e252900f296d0914282da9026c6f52a7fa17f0f524aef0147056988d20b8733b747ae54a378455926ce927c6b6947ce8dfd544e05ae272c73e7c757e758a062ace206f9a9e99b75d3ca135c968d67caa7bc4d5f8c9bbe70d0953287bd1b076bab2724dbd4bb00df6eb409224cb69a0057b9da3cb78ed37dbc64bc1e1d2ecc5b1db5f5d76ac1b1537298ecc8a24fc2696d8baae2aabdec3e2fdb1e9573856ebf6129e6c0dd1c57cea1bc8a29a611f1c41e0ac28c377bfaa99aa7b5234bea94afd3c96a7c16b87e83dc748f959f04e13aac1f8c904e69f920b727681c1a5155b04079944e390205f0cd1f73e1507ee6872a82a9ea09d94bbc821e0f6251f37ef1921136c720fd84b35278ef654f9b233506f6f134c2d02f95b75e05816429a0ca43f9afaf3df71777d6b2c9229921b46b4c4b1803eb674aced43d267f2e385c30815cd19268caf20f07a6f16a818b50437a7b65320a4642b90a043ac6e1b99ae620abaa2c3f2aae39ef69fc39c62d84e765d02669d2b6c1ddf850221a3718966e04a088924565f96f2251e774239b0b6762abb82a0d71cfae58018b012b7ac8c2d3e5446fc0471591058da62cbd9cf60ba38dec79251808188d90d188a665c8172bc9bd09a130e72ead23c0c1aed3d16c95251cc6a2a668e8854dc685a300f9e6712db2ab62b3031eb544a353c7ebd4c135ec7451d368dd9cdd744f4fb79b4f61985b3498e3075b4638b5f68bc3746fd4769e70d3867d6c083ff0597d9514b00a5d3de9a329855b4ee05020e1842f794ff8a6a107018ab2e08aaca6ce1a52b8977d61678838c652c125a218c969d47eaa4080666ae4692e3afa93a68b8bcee6bf69a37b57c9dbd7853be594618cd7e31a87a0bafd762e2cf63f58f2ce444e613b2e1324c9e21710e8ab8bcc8e847ee6246c58ef8e406c926c56e9a9cfcdc4feb74969a46213a9e6a3786c5e228e9344707f2144d10a7fb7e52637146448c507a232c768c13526f876cc96b21d3f41651fd00505749774ada3936942ddef7a2fee228bfc878754fadb81711568d4656966721c105c694ef233fad3da17d836ab35eb1cac516d2b367e58679df561a95f6d6c5be76b14ddb1f6eeedd941755724439ee11b878b0401497ccf86f881774e5c29e9ce380c22a61276496d3a33dadfbac88df5db09067b8000fe8df74c00d9e219274b70618383d5df34046abce7c610bc77488768691d80b3e9f8f527af03ecb55ad83d27f9708fe34066f88a2ca22613364ff8f58da603a9087a8bf0f9baad8747170f312de5e425d20afbc6e0af68803dea5858337c9a1347542b5a1e077932ae9cafa85662f0a7b33240db2979651b294d84fbb9b8a74f2270db91ccac6c7258303a77f703f0c7efb1ea35d6af6ac058974bda91e3d0f47bde6579fae19199dab50af8570352dd0c7340e29d273d4bb68bd0a37ee0f7c0a0ff98b3ce414ec2d896d26a7543c40f2af0445a2ac08b362964889bfc0c5e19aeae871547c3b968baa7bd2ef3ec8696435429f87a5dc08adb9530ec10415b571a9c3526079b15a63ddec843e6a258f54f4d45929c61723e4ec02e77bdcabb8bd6c0c8df2cbb3caf2c4ace04d5715d710c678e0ad7b9612a9ffd01c3834851df0322eb28047b9acdb43e5182a86e30af4fd695dea990370eeecf4fd683ee0b863e9b73d0448befe8e7a8cfc2876e762dbad2e0f940dd711cae05658a80db9dd63b15bf18be430005d626c3b327aff70041f1b529f308db7f9621125287dfaf7c947d35681cfa1bc3b0e6d8b86dfe3ab99e4aac2a77b22bfa3e3dc9b3defa7bbf3c2e01d3270da65e9087964f5b64062fd504475dba7173152b99cbf962ec105ac1482f85c04a91903c9efcfd489f9fc85b8c9e024535e64465412f1228cf6df7acab288f62e1cfdd9a38fe7fde433b2e3231746bd13d8731538f4cf37a65fbc09345aeeff209cecd26b9d40b28b3b9a96418361f036f5a1dcab4d6d2051fee2cf804e9055934e24af8d70a246a96be9a4d3e56c508bf4428c2904757fe296e2e3d462395b88caa5f595e31d35959ce3f8ba8585b96554767316e1038df07216025b0fa8ffd2d92cbf4ec2d5ffa0fbede3c34a0ecbae5563755cf1c51592a59ff7bcde2aee3a08f2297a6533f386c0482868f431617847b59ae083f0b350711810ec9a5cb32f1e4da97ede51f15cfa22ff17c092a4c8c29d0ab1483500802b329a0b096140a26e3cb456610c2fd53b4ff0cac7d05342a0ae92887788de119941aa7c10598e4d6cfc0fa703a87157bac7a6bec8dc6b6a02c86686bdb7d5fd603dc2ecae443ac200060c826fac2373e7425b1d7a0d8b07e3ff731af54d01787cd6757ec2e7de3bdd814c588e2cabf8bb6318122fd646319bebee029c31a66c6edd93682655d611d6682068bd32efa561ebe7c82d9bff72acbf81f88d6ee9e14e4a4ff53878417d20473b2ff72e5aa3c792dc8b4bad1485e5731c9f6b0b0a74cefc201285ca56755b30b75a652c4bf89daa8d510ac8b3f1bae7ef1e67cd72e43f3431efa6088a2076d62017dcbc679ab34cb54eec2e6a8a30d93e0fc7866fab3a5dd45b095c86e4d9200f76fc7aa00ff02f51b56d9891ce5a67aed58b898a2accf497c42159a0050edbbd00040e68b1bd2326553ec7d4a10d10efec3231981913ae8a86cc0b5d45dfebd0effba37e26606d8e176289eb420352bf9931f5caf4799366de05c6122410f7c962eac9d70b74f29f3f5ee73b3c9023e56f59b0b992c8362ddaab15f4532f659f6dfa8a25da1f5200aaaee379ae84fba11527f4e94f517b1042b72ccc9c5f7f1b1f493ffa257bd48bd35738bf471f0cf2888d1780599697231b1b913062ba95009d41b1a4666e63c0157ed6464ac7d769bbdfe50ed2eb817eff9a56417e97a08dd23bad530fc827eeb7655f6dde96f9ed112b6aace9b0c5a7b4f7dc0133b6f027f0d5b7375b991e212e69d4faec484e8cf13c020d559ff7dc3fd05bd2aac073e204097f105a72f56d9c0582d1e7baa9cc3100c75ed9d9de1fb0b1e1f6e2fea68fbe3e239e924c12c65b2970d42fd2daad1914fc239958fa688778a32c598eb7a920a561cb06346a5e2ebe6918b2d2b37030fbb8eb604d1f6ebf98ed34a838afcae917cb08646a6ee4f6a7068ff72b95fc4d25d0879617d23ebeeee9b579b4817e00c15b78d091ac889a403224b08bd29a105c4ab866fbf1534ebb35649cd86b6580a529103bbcaea942e151c2dc4e98a79cdee81e1343f1dbf66b44e82ca2f84026fecf8a60cec349ac9b89c8ee2e19a90b31158ea14a182d273fb6dc9e25d219d44f860e748c8d40e3620c51f6a6d38f92fbe03bf657c920b6f8b04a461d0fa8e21d780aaaf02d58d6f8844d9d82af9259d17c634f8ea4d503948fa348cddab198ed786212269f2cfbef1c7c27cc2cb657449ddec8e0206ddfa7a055ad4fd251a993c4fc23b8baafc6201a6186c13d9d34aa3f8c980acc2e7f785e6e279e9fc3844f547a98937374ad776d8e31c9188bfd2aafe42c12e4f5b0f1f44c5fe2fc75f7f093f6e7f395f99138da2bb8cc642ab0069c4fe264088a9e50526635a8553574da33462d698b30b235f66204b0bddabf415ebbd861da795458e5a4f241ee06922704c22d65549c8ae9e4f37d18440d781be80eebebdf05f0c96816286d4938e23b2b3afa75c5eb745fff0dfb9b185a96fbcfdf951bafa85c84926f1c8ba760d144a0569a6a27de9f8d4efb122d86bb78d71c5ae63c6f1ce33d4a02e54e1081cdf7348c2b776d6c4a62f25e4a32aafbdcf39a6212e7ce5414d7f0502327e41d9c1e7bf977e7114ec7a4929cadfbdcc38daba12a9c1b94fa801202c5320aa331a6b3ca89ff9d685824024a4628c15ad0c45bae2e5476a334269f7e507ce858d6ca20c932203ed9402f21c6241f3a90159ae4242d5fe25c2d72346533ba707584d011d192744cc2373907791548f92896213dc593934cc84ac99f6a9e9aa47ba6e27a49c3164756c1205ad8ecd0983e3b3c72ae9ada0f94038b649f6ea80e8654dec384b8a09874795632ee18a1faf759953cf39236fbd914a6a9c48bd656f0a8ffc00bfb8c43c4e299be576ebdb523444fb962b3aa9c361e49e4756bae0a6dadba38618d19a9760bb86d062830fee71bc2e375d5c6439494ac014f80741c5c8f3b63021eeea028b1b62139e706f6b787097c4a62414107c84787fee8a9ad94bed105a64c1ab9647be3146f9057e19cfd1323170a08a4727becb3b593040382f3ce4cbdb044e393af23430b961ca99ea01b580f922240aca8f7df876363f18c39a96fe047e60a92225d8ca5ec04e80daa3f0fae799d407b31af8775a0b3d8bcacd575b85e3716b175c2372dac57a32078d1925e75d60b4d07b3249738dfcd1e262bc069868e7ff9354c6590482b1c39466b6b03772ca91302c9b8a923b0f7307c33c", 0x1000}, {&(0x7f0000001080)="bb22c8b4a9d1bc93c8431afea5e7be", 0xf}, {&(0x7f00000010c0)="d193b8f6359a0abbbc56b448b9018ff28b0f83ee7f283f217d5c992474d68f8bf76d520832e958a37c956fe1e705b9c2f18e49b0f3b2b9c66e37afb32a72a8e48853658804672be6788dbb9d2e4cc692fa7558683010630690d95fd609c7889d647b93d1744de68636af447a", 0x6c}, {&(0x7f0000001140)="600bceeef01ffd5aeff6ff758aec0a81337b87713a33ec", 0x17}, {&(0x7f0000001180)="ace87517779439f744d8a6c356f40c519e54a8a7c638af512446051d7e6a829a46df989ae0705a8af33f9cd9e621ea9710873a40cd4da4ae8053097aa84a089eaa99ac47eb4af5b6c398948b6636fd2b91a4ffdb978eaad6b79a1a94ab8a0a109683cfd87c3eed04c0a42cdf21cd98d51a9f", 0x72}, {&(0x7f0000001200)="dc40cf61ab53ba66db83b242a3421923bc427fd64146c33e1eed6f83819ef559fbcf2b415879d90011a56e6a94e5ae7d5dd6205b9b33925298cd3ccf64a80456c24a0d5c2b926d5922c3566a386f6befaef70e2439dc74dfba5f2b7423e6d7d710287798bdaf", 0x66}, {&(0x7f0000001280)="3de2345f77a7a45fe959eb4bf655843b584265e7a2d6576260aacbe2e6f860c222e2ac2f9778d60d0c4fdd9a0faaa357597c0a718f9a2c8710bd6fc3c7315e2f3ff961f9b96a535c7f6e826b3f0a9b983a53cc77503924279819552f99cd191f51267bdb633e8f068796e2b00d6a44423509542a92cf6cf5158433bb0ecbcb7ffa98c18fa97e3b40b1d0af81f9dae32b65ae00916b69ac83f108fd38fe381dac98662d76257932d1f39cf2d385193599e310cb678a9f7a", 0xb7}, {&(0x7f0000001340)="b220b4d3c00f014f2b8a1a07dd598e24f29a5dfc8ac3a50b241acc57790e8e03bbe52d6fa2c59f91785796b7c0798bffb72de726359c3dc2fc52f6b6415c808bc61a6f767e9b76b6dfbcdce766ca9b38fa863cd7623234997b58d44d372f5756abf37ddfad27b8edb147cea78f1a53eff47bd599b127315a925f5a0a21bb9560b4669e76d58ad0e637a7a0db61be818616d7f4d89464c01958370281f3f1c1fb0154df8df022cfe998466b795085336607464e96270915509c06c86ec0", 0xbd}, {&(0x7f0000001400)="081ce4f94b50b4e2f2ca420a63a5", 0xe}, {&(0x7f0000001440)="da7f65bfd7d099ec6a376fb7eb91d616b59f784565c6ab8e992b4cda070ee5489a11e55a0844a8ee67b6f2c7d78073effb4d2e643e388da977af75ea6f8e4f5546ac1b0abe3b92f42b65b196873046be0c2f088795d33b8ff4f3489566", 0x5d}], 0xa}, 0x4000840) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)=@gettaction={0x138, 0x32, 0x212, 0x70bd2d, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5a}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff6b}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff8}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001840)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {0xfff1, 0x2}, {0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x40000) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4130, r5, 0x80000000) (async) syz_emit_ethernet(0xd3, &(0x7f0000001940)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "24a2", "1be91c", 0x88f8, "8564da639923559ec92426ea25d326944ed2ee0a8970c8c54d8606debcaa634e436654283780ec24f7ba23cac758a0c5bfd2c6659423e46b494f622d3e3f2f188b71884a91fa483d07a5c63978541284adf9c2153a8df65233d406a62115ea12d1d920db7cff45eb3b331bda078e47904657afe3cfbabb68d81e24b57775a7675ed2209c32e83ce5da97e7975fc455a342ac328ebcb04049bbaac73e819812c4902619ff02e1d62d429f92b120889da0ce21a3ad2aafd8b0d1c74a42"}}}}}, 0x0) sendto(r3, &(0x7f0000001a40)="8bf3636fa180d2dcba2ce4", 0xb, 0x20004001, &(0x7f0000001a80)=@llc={0x1a, 0x313, 0x5, 0xd, 0x8, 0x8d, @random="517433815a26"}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r7, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x29}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000001cc0)={0x2, 0x5}) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d00)=r6, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001d40)={0x6, {{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x3, @private1, 0x2}}]}, 0x110) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x11, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f40)='GPL\x00', 0x3, 0xf1, &(0x7f0000001f80)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000020c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0x4, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002200)={'macvlan1\x00', 0x2000}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x21202544}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x48, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044800}, 0x8000) (async) write(r2, &(0x7f0000002400)="ae195785e47a7fc37c14852f9dcb2a8101cd9eae4f2be6a2aee03ffab883f523f37f29d1353954b35c5c2b88e6212fb04122b9ba34ca2382cdf4d97757448bec9fed9fce430f604a928c69caea1d854cb9f7037fa912a7b6e36528d82a71", 0x5e) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000002480)) (async) socket$kcm(0x29, 0x7, 0x0) 612.639426ms ago: executing program 3 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001008c7457ff8f99b8233ba7d81496e1da69140000001000010000000000000000000000000a2e88eb9a6a2e7fe8568faa102ed04b3cfaca94c126ebce065484951e19b44a04c2419614fd71a83c86fec5879d140e4ab0a46eb812d6d343ac699d26a6976097a846f5c96519f620ada1b902e802"], 0xd0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x16, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000300)={@rand_addr, @initdev, 0x0}, &(0x7f0000000340)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r5, r1, 0x7, 0x4c, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88040000160001002bbd7000fddbdf2500000000000000000000ffff64010101ac1414150000000000000000000000004e2000004e2107ff020020a033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x488}}, 0x0) 534.644547ms ago: executing program 4 (id=1659): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @remote, @dev, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) 476.086807ms ago: executing program 3 (id=1660): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) unshare(0x24060400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000009211ed3c66e6eaf00"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r5}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000012}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newtclass={0x54, 0x28, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {0xc}, {0xb, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x48}}, @TCA_RATE={0x6, 0x5, {0xc1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x94}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xd694a12f594b64e6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000500)={0x0, 0x44, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) pwritev(r7, &(0x7f0000000540)=[{&(0x7f0000000280)="41ed23fc404fce159d0a68c371942894e4a6994e324d5f048c980a51f8a63d408294696e9e2ffc57b40e383531ea41eb0d45eca1b22e635041d5570c62bca3007b5d88cb4f71e9f84fe11cf7c2db94f606ac337892218484d695107fa33633f6049a68b18d3bf5c7048dd48b15ee257a23a52db1acb92b1e811650956a4153", 0x7f}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000300)="a3b9c54e9e67f8ef926539bba53c2cf2546cb349295febe4e9638b54f999ce256e996a0066e9f7b21b2b402381561c6815ee07d9ec46df72f2db1457db5446de9005131e22364fd1d2bce51d3be26f3457b3ab", 0x53}], 0x3, 0x1, 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r6, 0xffff, 0xc}, &(0x7f0000000080)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000005c0)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r11, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) close(r11) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000580)=0x101, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r13, 0x7}, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003400000000004000a80040001"], 0x364}}, 0x0) 372.030422ms ago: executing program 4 (id=1661): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 360.32285ms ago: executing program 2 (id=1662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f00000010c0)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x2022, 0x4) sendmsg$netlink(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c0002000200000000000100140001"], 0x118}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 276.401519ms ago: executing program 3 (id=1663): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000002301100000000000050000000000000075b0902c669a5ee7319fe398d7ad604e0d084f9754c8f4b1f63ed74ae80eea59e59c7870374d6000002a5536a895dce9e87ee9d3b419109cd852e4b68c833228a85a26c271f5f4a3f2705d15f5a5c57c8100c8ba662c13f614b12b504ef26e96a56392"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 274.635257ms ago: executing program 4 (id=1664): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="0000000008000d0001000000060005"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20000045) 178.590968ms ago: executing program 4 (id=1665): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="dcbed20b420998332ea90d8b842dcb040108846f4a18ecb0f5e0cf1aa9e63cfb9e0fc20bd09074fd3641eed77d6678e4ae4ba9e7477e96dee47cacb9621a7cae0dd8409abb3f7da86c7d4e0eddba2282eba51dca15b8937903996cdf37a40f0b7ba262c5cb4cf6e7f3aac8d689e9c21bad7052ccb9eb792a7cf3e3a895919de09258938aae2996cfc2f59e081de981b0980ad62aa7b9ba72f4108ea31341badaa92e099482148a7549414d8f6386a275ffbeec33639c545223413128063c9ca50bf6cb7e9f4c8b1d7ef4c0a1dcdda92db5ed230842d261263161cfd7a55051564410922e6b8ab912f4302b2435", 0xed}, {&(0x7f00000004c0)="5725b1dfe5ba6b3d848d04cc808dfecace111f7954265669978f3d41bb6ecc9a918b1fdeb488dc2079b8b916320a8822de6b47695cb2636bed0193fc7820130f347c152f4e95294f0d760834f0bce47c81e0cb7a4983bcdb697ae3f8174f76c689bae6883e606955d79042e52ef51867d2fd7ac6ab2327abde60aae7001fa73001a6faf629e98db490f15042e18807ea655eb353bcc078691c05776a7793a9a257df2131284823c7e572e427ea926cfb2857e854d0ad69ccddcafaf21aa84d6e286ce1350b94d2816236e935a3846b390ffb4eb7a2", 0xd5}], 0x2, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x41) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 155.365599ms ago: executing program 3 (id=1666): syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r10, 0x701, 0x70bd2b, 0x0, {0x19}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc823}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r13, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r15, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 0s ago: executing program 4 (id=1667): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000140)) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x5, 0x7, 0xffffffffffff1211}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000240), &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): the problem. [ 197.049923][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.066414][ T7015] bridge_slave_1: left allmulticast mode [ 197.072479][ T7015] bridge_slave_1: left promiscuous mode [ 197.081254][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.103036][ T7015] bridge_slave_0: left allmulticast mode [ 197.109003][ T7015] bridge_slave_0: left promiscuous mode [ 197.115635][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.519640][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.531412][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.541775][ T7015] bond0 (unregistering): Released all slaves [ 197.666900][T11203] sctp: [Deprecated]: syz.4.1196 (pid 11203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.666900][T11203] Use struct sctp_sack_info instead [ 197.690315][T11084] hsr_slave_0: entered promiscuous mode [ 197.696589][T11084] hsr_slave_1: entered promiscuous mode [ 197.717653][T11084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.725235][T11084] Cannot create hsr debugfs directory [ 197.755913][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 198.175252][T11219] lo speed is unknown, defaulting to 1000 [ 198.182278][ T3015] syzkaller0: tun_net_xmit 76 [ 198.187807][ T3015] syzkaller0: tun_net_xmit 48 [ 198.207720][ T5882] syzkaller0: tun_net_xmit 76 [ 198.347176][ T5837] Bluetooth: hci2: command tx timeout [ 198.352643][ T5837] Bluetooth: hci0: command tx timeout [ 199.835186][ T7015] hsr_slave_0: left promiscuous mode [ 199.874639][ T7015] hsr_slave_1: left promiscuous mode [ 199.880630][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.914629][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.937713][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.945147][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.017534][ T7015] veth1_macvtap: left promiscuous mode [ 200.023137][ T7015] veth0_macvtap: left promiscuous mode [ 200.037142][ T7015] veth1_vlan: left promiscuous mode [ 200.042476][ T7015] veth0_vlan: left promiscuous mode [ 200.428760][ T5835] Bluetooth: hci0: command tx timeout [ 200.430073][ T5837] Bluetooth: hci2: command tx timeout [ 200.703361][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 200.741441][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 201.153143][T11030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.173463][T11030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.191416][T11030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.213283][T11030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.426287][T11247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.433545][T11247] IPv6: NLM_F_CREATE should be set when creating new route [ 201.488102][T11030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.528180][T11030] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.644303][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.651472][ T4959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.690618][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 201.778272][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.785485][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.917947][T11084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.932028][T11084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.950856][T11258] .: renamed from bond0 [ 201.996839][T11084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.024261][T11084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.173754][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 202.193123][T11266] lo speed is unknown, defaulting to 1000 [ 202.389945][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.408522][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 202.424112][T11084] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.447035][T11288] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1219'. [ 202.481589][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.488750][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.498336][ T5837] Bluetooth: hci2: command tx timeout [ 202.559436][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.585211][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.592375][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.616807][T11084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.755149][T11030] veth0_vlan: entered promiscuous mode [ 202.801415][T11030] veth1_vlan: entered promiscuous mode [ 202.887394][T11030] veth0_macvtap: entered promiscuous mode [ 202.898842][T11030] veth1_macvtap: entered promiscuous mode [ 202.952035][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.984589][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.023692][T11030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.052852][T11030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.064401][T11030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.087158][T11030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.194183][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.262101][T11311] netlink: 'syz.2.1224': attribute type 10 has an invalid length. [ 203.320346][T11311] .: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.366671][T11311] lo: entered promiscuous mode [ 203.394946][T11311] .: (slave lo): Enslaving as an active interface with an up link [ 203.446881][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.455432][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.464262][ T5881] lo speed is unknown, defaulting to 1000 [ 203.504625][ T974] lo speed is unknown, defaulting to 1000 [ 203.510458][ T9] lo speed is unknown, defaulting to 1000 [ 203.584498][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.614903][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.671175][T11084] veth0_vlan: entered promiscuous mode [ 203.703580][T11084] veth1_vlan: entered promiscuous mode [ 203.782963][T11084] veth0_macvtap: entered promiscuous mode [ 203.811601][T11084] veth1_macvtap: entered promiscuous mode [ 203.831821][T11339] netlink: 'syz.2.1228': attribute type 29 has an invalid length. [ 203.866294][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 203.912390][T11344] netlink: 'syz.2.1228': attribute type 29 has an invalid length. [ 203.927016][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 203.976611][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.016381][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.061193][T11084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.096098][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.116862][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.128173][T11084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.140024][T11084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.157754][T11084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.177692][T11084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.196782][T11084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.306674][T11361] delete_channel: no stack [ 204.325888][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 204.345363][T11363] xfrm1: entered promiscuous mode [ 204.379808][T11363] xfrm1: entered allmulticast mode [ 204.388014][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 204.439370][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.450413][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.520508][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.557084][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.668629][T11380] nbd: must specify at least one socket [ 204.895077][ T4959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.500332][ T4959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.563960][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.574120][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.583305][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.596758][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.612528][ T4959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.616755][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.631906][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.659532][T11388] lo speed is unknown, defaulting to 1000 [ 205.681612][ T4959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.794450][ T4959] bridge_slave_1: left allmulticast mode [ 205.800274][ T4959] bridge_slave_1: left promiscuous mode [ 205.805992][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.815070][ T4959] bridge_slave_0: left allmulticast mode [ 205.821094][ T4959] bridge_slave_0: left promiscuous mode [ 205.826789][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.114037][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.124563][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.134316][ T4959] bond0 (unregistering): Released all slaves [ 206.152416][T11388] chnl_net:caif_netlink_parms(): no params data found [ 206.214487][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.229864][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.248940][T11388] bridge_slave_0: entered allmulticast mode [ 206.255655][T11388] bridge_slave_0: entered promiscuous mode [ 206.280863][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.291641][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.298956][T11388] bridge_slave_1: entered allmulticast mode [ 206.305527][T11388] bridge_slave_1: entered promiscuous mode [ 206.360715][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.373893][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.406754][ T4959] hsr_slave_0: left promiscuous mode [ 206.412536][ T4959] hsr_slave_1: left promiscuous mode [ 206.418651][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.426054][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.433702][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.441249][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.464104][ T4959] veth1_macvtap: left promiscuous mode [ 206.469778][ T4959] veth0_macvtap: left promiscuous mode [ 206.475396][ T4959] veth1_vlan: left promiscuous mode [ 206.480736][ T4959] veth0_vlan: left promiscuous mode [ 206.671907][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'. [ 206.923955][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.934339][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.946604][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.963614][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.971447][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.983525][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.114766][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 207.156585][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 207.573872][T11388] team0: Port device team_slave_0 added [ 207.616872][T11388] team0: Port device team_slave_1 added [ 207.666629][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.691729][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.703137][ T5841] Bluetooth: hci0: command tx timeout [ 207.762503][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.783519][T11409] lo speed is unknown, defaulting to 1000 [ 207.811461][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.818738][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.852926][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.993088][T11388] hsr_slave_0: entered promiscuous mode [ 207.997073][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 207.999902][T11388] hsr_slave_1: entered promiscuous mode [ 208.234174][T11409] chnl_net:caif_netlink_parms(): no params data found [ 208.342926][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 208.365004][ T4959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.446902][ T4959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.535344][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.547776][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.554978][T11409] bridge_slave_0: entered allmulticast mode [ 208.561998][ T46] IPVS: starting estimator thread 0... [ 208.565627][T11409] bridge_slave_0: entered promiscuous mode [ 208.603736][ T4959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.616107][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 208.633178][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.640534][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.648887][T11409] bridge_slave_1: entered allmulticast mode [ 208.655721][T11409] bridge_slave_1: entered promiscuous mode [ 208.657195][T11457] IPVS: using max 19 ests per chain, 45600 per kthread [ 208.751725][ T4959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.801687][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 208.831588][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.870688][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.912036][T11467] lo speed is unknown, defaulting to 1000 [ 209.031152][T11409] team0: Port device team_slave_0 added [ 209.064874][ T5841] Bluetooth: hci2: command tx timeout [ 209.131158][T11409] team0: Port device team_slave_1 added [ 209.238513][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.245491][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.272555][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.285827][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.293118][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.319594][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.421483][T11487] xt_ipcomp: unknown flags B [ 209.432770][ T4959] bridge_slave_1: left allmulticast mode [ 209.447607][ T4959] bridge_slave_1: left promiscuous mode [ 209.453327][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.468154][ T4959] bridge_slave_0: left allmulticast mode [ 209.477361][ T4959] bridge_slave_0: left promiscuous mode [ 209.483083][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.554911][T11467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1258'. [ 209.632808][T11477] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 209.777707][ T5841] Bluetooth: hci0: command tx timeout [ 209.907217][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.919040][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.930624][ T4959] bond0 (unregistering): Released all slaves [ 209.949525][T11409] hsr_slave_0: entered promiscuous mode [ 209.955930][T11409] hsr_slave_1: entered promiscuous mode [ 209.972408][T11409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.999313][T11409] Cannot create hsr debugfs directory [ 210.075041][T11388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.121818][T11388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.163459][T11388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.234905][T11388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.265585][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.379049][ T4959] hsr_slave_0: left promiscuous mode [ 210.394837][ T4959] hsr_slave_1: left promiscuous mode [ 210.401187][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.413786][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.436754][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.453496][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.490930][ T4959] veth1_macvtap: left promiscuous mode [ 210.496608][ T4959] veth0_macvtap: left promiscuous mode [ 210.502315][ T4959] veth1_vlan: left promiscuous mode [ 210.509391][ T4959] veth0_vlan: left promiscuous mode [ 210.993113][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 211.032913][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 211.141406][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 211.147208][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 211.464302][T11519] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.573173][T11535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1274'. [ 211.636739][T11535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1274'. [ 211.813690][T11388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.825056][T11543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1279'. [ 211.857305][ T5835] Bluetooth: hci0: command tx timeout [ 211.876067][T11543] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 211.948588][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.974432][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.981631][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.013009][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.020190][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.112282][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 212.129031][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 212.254036][T11409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.302071][T11409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.333864][T11409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.349594][T11409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.381963][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.472180][T11388] veth0_vlan: entered promiscuous mode [ 212.500492][T11388] veth1_vlan: entered promiscuous mode [ 212.538062][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.553838][T11388] veth0_macvtap: entered promiscuous mode [ 212.576630][T11388] veth1_macvtap: entered promiscuous mode [ 212.594196][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.622799][T11388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.639896][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.647064][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.682513][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.689717][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.732321][T11388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.764943][T11388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.793873][T11388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.813079][T11388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.833390][T11388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.970951][T11574] bridge0: port 1(dummy0) entered disabled state [ 213.183241][T11574] hsr_slave_1: left allmulticast mode [ 213.209999][T11574] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.231240][ T5835] Bluetooth: hci2: command 0x041b tx timeout [ 213.237611][T11574] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.246511][T11574] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.264041][T11597] netlink: 'syz.3.1292': attribute type 16 has an invalid length. [ 213.294727][T11597] netlink: 'syz.3.1292': attribute type 17 has an invalid length. [ 213.356806][T11574] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.366177][T11574] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.375086][T11574] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.415564][T11409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.427475][T11409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.790265][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.811036][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.920700][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.921546][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.937638][ T5835] Bluetooth: hci0: command tx timeout [ 213.957763][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.129497][T11409] veth0_vlan: entered promiscuous mode [ 214.156130][T11409] veth1_vlan: entered promiscuous mode [ 214.357685][T11409] veth0_macvtap: entered promiscuous mode [ 214.381840][T11643] __nla_validate_parse: 2 callbacks suppressed [ 214.381859][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 214.398090][T11409] veth1_macvtap: entered promiscuous mode [ 214.403342][T11645] SET target dimension over the limit! [ 214.413483][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.425911][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.439673][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.455137][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.475898][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.488320][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.505894][T11409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.515076][T11409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.528247][T11409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.537357][T11409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.666823][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.683862][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.712385][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 214.729698][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.730538][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 214.750052][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.803727][T11659] Unsupported ieee802154 address type: 0 [ 214.870235][T11659] Unsupported ieee802154 address type: 0 [ 214.896246][T11659] Unsupported ieee802154 address type: 0 [ 214.909441][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.934418][T11659] Unsupported ieee802154 address type: 0 [ 214.940807][T11659] Unsupported ieee802154 address type: 0 [ 214.963725][T11659] Unsupported ieee802154 address type: 0 [ 214.966743][T11661] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.969642][T11659] Unsupported ieee802154 address type: 0 [ 214.986288][T11659] Unsupported ieee802154 address type: 0 [ 215.002265][T11659] Unsupported ieee802154 address type: 0 [ 215.008526][T11659] Unsupported ieee802154 address type: 0 [ 215.020037][T11659] Unsupported ieee802154 address type: 0 [ 215.025786][T11659] Unsupported ieee802154 address type: 0 [ 215.032069][T11659] Unsupported ieee802154 address type: 0 [ 215.038830][T11659] Unsupported ieee802154 address type: 0 [ 215.044667][T11659] Unsupported ieee802154 address type: 0 [ 215.050791][T11659] Unsupported ieee802154 address type: 0 [ 215.060046][T11659] Unsupported ieee802154 address type: 0 [ 215.065787][T11659] Unsupported ieee802154 address type: 0 [ 215.084643][T11659] Unsupported ieee802154 address type: 0 [ 215.095698][T11659] Unsupported ieee802154 address type: 0 [ 215.144979][T11659] Unsupported ieee802154 address type: 0 [ 215.153206][T11659] Unsupported ieee802154 address type: 0 [ 215.160361][T11659] Unsupported ieee802154 address type: 0 [ 215.166052][T11659] Unsupported ieee802154 address type: 0 [ 215.171807][T11659] Unsupported ieee802154 address type: 0 [ 215.178796][T11659] Unsupported ieee802154 address type: 0 [ 215.184437][T11659] Unsupported ieee802154 address type: 0 [ 215.190141][T11659] Unsupported ieee802154 address type: 0 [ 215.195783][T11659] Unsupported ieee802154 address type: 0 [ 215.201594][T11659] Unsupported ieee802154 address type: 0 [ 215.207448][T11659] Unsupported ieee802154 address type: 0 [ 215.213086][T11659] Unsupported ieee802154 address type: 0 [ 215.219271][T11659] Unsupported ieee802154 address type: 0 [ 215.224916][T11659] Unsupported ieee802154 address type: 0 [ 215.230722][T11659] Unsupported ieee802154 address type: 0 [ 215.236368][T11659] Unsupported ieee802154 address type: 0 [ 215.242190][T11659] Unsupported ieee802154 address type: 0 [ 215.248008][T11659] Unsupported ieee802154 address type: 0 [ 215.253654][T11659] Unsupported ieee802154 address type: 0 [ 215.259911][T11659] Unsupported ieee802154 address type: 0 [ 215.265568][T11659] Unsupported ieee802154 address type: 0 [ 215.271323][T11659] Unsupported ieee802154 address type: 0 [ 215.277344][T11659] Unsupported ieee802154 address type: 0 [ 215.283000][T11659] Unsupported ieee802154 address type: 0 [ 215.288777][T11659] Unsupported ieee802154 address type: 0 [ 215.294508][T11659] Unsupported ieee802154 address type: 0 [ 215.300874][T11659] Unsupported ieee802154 address type: 0 [ 215.307820][T11659] Unsupported ieee802154 address type: 0 [ 215.313470][T11659] Unsupported ieee802154 address type: 0 [ 215.319382][T11659] Unsupported ieee802154 address type: 0 [ 215.325034][T11659] Unsupported ieee802154 address type: 0 [ 215.331156][T11659] Unsupported ieee802154 address type: 0 [ 215.336801][T11659] Unsupported ieee802154 address type: 0 [ 215.342662][T11659] Unsupported ieee802154 address type: 0 [ 215.348469][T11659] Unsupported ieee802154 address type: 0 [ 215.354111][T11659] Unsupported ieee802154 address type: 0 [ 215.360433][T11659] Unsupported ieee802154 address type: 0 [ 215.366079][T11659] Unsupported ieee802154 address type: 0 [ 215.371904][T11659] Unsupported ieee802154 address type: 0 [ 215.377915][T11659] Unsupported ieee802154 address type: 0 [ 215.383574][T11659] Unsupported ieee802154 address type: 0 [ 215.389602][T11659] Unsupported ieee802154 address type: 0 [ 215.395276][T11659] Unsupported ieee802154 address type: 0 [ 215.401608][T11659] Unsupported ieee802154 address type: 0 [ 215.407379][T11659] Unsupported ieee802154 address type: 0 [ 215.527322][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.598325][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.691004][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.796467][ T71] bridge_slave_1: left allmulticast mode [ 215.806635][ T71] bridge_slave_1: left promiscuous mode [ 215.814777][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.830946][ T71] bridge_slave_0: left allmulticast mode [ 215.836617][ T71] bridge_slave_0: left promiscuous mode [ 215.847521][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.006541][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.029446][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.047511][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.057315][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.066732][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.074928][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.202690][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.214430][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.225986][ T71] bond0 (unregistering): Released all slaves [ 216.252357][T11664] lo speed is unknown, defaulting to 1000 [ 216.420262][T11664] chnl_net:caif_netlink_parms(): no params data found [ 216.444561][ T71] hsr_slave_0: left promiscuous mode [ 216.450394][ T71] hsr_slave_1: left promiscuous mode [ 216.456001][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.463476][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.472457][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.480092][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.500436][ T71] veth1_macvtap: left promiscuous mode [ 216.505953][ T71] veth0_macvtap: left promiscuous mode [ 216.511642][ T71] veth1_vlan: left promiscuous mode [ 216.516878][ T71] veth0_vlan: left promiscuous mode [ 216.858780][ T71] team0 (unregistering): Port device team_slave_1 removed [ 216.895533][ T71] team0 (unregistering): Port device team_slave_0 removed [ 217.418218][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.439509][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.447551][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.455626][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.465985][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.474564][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.571844][T11678] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.698589][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 217.751987][T11687] lo speed is unknown, defaulting to 1000 [ 217.763565][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.771155][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.778928][T11664] bridge_slave_0: entered allmulticast mode [ 217.779521][T11691] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.786080][T11664] bridge_slave_0: entered promiscuous mode [ 217.805526][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.813028][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.820590][T11664] bridge_slave_1: entered allmulticast mode [ 217.827806][T11664] bridge_slave_1: entered promiscuous mode [ 217.885196][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.927526][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.064547][T11664] team0: Port device team_slave_0 added [ 218.084892][T11708] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 218.105891][ T5835] Bluetooth: hci0: command tx timeout [ 218.127463][T11664] team0: Port device team_slave_1 added [ 218.134848][T11713] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1321'. [ 218.134886][T11708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.221323][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.237749][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.294076][T11720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1323'. [ 218.307585][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.389742][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.407031][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.435795][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.553175][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.734691][T11747] netlink: 'syz.4.1331': attribute type 10 has an invalid length. [ 218.744502][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.770007][T11687] chnl_net:caif_netlink_parms(): no params data found [ 218.783547][T11664] hsr_slave_0: entered promiscuous mode [ 218.792004][T11664] hsr_slave_1: entered promiscuous mode [ 218.806077][T11751] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 218.826201][T11752] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 218.888903][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.923671][T11757] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 218.951793][T11751] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 219.023980][T11752] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 219.099081][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.229976][T11687] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.267059][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.274445][T11687] bridge_slave_0: entered allmulticast mode [ 219.302646][T11687] bridge_slave_0: entered promiscuous mode [ 219.357090][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.364515][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.388459][T11687] bridge_slave_1: entered allmulticast mode [ 219.395004][T11687] bridge_slave_1: entered promiscuous mode [ 219.483129][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.520037][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.538879][ T5835] Bluetooth: hci2: command tx timeout [ 219.576624][T11687] team0: Port device team_slave_0 added [ 219.617473][T11687] team0: Port device team_slave_1 added [ 219.669213][ T71] bridge_slave_1: left allmulticast mode [ 219.674972][ T71] bridge_slave_1: left promiscuous mode [ 219.681067][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.694608][ T71] bridge_slave_0: left allmulticast mode [ 219.700914][ T71] bridge_slave_0: left promiscuous mode [ 219.706683][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.150758][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.161411][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.171694][ T71] bond0 (unregistering): Released all slaves [ 220.177921][ T5835] Bluetooth: hci0: command tx timeout [ 220.192886][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.204325][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.230761][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.272710][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.287152][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.371019][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'. [ 220.380302][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.488232][T11814] bridge0: port 3(vlan1) entered blocking state [ 220.496318][T11814] bridge0: port 3(vlan1) entered disabled state [ 220.505447][T11814] vlan1: entered allmulticast mode [ 220.513908][T11814] vlan1: left allmulticast mode [ 220.650196][T11687] hsr_slave_0: entered promiscuous mode [ 220.664330][T11687] hsr_slave_1: entered promiscuous mode [ 220.679131][T11687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.694819][T11687] Cannot create hsr debugfs directory [ 220.758014][T11833] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 220.900308][ T71] hsr_slave_0: left promiscuous mode [ 220.910301][ T71] hsr_slave_1: left promiscuous mode [ 220.916241][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.932659][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.942834][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.955792][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.996816][ T71] veth1_macvtap: left promiscuous mode [ 221.004894][ T71] veth0_macvtap: left promiscuous mode [ 221.016211][ T71] veth1_vlan: left promiscuous mode [ 221.023198][ T71] veth0_vlan: left promiscuous mode [ 221.509424][T11855] ax25_connect(): syz.3.1357 uses autobind, please contact jreuter@yaina.de [ 221.530238][ T71] team0 (unregistering): Port device team_slave_1 removed [ 221.596262][ T71] team0 (unregistering): Port device team_slave_0 removed [ 221.617042][ T5837] Bluetooth: hci2: command tx timeout [ 221.951926][T11664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.966289][T11664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.111314][T11664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.121816][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 222.127198][T11664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.141551][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 222.151004][T11867] netlink: 'syz.2.1360': attribute type 15 has an invalid length. [ 222.260924][ T5837] Bluetooth: hci0: command tx timeout [ 222.436707][T11873] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1361'. [ 222.551572][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.570932][T11882] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 222.670859][T11664] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.758994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.766117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.848399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.855517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.975138][T11687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.010515][T11687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.047894][T11687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.072527][T11905] IPVS: Error connecting to the multicast addr [ 223.091281][T11687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.181242][T11912] lo speed is unknown, defaulting to 1000 [ 223.247453][T11914] lo speed is unknown, defaulting to 1000 [ 223.376790][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.415173][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 223.554530][T11687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.626531][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.673572][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.680745][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.698309][ T5837] Bluetooth: hci2: command tx timeout [ 223.719972][T11664] veth0_vlan: entered promiscuous mode [ 223.742594][T11939] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 223.758351][T11939] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 223.788015][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'. [ 223.795941][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.804057][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.813154][T11943] siw: device registration error -23 [ 223.826388][T11664] veth1_vlan: entered promiscuous mode [ 223.932179][T11664] veth0_macvtap: entered promiscuous mode [ 223.947882][T11947] netlink: 'syz.3.1381': attribute type 30 has an invalid length. [ 223.953851][T11664] veth1_macvtap: entered promiscuous mode [ 223.963412][T11946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1382'. [ 223.972055][T11687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.022983][T11664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.101505][T11949] gretap1: left promiscuous mode [ 224.114662][T11949] gretap1: left allmulticast mode [ 224.138089][T11949] bond3: left promiscuous mode [ 224.157507][T11949] bridge4: left promiscuous mode [ 224.165038][T11949] bridge4: left allmulticast mode [ 224.176407][T11949] xfrm1: left promiscuous mode [ 224.182748][T11949] xfrm1: left allmulticast mode [ 224.220713][T11664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.240247][T11664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.276661][T11664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.298621][T11664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.321942][T11664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.339313][ T5837] Bluetooth: hci0: command tx timeout [ 224.469462][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.609249][T11687] veth0_vlan: entered promiscuous mode [ 224.622550][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.640520][T11687] veth1_vlan: entered promiscuous mode [ 224.653314][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1391'. [ 224.677327][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.695369][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 224.714808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.747076][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.793884][T11687] veth0_macvtap: entered promiscuous mode [ 224.821332][T11687] veth1_macvtap: entered promiscuous mode [ 224.837552][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.849266][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.860355][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.909717][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.941454][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.975780][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.246791][T11687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.283514][T11687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.292471][T11687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.301722][T11687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.322793][T12007] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 225.494375][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 225.505329][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 225.513795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.543413][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.658787][T12027] openvswitch: netlink: Missing valid actions attribute. [ 225.696490][T12027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.738274][ T3015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.781590][ T5835] Bluetooth: hci2: command tx timeout [ 225.848498][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.887631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.975364][ T3015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.151845][ T3015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.334080][ T3015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.460278][ T3015] bridge_slave_1: left allmulticast mode [ 226.465932][ T3015] bridge_slave_1: left promiscuous mode [ 226.471888][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.480426][ T3015] bridge_slave_0: left allmulticast mode [ 226.486068][ T3015] bridge_slave_0: left promiscuous mode [ 226.492764][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.800941][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.813502][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.825009][ T3015] bond0 (unregistering): Released all slaves [ 226.961762][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 227.360226][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.373899][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.382638][ T3015] hsr_slave_0: left promiscuous mode [ 227.388645][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.397551][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.404624][ T3015] hsr_slave_1: left promiscuous mode [ 227.418182][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.418492][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.433518][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.441098][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'. [ 227.452776][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.471945][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.479565][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.504727][ T3015] veth1_macvtap: left promiscuous mode [ 227.510836][ T3015] veth0_macvtap: left promiscuous mode [ 227.516727][ T3015] veth1_vlan: left promiscuous mode [ 227.522633][ T3015] veth0_vlan: left promiscuous mode [ 227.673210][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 227.857177][ T5835] Bluetooth: hci2: command 0x0407 tx timeout [ 228.038547][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 228.084920][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 228.521196][T12080] geneve3: entered allmulticast mode [ 228.545813][T12061] lo speed is unknown, defaulting to 1000 [ 228.802427][T12061] chnl_net:caif_netlink_parms(): no params data found [ 229.034763][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.042870][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.052496][T12061] bridge_slave_0: entered allmulticast mode [ 229.062484][T12061] bridge_slave_0: entered promiscuous mode [ 229.075797][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.083787][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.091116][T12061] bridge_slave_1: entered allmulticast mode [ 229.099391][T12061] bridge_slave_1: entered promiscuous mode [ 229.140233][ T3015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.174928][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.191709][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.211634][ T3015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.244775][T12061] team0: Port device team_slave_0 added [ 229.252174][T12061] team0: Port device team_slave_1 added [ 229.272495][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.279927][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.306469][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.335394][ T3015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.348135][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.355121][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.381068][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.426021][ T3015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.443687][T12061] hsr_slave_0: entered promiscuous mode [ 229.449876][T12061] hsr_slave_1: entered promiscuous mode [ 229.540945][ T5837] Bluetooth: hci0: command tx timeout [ 229.572570][ T3015] bridge_slave_1: left allmulticast mode [ 229.578415][ T3015] bridge_slave_1: left promiscuous mode [ 229.584069][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.593212][ T3015] bridge_slave_0: left allmulticast mode [ 229.599707][ T3015] bridge_slave_0: left promiscuous mode [ 229.605450][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.913745][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.924347][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.933982][ T3015] bond0 (unregistering): Released all slaves [ 230.145375][T12061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.164366][T12061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.178712][T12061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.193296][ T3015] hsr_slave_0: left promiscuous mode [ 230.199809][ T3015] hsr_slave_1: left promiscuous mode [ 230.205438][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.213812][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.221791][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.229294][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.251057][ T3015] veth1_macvtap: left promiscuous mode [ 230.256544][ T3015] veth0_macvtap: left promiscuous mode [ 230.262221][ T3015] veth1_vlan: left promiscuous mode [ 230.267737][ T3015] veth0_vlan: left promiscuous mode [ 230.494021][T12108] delete_channel: no stack [ 230.569370][T12112] delete_channel: no stack [ 230.584918][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 230.607634][T12112] netlink: 'syz.3.1422': attribute type 2 has an invalid length. [ 230.681996][T12114] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 230.758977][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.768328][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.775945][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.784816][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.792495][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.800333][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.865560][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 230.904907][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 231.260755][T12061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.347881][T12115] lo speed is unknown, defaulting to 1000 [ 231.409694][T12118] netlink: 'syz.4.1424': attribute type 10 has an invalid length. [ 231.437247][T12118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1424'. [ 231.451285][T12118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.469316][T12118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.483873][T12118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.492847][T12118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.525634][T12118] geneve0: entered promiscuous mode [ 231.538203][T12118] geneve0: entered allmulticast mode [ 231.545023][T12118] team0: Port device geneve0 added [ 231.590631][T12061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.619557][ T5841] Bluetooth: hci0: command tx timeout [ 231.683783][T12061] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.746034][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.753180][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.812973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.820117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.839681][T12115] chnl_net:caif_netlink_parms(): no params data found [ 231.867216][T12137] openvswitch: netlink: Missing valid actions attribute. [ 231.874388][T12137] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.017486][T12149] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 232.025323][T12149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1431'. [ 232.080752][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.102904][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.118683][T12115] bridge_slave_0: entered allmulticast mode [ 232.126169][T12115] bridge_slave_0: entered promiscuous mode [ 232.146501][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.158563][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.165696][T12115] bridge_slave_1: entered allmulticast mode [ 232.174201][T12115] bridge_slave_1: entered promiscuous mode [ 232.204176][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 232.354325][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.397926][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.541993][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1437'. [ 232.551997][T12115] team0: Port device team_slave_0 added [ 232.566386][T12115] team0: Port device team_slave_1 added [ 232.575310][T12178] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 232.581930][T12182] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 232.708544][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.721120][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.748028][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.769168][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 232.778395][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.786309][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.848901][T12191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.850179][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.884367][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.897354][ T5835] Bluetooth: hci2: command tx timeout [ 232.953418][T12193] syz.4.1442: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.958163][T12115] hsr_slave_0: entered promiscuous mode [ 232.975171][T12115] hsr_slave_1: entered promiscuous mode [ 232.981719][T12115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.990083][T12115] Cannot create hsr debugfs directory [ 233.050483][T12193] CPU: 0 UID: 0 PID: 12193 Comm: syz.4.1442 Not tainted 6.14.0-rc4-syzkaller-00179-g1a82d19ca2d6 #0 [ 233.050508][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.050523][T12193] Call Trace: [ 233.050531][T12193] [ 233.050539][T12193] dump_stack_lvl+0x241/0x360 [ 233.050572][T12193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.050588][T12193] ? __pfx__printk+0x10/0x10 [ 233.050606][T12193] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 233.050626][T12193] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 233.050647][T12193] warn_alloc+0x278/0x410 [ 233.050665][T12193] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 233.050689][T12193] ? __pfx_warn_alloc+0x10/0x10 [ 233.050705][T12193] ? kasan_save_track+0x3f/0x80 [ 233.050720][T12193] ? __kasan_kmalloc+0x98/0xb0 [ 233.050737][T12193] ? xsk_setsockopt+0x4aa/0x810 [ 233.050751][T12193] ? do_sock_setsockopt+0x3af/0x720 [ 233.050772][T12193] ? __x64_sys_setsockopt+0x1ee/0x280 [ 233.050792][T12193] ? do_syscall_64+0xf3/0x230 [ 233.050810][T12193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.050839][T12193] __vmalloc_node_range_noprof+0x126/0x1380 [ 233.050888][T12193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.050916][T12193] ? __kasan_kmalloc+0x98/0xb0 [ 233.050938][T12193] vmalloc_user_noprof+0x74/0x80 [ 233.050954][T12193] ? xskq_create+0xb6/0x170 [ 233.050969][T12193] xskq_create+0xb6/0x170 [ 233.050987][T12193] xsk_init_queue+0xa1/0x100 [ 233.051006][T12193] xsk_setsockopt+0x4aa/0x810 [ 233.051025][T12193] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.051041][T12193] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.051065][T12193] ? aa_sock_opt_perm+0x79/0x120 [ 233.051092][T12193] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.051107][T12193] do_sock_setsockopt+0x3af/0x720 [ 233.051134][T12193] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 233.051161][T12193] ? __fget_files+0x395/0x410 [ 233.051181][T12193] ? __fget_files+0x2a/0x410 [ 233.051208][T12193] __x64_sys_setsockopt+0x1ee/0x280 [ 233.051236][T12193] do_syscall_64+0xf3/0x230 [ 233.051256][T12193] ? clear_bhb_loop+0x35/0x90 [ 233.051279][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.051299][T12193] RIP: 0033:0x7fe2cb18d169 [ 233.051321][T12193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.051336][T12193] RSP: 002b:00007fe2cbf25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.051354][T12193] RAX: ffffffffffffffda RBX: 00007fe2cb3a5fa0 RCX: 00007fe2cb18d169 [ 233.051366][T12193] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 233.051376][T12193] RBP: 00007fe2cb20e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 233.051386][T12193] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.051397][T12193] R13: 0000000000000000 R14: 00007fe2cb3a5fa0 R15: 00007ffee725d978 [ 233.051424][T12193] [ 233.051435][T12193] Mem-Info: [ 233.114665][T12061] veth0_vlan: entered promiscuous mode [ 233.133044][T12193] active_anon:3438 inactive_anon:0 isolated_anon:0 [ 233.133044][T12193] active_file:1306 inactive_file:38407 isolated_file:0 [ 233.133044][T12193] unevictable:768 dirty:124 writeback:0 [ 233.133044][T12193] slab_reclaimable:11741 slab_unreclaimable:99331 [ 233.133044][T12193] mapped:28262 shmem:1451 pagetables:608 [ 233.133044][T12193] sec_pagetables:0 bounce:0 [ 233.133044][T12193] kernel_misc_reclaimable:0 [ 233.133044][T12193] free:1338351 free_pcp:3438 free_cma:0 [ 233.394452][T12193] Node 0 active_anon:13752kB inactive_anon:0kB active_file:5224kB inactive_file:153556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112900kB dirty:492kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 233.435966][T12193] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 233.474875][T12193] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.477798][T12061] veth1_vlan: entered promiscuous mode [ 233.519579][T12193] lowmem_reserve[]: 0 2490 2490 0 0 [ 233.524883][T12193] Node 0 DMA32 free:1434344kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:13712kB inactive_anon:0kB active_file:5224kB inactive_file:153252kB unevictable:1536kB writepending:488kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:14168kB local_pcp:12776kB free_cma:0kB [ 233.564596][T12211] netlink: 'syz.3.1447': attribute type 2 has an invalid length. [ 233.578638][T12211] netlink: 'syz.3.1447': attribute type 13 has an invalid length. [ 233.594228][T12211] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.600630][T12211] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.617448][T12193] lowmem_reserve[]: 0 0 0 0 0 [ 233.622215][T12193] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 233.684235][T12193] lowmem_reserve[]: 0 0 0 0 0 [ 233.689581][T12193] Node 1 Normal free:3902004kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.718413][ T5835] Bluetooth: hci0: command 0x040f tx timeout [ 233.729014][T12193] lowmem_reserve[]: 0 0 0 0 0 [ 233.733788][T12193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.775928][T12193] Node 0 DMA32: 125*4kB (UM) 260*8kB (UME) 177*16kB (ME) 85*32kB (ME) 145*64kB (UME) 55*128kB (UME) 27*256kB (UME) 15*512kB (UME) 5*1024kB (UME) 3*2048kB (M) 341*4096kB (UM) = 1447044kB [ 233.781265][T12061] veth0_macvtap: entered promiscuous mode [ 233.803505][T12061] veth1_macvtap: entered promiscuous mode [ 233.815593][T12193] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 233.825172][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.840617][T12193] Node 1 Normal: 243*4kB (UME) 83*8kB (UME) 65*16kB (UME) 236*32kB (UME) 91*64kB (UME) 33*128kB (UME) 17*256kB (UME) 11*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 943*4096kB (M) = 3902004kB [ 233.859916][T12193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.870445][T12193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.892063][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.897100][T12193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.909863][T12061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.919021][T12193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.932529][T12061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.935728][T12193] 41164 total pagecache pages [ 233.947859][T12061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.956574][T12193] 0 pages in swap cache [ 233.956587][T12193] Free swap = 124996kB [ 233.956596][T12193] Total swap = 124996kB [ 233.957310][T12061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.960885][T12193] 2097051 pages RAM [ 233.981893][T12193] 0 pages HighMem/MovableOnly [ 233.986585][T12193] 427863 pages reserved [ 233.991091][T12193] 0 pages cma reserved [ 234.103738][T12220] netlink: 'syz.4.1451': attribute type 5 has an invalid length. [ 234.138020][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.162648][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.214822][ T4959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.229711][T12115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.242516][ T4959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.260739][T12115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.285222][T12115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.328447][T12115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.350948][T12231] xt_hashlimit: overflow, rate too high: 0 [ 234.553468][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.575431][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.584148][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 234.598771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.605879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.623971][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.631119][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.784962][T12247] xt_TCPMSS: Only works on TCP SYN packets [ 234.785146][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 234.802550][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 234.977332][ T5837] Bluetooth: hci2: command tx timeout [ 235.010863][T12266] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 235.040937][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.068575][T12269] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (4) [ 235.210207][T12277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1468'. [ 235.240139][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.309111][T12115] veth0_vlan: entered promiscuous mode [ 235.329437][T12115] veth1_vlan: entered promiscuous mode [ 235.389288][T12115] veth0_macvtap: entered promiscuous mode [ 235.406725][T12115] veth1_macvtap: entered promiscuous mode [ 235.421681][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.432693][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.444804][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.460068][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.470928][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.481601][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.497354][T12115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.506039][T12115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.514991][T12115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.524371][T12115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.548717][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.609000][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.622733][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.642388][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.650745][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.772218][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.875010][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.012262][ T52] bridge_slave_1: left allmulticast mode [ 236.018302][ T52] bridge_slave_1: left promiscuous mode [ 236.023953][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.032734][ T52] bridge_slave_0: left allmulticast mode [ 236.039327][ T52] bridge_slave_0: left promiscuous mode [ 236.045319][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.328563][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.339860][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.349548][ T52] bond0 (unregistering): Released all slaves [ 236.507470][T12287] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 236.541375][T12288] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 236.563601][T12287] sctp: [Deprecated]: syz.4.1471 (pid 12287) Use of int in max_burst socket option deprecated. [ 236.563601][T12287] Use struct sctp_assoc_value instead [ 236.629106][T12288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.644573][T12291] bond0: (slave gretap2): making interface the new active one [ 236.656079][T12291] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 236.664988][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 236.751998][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 236.998640][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.014434][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.022375][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.038845][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.055132][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.064616][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.085346][ T52] hsr_slave_0: left promiscuous mode [ 237.091537][ T52] hsr_slave_1: left promiscuous mode [ 237.098363][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.105795][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.113915][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.121551][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.149149][ T52] veth1_macvtap: left promiscuous mode [ 237.154773][ T52] veth0_macvtap: left promiscuous mode [ 237.160553][ T52] veth1_vlan: left promiscuous mode [ 237.165924][ T52] veth0_vlan: left promiscuous mode [ 237.528887][ T52] team0 (unregistering): Port device team_slave_1 removed [ 237.567374][ T52] team0 (unregistering): Port device team_slave_0 removed [ 237.923428][T12307] lo speed is unknown, defaulting to 1000 [ 238.074953][T12307] chnl_net:caif_netlink_parms(): no params data found [ 238.124249][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.131687][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.138897][T12307] bridge_slave_0: entered allmulticast mode [ 238.145402][T12307] bridge_slave_0: entered promiscuous mode [ 238.153344][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.160529][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.168341][T12307] bridge_slave_1: entered allmulticast mode [ 238.176188][T12307] bridge_slave_1: entered promiscuous mode [ 238.203565][T12307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.214993][T12307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.244374][T12307] team0: Port device team_slave_0 added [ 238.252427][T12307] team0: Port device team_slave_1 added [ 238.277658][T12307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.284608][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.311674][T12307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.324284][T12307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.333551][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.359804][T12307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.390944][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.423905][T12307] hsr_slave_0: entered promiscuous mode [ 238.430472][T12307] hsr_slave_1: entered promiscuous mode [ 238.468719][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.550720][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.632810][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.812325][ T52] bridge_slave_1: left allmulticast mode [ 238.821072][ T52] bridge_slave_1: left promiscuous mode [ 238.839753][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.888379][ T52] bridge_slave_0: left allmulticast mode [ 238.894066][ T52] bridge_slave_0: left promiscuous mode [ 238.901805][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.147624][ T5841] Bluetooth: hci0: command tx timeout [ 239.156126][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.168782][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.178325][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.192226][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.202559][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.210168][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.396012][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.407932][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.419260][ T52] bond0 (unregistering): Released all slaves [ 239.435535][T12322] tipc: Started in network mode [ 239.441668][T12322] tipc: Node identity a2de5fac535c, cluster identity 4711 [ 239.449209][T12322] tipc: Enabled bearer , priority 0 [ 239.535438][T12330] +: renamed from syzkaller0 [ 239.544613][T12330] tipc: Disabling bearer [ 239.676396][T12335] lo speed is unknown, defaulting to 1000 [ 239.808360][T12353] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1484'. [ 239.832977][T12353] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1484'. [ 239.944749][ T52] hsr_slave_0: left promiscuous mode [ 239.953383][ T52] hsr_slave_1: left promiscuous mode [ 239.969786][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.983276][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.991644][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.005196][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.024110][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1490'. [ 240.036415][ T52] veth1_macvtap: left promiscuous mode [ 240.042309][ T52] veth0_macvtap: left promiscuous mode [ 240.048020][ T52] veth1_vlan: left promiscuous mode [ 240.053272][ T52] veth0_vlan: left promiscuous mode [ 240.434807][ T52] team0 (unregistering): Port device team_slave_1 removed [ 240.473292][ T52] team0 (unregistering): Port device team_slave_0 removed [ 240.826235][T12307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.843713][T12307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.877642][T12307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.959769][T12372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.997541][T12307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.227058][ T5835] Bluetooth: hci0: command tx timeout [ 241.298207][ T5835] Bluetooth: hci2: command tx timeout [ 242.776354][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 242.785484][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 242.914763][T12335] chnl_net:caif_netlink_parms(): no params data found [ 242.979509][ T5883] IPVS: starting estimator thread 0... [ 243.003853][T12307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.077292][T12401] IPVS: using max 19 ests per chain, 45600 per kthread [ 243.078794][T12307] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.182414][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.189604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.249433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.256551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.257728][T12416] netlink: 'syz.2.1505': attribute type 39 has an invalid length. [ 243.284379][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.292007][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.299849][ T5835] Bluetooth: hci0: command tx timeout [ 243.306615][T12335] bridge_slave_0: entered allmulticast mode [ 243.315011][T12335] bridge_slave_0: entered promiscuous mode [ 243.377964][ T5835] Bluetooth: hci2: command tx timeout [ 243.410646][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.424563][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.436334][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 243.446995][T12335] bridge_slave_1: entered allmulticast mode [ 243.454669][T12335] bridge_slave_1: entered promiscuous mode [ 243.526404][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 243.535629][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 243.549044][T12335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.559085][T12430] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 243.566829][T12430] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1510'. [ 243.576033][T12430] block nbd0: Unsupported socket: shutdown callout must be supported. [ 243.611253][T12335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.634529][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 243.728758][T12335] team0: Port device team_slave_0 added [ 243.745457][T12335] team0: Port device team_slave_1 added [ 243.814703][T12335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.832975][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.938433][T12335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.973233][T12335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.987178][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.014599][T12335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.211195][T12335] hsr_slave_0: entered promiscuous mode [ 244.226730][T12335] hsr_slave_1: entered promiscuous mode [ 244.240260][T12335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.252319][T12335] Cannot create hsr debugfs directory [ 244.436114][T12480] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1522'. [ 244.641528][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 244.694805][T12307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.707496][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'. [ 244.792806][T12307] veth0_vlan: entered promiscuous mode [ 244.850714][T12307] veth1_vlan: entered promiscuous mode [ 244.929102][T12307] veth0_macvtap: entered promiscuous mode [ 244.951401][T12307] veth1_macvtap: entered promiscuous mode [ 244.989917][T12307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.024684][T12307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.129264][T12307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.140412][T12307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.149376][T12307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.158459][T12307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.376431][T12522] syzkaller1: entered promiscuous mode [ 245.384488][ T5835] Bluetooth: hci0: command tx timeout [ 245.406278][T12522] syzkaller1: entered allmulticast mode [ 245.413020][T12335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.457195][ T5835] Bluetooth: hci2: command tx timeout [ 245.499257][T12335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.522231][T12335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.545945][T12335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.563434][T12528] xt_recent: Unsupported userspace flags (00000042) [ 245.577860][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.585692][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.669181][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.690266][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.824382][T12335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.854757][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.879290][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.886395][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.921389][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.928531][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.281484][ T4959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.375953][ T4959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.425421][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.448404][ T4959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.482078][T12335] veth0_vlan: entered promiscuous mode [ 246.491609][T12335] veth1_vlan: entered promiscuous mode [ 246.515638][T12335] veth0_macvtap: entered promiscuous mode [ 246.524516][T12335] veth1_macvtap: entered promiscuous mode [ 246.536273][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.546882][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.562002][T12335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.588843][ T4959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.605434][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.617156][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.628223][T12335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.644489][T12335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.654543][T12335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.663820][T12335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.672972][T12335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.753617][ T4959] bridge_slave_1: left allmulticast mode [ 246.759505][ T4959] bridge_slave_1: left promiscuous mode [ 246.765138][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.773708][ T4959] bridge_slave_0: left allmulticast mode [ 246.779657][ T4959] bridge_slave_0: left promiscuous mode [ 246.785279][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.073427][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.084202][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.093901][ T4959] bond0 (unregistering): Released all slaves [ 247.111095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.127781][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.156407][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.170876][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.382313][ T4959] hsr_slave_0: left promiscuous mode [ 247.388279][ T4959] hsr_slave_1: left promiscuous mode [ 247.393899][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.401478][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.410314][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.418334][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.436454][ T4959] veth1_macvtap: left promiscuous mode [ 247.442244][ T4959] veth0_macvtap: left promiscuous mode [ 247.447873][ T4959] veth1_vlan: left promiscuous mode [ 247.453111][ T4959] veth0_vlan: left promiscuous mode [ 247.904452][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.916117][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.931636][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.956302][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.981960][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.993113][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.178291][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 248.235941][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 248.770401][T12587] lo speed is unknown, defaulting to 1000 [ 248.896416][T12587] chnl_net:caif_netlink_parms(): no params data found [ 248.953089][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.960513][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.968302][T12587] bridge_slave_0: entered allmulticast mode [ 248.974809][T12587] bridge_slave_0: entered promiscuous mode [ 248.982275][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.989642][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.996774][T12587] bridge_slave_1: entered allmulticast mode [ 249.003664][T12587] bridge_slave_1: entered promiscuous mode [ 249.024797][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.038107][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.085113][ T4959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.105269][T12587] team0: Port device team_slave_0 added [ 249.113002][T12587] team0: Port device team_slave_1 added [ 249.132866][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.140451][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.167472][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.179394][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.186345][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.212811][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.243527][T12587] hsr_slave_0: entered promiscuous mode [ 249.249900][T12587] hsr_slave_1: entered promiscuous mode [ 249.531333][T12587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.541448][T12587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.556323][T12587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.565667][T12587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.585191][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.592412][T12587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.599824][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.606950][T12587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.629532][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.638868][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.677782][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.694539][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.706597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.713774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.726664][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.733770][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.004304][T12587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.017531][ T5837] Bluetooth: hci0: command tx timeout [ 250.093427][T12587] veth0_vlan: entered promiscuous mode [ 250.110562][T12587] veth1_vlan: entered promiscuous mode [ 250.199301][ T4959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.276352][T12587] veth0_macvtap: entered promiscuous mode [ 250.310216][T12587] veth1_macvtap: entered promiscuous mode [ 250.333949][T12587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.351848][T12587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.415191][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.422009][T12587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.430382][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.434665][T12587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.448321][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.459667][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.469420][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 250.476684][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.481877][T12587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.513076][T12587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.539052][ T4959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.554205][T12622] __nla_validate_parse: 6 callbacks suppressed [ 250.554221][T12622] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1561'. [ 250.574396][T12623] lo speed is unknown, defaulting to 1000 [ 250.599423][T12587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.616963][T12587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.625662][T12587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.642167][T12587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.705355][ T4959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.795906][T12624] lo speed is unknown, defaulting to 1000 [ 250.955449][ T4959] bridge_slave_1: left allmulticast mode [ 250.961638][ T4959] bridge_slave_1: left promiscuous mode [ 250.968430][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.978062][ T4959] bridge_slave_0: left allmulticast mode [ 250.983838][ T4959] bridge_slave_0: left promiscuous mode [ 250.989933][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.333928][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.344654][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.354900][ T4959] bond0 (unregistering): Released all slaves [ 251.366268][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.381092][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.566074][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.608386][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.631259][T12624] chnl_net:caif_netlink_parms(): no params data found [ 251.848348][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 251.970155][T12680] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1578'. [ 252.020812][ T4959] hsr_slave_0: left promiscuous mode [ 252.029289][ T4959] hsr_slave_1: left promiscuous mode [ 252.035479][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.043135][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.051237][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.058765][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.079377][ T4959] veth1_macvtap: left promiscuous mode [ 252.084874][ T4959] veth0_macvtap: left promiscuous mode [ 252.090930][ T4959] veth1_vlan: left promiscuous mode [ 252.096474][ T4959] veth0_vlan: left promiscuous mode [ 252.101664][T12687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.106739][T12687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.492910][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 252.532606][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 252.581405][ T5835] Bluetooth: hci2: command tx timeout [ 253.107420][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.114543][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.127506][T12624] bridge_slave_0: entered allmulticast mode [ 253.143327][T12624] bridge_slave_0: entered promiscuous mode [ 253.154799][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.167173][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.175291][T12624] bridge_slave_1: entered allmulticast mode [ 253.182701][T12624] bridge_slave_1: entered promiscuous mode [ 253.257664][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.319421][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.363816][T12624] team0: Port device team_slave_0 added [ 253.375150][T12624] team0: Port device team_slave_1 added [ 253.402076][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.409225][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.435546][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.475075][ T4959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.490722][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.498175][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.524788][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.554911][T12624] hsr_slave_0: entered promiscuous mode [ 253.561344][T12624] hsr_slave_1: entered promiscuous mode [ 253.567527][T12624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.575083][T12624] Cannot create hsr debugfs directory [ 253.828728][T12624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.838083][T12624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.846605][T12624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.864609][T12624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.888221][ T4959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.911927][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.919055][T12624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.926356][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.933470][T12624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.982421][ T4959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.021346][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.033277][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.056171][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.078186][ T4959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.100866][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.113754][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.120877][ T7015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.133363][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.140512][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.217525][ T4959] bridge_slave_1: left allmulticast mode [ 254.223212][ T4959] bridge_slave_1: left promiscuous mode [ 254.229804][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.242740][ T4959] bridge_slave_0: left allmulticast mode [ 254.248920][ T4959] bridge_slave_0: left promiscuous mode [ 254.254699][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.556549][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.570637][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.582099][ T4959] bond0 (unregistering): Released all slaves [ 254.635410][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.667081][ T5835] Bluetooth: hci2: command tx timeout [ 254.718614][T12624] veth0_vlan: entered promiscuous mode [ 254.739474][T12624] veth1_vlan: entered promiscuous mode [ 254.930145][T12624] veth0_macvtap: entered promiscuous mode [ 255.097907][T12727] netlink: 'syz.4.1591': attribute type 30 has an invalid length. [ 255.143671][T12624] veth1_macvtap: entered promiscuous mode [ 255.183714][T12729] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.235613][T12729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1592'. [ 255.258814][ T4959] hsr_slave_0: left promiscuous mode [ 255.283004][ T4959] hsr_slave_1: left promiscuous mode [ 255.299317][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.301427][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.316265][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.327413][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.339462][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.348164][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.355505][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.355564][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.371265][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.388316][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.423880][ T4959] veth1_macvtap: left promiscuous mode [ 255.429987][ T4959] veth0_macvtap: left promiscuous mode [ 255.435544][ T4959] veth1_vlan: left promiscuous mode [ 255.441053][ T4959] veth0_vlan: left promiscuous mode [ 255.804789][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 255.842880][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 256.103664][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.242604][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.265390][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.295579][T12736] lo speed is unknown, defaulting to 1000 [ 256.336151][T12624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.355046][T12624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.377030][T12624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.385955][T12624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416035][T12748] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.425104][T12748] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.433911][T12748] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.450687][T12748] vxlan2: entered promiscuous mode [ 256.456003][T12748] vxlan2: entered allmulticast mode [ 256.470692][T12748] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.479751][T12748] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.488832][T12748] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.685535][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.707144][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.736664][T12759] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 256.746663][T12759] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1601'. [ 256.755993][ T5835] Bluetooth: hci2: command tx timeout [ 256.762641][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 256.783840][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.793652][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1601'. [ 256.819022][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 256.828801][T12763] hsr_slave_0: left promiscuous mode [ 256.834750][T12763] hsr_slave_1: left promiscuous mode [ 256.840727][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.998082][T12736] chnl_net:caif_netlink_parms(): no params data found [ 257.097607][T12736] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.104818][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.115261][T12736] bridge_slave_0: entered allmulticast mode [ 257.122057][T12736] bridge_slave_0: entered promiscuous mode [ 257.133803][T12736] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.142883][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.161434][T12736] bridge_slave_1: entered allmulticast mode [ 257.170205][T12736] bridge_slave_1: entered promiscuous mode [ 257.230583][T12736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.279517][T12736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.315803][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 257.385882][T12736] team0: Port device team_slave_0 added [ 257.414863][T12736] team0: Port device team_slave_1 added [ 257.457793][ T5837] Bluetooth: hci0: command tx timeout [ 257.509425][T12736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.516389][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.543872][T12736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.604024][T12736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.611893][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.638573][T12736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.745758][T12736] hsr_slave_0: entered promiscuous mode [ 257.752086][T12736] hsr_slave_1: entered promiscuous mode [ 257.758866][T12813] netlink: 'syz.2.1613': attribute type 7 has an invalid length. [ 257.946237][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.152141][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.215488][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.285429][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.300684][T12736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.310461][T12736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.321476][T12736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.330694][T12736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.396412][T12736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.414133][T12736] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.424773][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.431903][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.446157][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.453300][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.522845][ T71] bridge_slave_1: left allmulticast mode [ 258.528840][ T71] bridge_slave_1: left promiscuous mode [ 258.534541][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.549511][ T71] bridge_slave_0: left allmulticast mode [ 258.555175][ T71] bridge_slave_0: left promiscuous mode [ 258.566534][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.861923][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.872500][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.882522][ T71] bond0 (unregistering): Released all slaves [ 258.953296][T12736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.995115][T12736] veth0_vlan: entered promiscuous mode [ 259.023748][T12736] veth1_vlan: entered promiscuous mode [ 259.046520][T12736] veth0_macvtap: entered promiscuous mode [ 259.055759][T12736] veth1_macvtap: entered promiscuous mode [ 259.098656][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.111272][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.122235][T12736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.149239][ T71] hsr_slave_0: left promiscuous mode [ 259.155044][ T71] hsr_slave_1: left promiscuous mode [ 259.160744][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.171060][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.178621][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.186003][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.204144][ T71] veth1_macvtap: left promiscuous mode [ 259.209860][ T71] veth0_macvtap: left promiscuous mode [ 259.216290][ T71] veth1_vlan: left promiscuous mode [ 259.221815][ T71] veth0_vlan: left promiscuous mode [ 259.537182][ T5837] Bluetooth: hci0: command tx timeout [ 259.554784][ T71] team0 (unregistering): Port device team_slave_1 removed [ 259.593553][ T71] team0 (unregistering): Port device team_slave_0 removed [ 259.897584][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 259.911023][T12836] netlink: 'syz.3.1617': attribute type 15 has an invalid length. [ 259.965133][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 260.143837][T12736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.151758][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.162390][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.177495][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.198052][T12833] macvlan1: entered promiscuous mode [ 260.203775][T12833] macvlan1: entered allmulticast mode [ 260.210609][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.237261][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.248091][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.278715][T12736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.303854][T12736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.329280][T12736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.329345][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1619'. [ 260.359437][T12736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.429553][T12840] lo speed is unknown, defaulting to 1000 [ 260.674830][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1622'. [ 260.695763][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 260.756625][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.797264][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.806006][T12866] SET target dimension over the limit! [ 260.816351][T12840] chnl_net:caif_netlink_parms(): no params data found [ 260.936511][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.948918][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.961512][T12871] Bluetooth: MGMT ver 1.23 [ 261.010912][T12840] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.027223][T12840] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.047421][T12840] bridge_slave_0: entered allmulticast mode [ 261.054406][T12840] bridge_slave_0: entered promiscuous mode [ 261.079220][T12879] netlink: 'syz.4.1628': attribute type 11 has an invalid length. [ 261.101116][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.111362][T12840] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.134283][T12840] bridge_slave_1: entered allmulticast mode [ 261.141883][T12840] bridge_slave_1: entered promiscuous mode [ 261.198278][T12840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.210175][T12840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.256357][T12886] \«¾´[: renamed from veth1_to_bond [ 261.320157][T12840] team0: Port device team_slave_0 added [ 261.340543][T12840] team0: Port device team_slave_1 added [ 261.424748][T12840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.446983][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.513302][T12840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.536156][T12840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.548680][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.575217][T12840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.617111][ T5837] Bluetooth: hci0: command tx timeout [ 261.692131][T12869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.737948][T12840] hsr_slave_0: entered promiscuous mode [ 261.744312][T12840] hsr_slave_1: entered promiscuous mode [ 261.780331][T12840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.793571][T12840] Cannot create hsr debugfs directory [ 262.285011][T12925] team0: left allmulticast mode [ 262.291007][T12925] team_slave_0: left allmulticast mode [ 262.296490][T12925] team_slave_1: left allmulticast mode [ 262.302190][T12925] geneve0: left allmulticast mode [ 262.308948][T12925] team0: left promiscuous mode [ 262.314018][T12925] team_slave_0: left promiscuous mode [ 262.325429][T12925] team_slave_1: left promiscuous mode [ 262.334054][T12925] geneve0: left promiscuous mode [ 262.345207][T12925] bridge0: port 3(team0) entered disabled state [ 262.351853][ T5837] Bluetooth: hci2: command tx timeout [ 262.365358][T12925] bridge_slave_0: left allmulticast mode [ 262.378620][T12925] bridge_slave_0: left promiscuous mode [ 262.384352][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.394310][T12930] __nla_validate_parse: 5 callbacks suppressed [ 262.394324][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1642'. [ 262.413028][T12925] bridge_slave_1: left allmulticast mode [ 262.423785][T12925] bridge_slave_1: left promiscuous mode [ 262.432546][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.443633][T12933] openvswitch: netlink: IP tunnel dst address not specified [ 262.461403][T12925] bond0: (slave bond_slave_0): Releasing backup interface [ 262.473272][T12925] bond0: (slave bond_slave_1): Releasing backup interface [ 262.523711][T12925] team0: Port device team_slave_0 removed [ 262.546535][T12925] team0: Port device team_slave_1 removed [ 262.552822][T12925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.579720][T12925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.602518][T12925] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.647115][T12925] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.673477][T12925] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.702887][T12925] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.752645][T12925] team0: Port device geneve0 removed [ 262.760861][T12925] bond0: (slave wlan1): Releasing backup interface [ 262.774091][T12925] bond2: (slave vti0): Releasing backup interface [ 262.851893][ T7015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.876869][T12935] lo speed is unknown, defaulting to 1000 [ 262.961688][ T7015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.989779][T12840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.998835][T12840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.011909][T12840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.031833][ T7015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.043959][T12840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.109063][ T7015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.142997][T12840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.160162][T12840] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.175060][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.182165][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.195526][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.202652][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.338964][ T7015] bridge_slave_1: left allmulticast mode [ 263.344647][ T7015] bridge_slave_1: left promiscuous mode [ 263.362670][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.386565][ T7015] bridge_slave_0: left allmulticast mode [ 263.404001][ T7015] bridge_slave_0: left promiscuous mode [ 263.410426][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.672189][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.683014][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.692933][ T7015] bond0 (unregistering): Released all slaves [ 263.718751][T12840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.761822][T12840] veth0_vlan: entered promiscuous mode [ 263.777448][T12840] veth1_vlan: entered promiscuous mode [ 263.815136][T12840] veth0_macvtap: entered promiscuous mode [ 263.824018][T12840] veth1_macvtap: entered promiscuous mode [ 263.836065][T12840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.848144][T12840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.859949][T12840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.879403][T12840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.890393][T12840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.900859][T12840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.932241][T12840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.942589][T12840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.951480][T12840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.960213][T12840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.015305][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.029803][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.112888][ T7015] hsr_slave_0: left promiscuous mode [ 264.122894][ T7015] hsr_slave_1: left promiscuous mode [ 264.137801][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.145220][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.214967][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.220578][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 264.232019][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.279484][ T7015] veth1_macvtap: left promiscuous mode [ 264.287132][ T7015] veth0_macvtap: left promiscuous mode [ 264.292749][ T7015] veth1_vlan: left promiscuous mode [ 264.317027][ T7015] veth0_vlan: left promiscuous mode [ 264.417613][ T5837] Bluetooth: hci2: command tx timeout [ 264.504102][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.523648][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.548564][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.556451][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.564757][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.572257][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.827293][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 264.864538][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 265.229596][T12964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.250330][T12964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.267395][T12964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.276241][T12964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.299442][T12964] geneve2: entered promiscuous mode [ 265.306431][T12964] geneve2: entered allmulticast mode [ 265.315570][T12964] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.326072][T12964] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.335242][T12964] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.347467][T12964] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.395126][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.402955][T12966] lo speed is unknown, defaulting to 1000 [ 265.446373][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.706239][T12980] C: renamed from lo [ 265.732738][T12980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.779517][T12990] unsupported nla_type 174 [ 265.854202][T12966] chnl_net:caif_netlink_parms(): no params data found [ 265.913617][T12993] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1660'. [ 265.922849][T12993] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1660'. [ 266.117328][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.124638][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.134847][T12966] bridge_slave_0: entered allmulticast mode [ 266.145867][T12966] bridge_slave_0: entered promiscuous mode [ 266.157691][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.165014][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.172571][T12966] bridge_slave_1: entered allmulticast mode [ 266.181049][T12966] bridge_slave_1: entered promiscuous mode [ 266.209083][T13006] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 266.222764][T13006] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1662'. [ 266.232261][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 266.271670][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.293477][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.341621][ T5845] ================================================================== [ 266.349708][ T5845] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 266.357087][ T5845] Write of size 8 at addr ffff88805df265a0 by task syz-executor/5845 [ 266.365153][ T5845] [ 266.367482][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00179-g1a82d19ca2d6 #0 [ 266.367504][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.367515][ T5845] Call Trace: [ 266.367522][ T5845] [ 266.367529][ T5845] dump_stack_lvl+0x241/0x360 [ 266.367550][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.367566][ T5845] ? __pfx__printk+0x10/0x10 [ 266.367582][ T5845] ? _printk+0xd5/0x120 [ 266.367596][ T5845] ? __virt_addr_valid+0x183/0x530 [ 266.367612][ T5845] ? __virt_addr_valid+0x183/0x530 [ 266.367627][ T5845] print_report+0x16e/0x5b0 [ 266.367647][ T5845] ? __virt_addr_valid+0x183/0x530 [ 266.367660][ T5845] ? __virt_addr_valid+0x183/0x530 [ 266.367674][ T5845] ? __virt_addr_valid+0x45f/0x530 [ 266.367688][ T5845] ? __phys_addr+0xba/0x170 [ 266.367709][ T5845] ? sco_conn_put+0xad/0x210 [ 266.367727][ T5845] kasan_report+0x143/0x180 [ 266.367746][ T5845] ? sco_conn_put+0xad/0x210 [ 266.367766][ T5845] sco_conn_put+0xad/0x210 [ 266.367782][ T5845] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 266.367799][ T5845] hci_conn_hash_flush+0x1be/0x350 [ 266.367824][ T5845] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 266.367845][ T5845] ? drain_workqueue+0x2d3/0x3a0 [ 266.367867][ T5845] ? hci_discovery_set_state+0x57/0x180 [ 266.367888][ T5845] hci_dev_close_sync+0xa8b/0x1260 [ 266.367911][ T5845] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 266.367929][ T5845] ? rcu_is_watching+0x15/0xb0 [ 266.367949][ T5845] hci_unregister_dev+0x20b/0x510 [ 266.367967][ T5845] vhci_release+0x80/0xd0 [ 266.367986][ T5845] ? __pfx_vhci_release+0x10/0x10 [ 266.368005][ T5845] __fput+0x3e9/0x9f0 [ 266.368030][ T5845] task_work_run+0x24f/0x310 [ 266.368049][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 266.368064][ T5845] ? do_exit+0xa25/0x28e0 [ 266.368085][ T5845] ? do_exit+0xa25/0x28e0 [ 266.368107][ T5845] do_exit+0xa2a/0x28e0 [ 266.368130][ T5845] ? __pfx_do_exit+0x10/0x10 [ 266.368149][ T5845] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.368172][ T5845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.368197][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.368215][ T5845] ? lockdep_hardirqs_on+0x99/0x150 [ 266.368235][ T5845] do_group_exit+0x207/0x2c0 [ 266.368258][ T5845] __x64_sys_exit_group+0x3f/0x40 [ 266.368279][ T5845] x64_sys_call+0x26a8/0x26b0 [ 266.368296][ T5845] do_syscall_64+0xf3/0x230 [ 266.368317][ T5845] ? clear_bhb_loop+0x35/0x90 [ 266.368339][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.368359][ T5845] RIP: 0033:0x7fe2cb18d169 [ 266.368372][ T5845] Code: Unable to access opcode bytes at 0x7fe2cb18d13f. [ 266.368387][ T5845] RSP: 002b:00007ffee725d4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 266.368405][ T5845] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe2cb18d169 [ 266.368417][ T5845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 266.368427][ T5845] RBP: 00007fe2cb1eaad8 R08: 00007ffee725b297 R09: 00000000000927c0 [ 266.368438][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.368449][ T5845] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffee725dd90 [ 266.368467][ T5845] [ 266.368473][ T5845] [ 266.669743][ T5845] Allocated by task 12736: [ 266.674140][ T5845] kasan_save_track+0x3f/0x80 [ 266.678812][ T5845] __kasan_kmalloc+0x98/0xb0 [ 266.683388][ T5845] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 266.689790][ T5845] kmalloc_reserve+0x111/0x2a0 [ 266.694539][ T5845] pskb_expand_head+0x1ee/0x1440 [ 266.699459][ T5845] netlink_trim+0x1d6/0x2e0 [ 266.703950][ T5845] netlink_broadcast_filtered+0x76/0x12a0 [ 266.709656][ T5845] nlmsg_notify+0xfb/0x1c0 [ 266.714052][ T5845] register_netdevice+0x17aa/0x1b60 [ 266.719243][ T5845] register_netdev+0x40/0x50 [ 266.723815][ T5845] loopback_net_init+0x73/0x150 [ 266.728650][ T5845] ops_init+0x349/0x5b0 [ 266.732794][ T5845] setup_net+0x287/0x9e0 [ 266.737027][ T5845] copy_net_ns+0x33f/0x570 [ 266.741435][ T5845] create_new_namespaces+0x425/0x7b0 [ 266.746705][ T5845] unshare_nsproxy_namespaces+0x124/0x180 [ 266.752410][ T5845] ksys_unshare+0x57d/0xa70 [ 266.756902][ T5845] __x64_sys_unshare+0x38/0x40 [ 266.761659][ T5845] do_syscall_64+0xf3/0x230 [ 266.766147][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.772029][ T5845] [ 266.774333][ T5845] Freed by task 12736: [ 266.778386][ T5845] kasan_save_track+0x3f/0x80 [ 266.783046][ T5845] kasan_save_free_info+0x40/0x50 [ 266.788057][ T5845] __kasan_slab_free+0x59/0x70 [ 266.792807][ T5845] kfree+0x196/0x430 [ 266.796685][ T5845] skb_release_data+0x6a0/0x8a0 [ 266.801522][ T5845] consume_skb+0x9f/0xf0 [ 266.805749][ T5845] netlink_broadcast_filtered+0x116d/0x12a0 [ 266.811630][ T5845] nlmsg_notify+0xfb/0x1c0 [ 266.816028][ T5845] register_netdevice+0x17aa/0x1b60 [ 266.821219][ T5845] register_netdev+0x40/0x50 [ 266.825790][ T5845] loopback_net_init+0x73/0x150 [ 266.830626][ T5845] ops_init+0x349/0x5b0 [ 266.834766][ T5845] setup_net+0x287/0x9e0 [ 266.838991][ T5845] copy_net_ns+0x33f/0x570 [ 266.843396][ T5845] create_new_namespaces+0x425/0x7b0 [ 266.848665][ T5845] unshare_nsproxy_namespaces+0x124/0x180 [ 266.854367][ T5845] ksys_unshare+0x57d/0xa70 [ 266.858858][ T5845] __x64_sys_unshare+0x38/0x40 [ 266.863607][ T5845] do_syscall_64+0xf3/0x230 [ 266.868099][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.873979][ T5845] [ 266.876284][ T5845] The buggy address belongs to the object at ffff88805df26000 [ 266.876284][ T5845] which belongs to the cache kmalloc-2k of size 2048 [ 266.890320][ T5845] The buggy address is located 1440 bytes inside of [ 266.890320][ T5845] freed 2048-byte region [ffff88805df26000, ffff88805df26800) [ 266.904276][ T5845] [ 266.906584][ T5845] The buggy address belongs to the physical page: [ 266.912974][ T5845] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5df20 [ 266.921725][ T5845] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.930203][ T5845] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.937731][ T5845] page_type: f5(slab) [ 266.941694][ T5845] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 266.950262][ T5845] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 266.958829][ T5845] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 266.967481][ T5845] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 266.976131][ T5845] head: 00fff00000000003 ffffea000177c801 ffffffffffffffff 0000000000000000 [ 266.984786][ T5845] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 266.993436][ T5845] page dumped because: kasan: bad access detected [ 266.999839][ T5845] page_owner tracks the page as allocated [ 267.005534][ T5845] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 60930234395, free_ts 17967893752 [ 267.026877][ T5845] post_alloc_hook+0x1f4/0x240 [ 267.031642][ T5845] get_page_from_freelist+0x365c/0x37a0 [ 267.037173][ T5845] __alloc_frozen_pages_noprof+0x292/0x710 [ 267.042978][ T5845] alloc_pages_mpol+0x311/0x660 [ 267.047828][ T5845] allocate_slab+0x8f/0x3a0 [ 267.052319][ T5845] ___slab_alloc+0xc27/0x14a0 [ 267.056998][ T5845] __slab_alloc+0x58/0xa0 [ 267.061334][ T5845] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 267.067743][ T5845] kmemdup_noprof+0x2b/0x70 [ 267.072240][ T5845] ipv6_sysctl_net_init+0x30/0x4a0 [ 267.077346][ T5845] ops_init+0x349/0x5b0 [ 267.081487][ T5845] setup_net+0x287/0x9e0 [ 267.085712][ T5845] copy_net_ns+0x33f/0x570 [ 267.090112][ T5845] create_new_namespaces+0x425/0x7b0 [ 267.095382][ T5845] unshare_nsproxy_namespaces+0x124/0x180 [ 267.101084][ T5845] ksys_unshare+0x57d/0xa70 [ 267.105576][ T5845] page last free pid 1 tgid 1 stack trace: [ 267.111389][ T5845] free_frozen_pages+0xe0d/0x10e0 [ 267.116415][ T5845] free_contig_range+0x14c/0x430 [ 267.121343][ T5845] destroy_args+0x94/0x4b0 [ 267.125751][ T5845] debug_vm_pgtable+0x551/0x590 [ 267.130591][ T5845] do_one_initcall+0x248/0x930 [ 267.135342][ T5845] do_initcall_level+0x157/0x210 [ 267.140269][ T5845] do_initcalls+0x71/0xd0 [ 267.144586][ T5845] kernel_init_freeable+0x435/0x5d0 [ 267.149769][ T5845] kernel_init+0x1d/0x2b0 [ 267.154081][ T5845] ret_from_fork+0x4b/0x80 [ 267.158489][ T5845] ret_from_fork_asm+0x1a/0x30 [ 267.163239][ T5845] [ 267.165548][ T5845] Memory state around the buggy address: [ 267.171158][ T5845] ffff88805df26480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.179201][ T5845] ffff88805df26500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.187244][ T5845] >ffff88805df26580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.195281][ T5845] ^ [ 267.200381][ T5845] ffff88805df26600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.208429][ T5845] ffff88805df26680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.216468][ T5845] ================================================================== [ 267.237397][ T5837] Bluetooth: hci0: command tx timeout [ 267.245832][ T5845] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.253037][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00179-g1a82d19ca2d6 #0 [ 267.263882][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.273934][ T5845] Call Trace: [ 267.277205][ T5845] [ 267.280132][ T5845] dump_stack_lvl+0x241/0x360 [ 267.284800][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.289981][ T5845] ? __pfx__printk+0x10/0x10 [ 267.294552][ T5845] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.300525][ T5845] ? vscnprintf+0x5d/0x90 [ 267.304848][ T5845] panic+0x349/0x880 [ 267.308732][ T5845] ? check_panic_on_warn+0x21/0xb0 [ 267.313836][ T5845] ? __pfx_panic+0x10/0x10 [ 267.318240][ T5845] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 267.324206][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.330520][ T5845] check_panic_on_warn+0x86/0xb0 [ 267.335446][ T5845] ? sco_conn_put+0xad/0x210 [ 267.340022][ T5845] end_report+0x77/0x160 [ 267.344252][ T5845] kasan_report+0x154/0x180 [ 267.348743][ T5845] ? sco_conn_put+0xad/0x210 [ 267.353323][ T5845] sco_conn_put+0xad/0x210 [ 267.357728][ T5845] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 267.363003][ T5845] hci_conn_hash_flush+0x1be/0x350 [ 267.368108][ T5845] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 267.373730][ T5845] ? drain_workqueue+0x2d3/0x3a0 [ 267.378661][ T5845] ? hci_discovery_set_state+0x57/0x180 [ 267.384196][ T5845] hci_dev_close_sync+0xa8b/0x1260 [ 267.389300][ T5845] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 267.394830][ T5845] ? rcu_is_watching+0x15/0xb0 [ 267.399583][ T5845] hci_unregister_dev+0x20b/0x510 [ 267.404591][ T5845] vhci_release+0x80/0xd0 [ 267.408909][ T5845] ? __pfx_vhci_release+0x10/0x10 [ 267.413917][ T5845] __fput+0x3e9/0x9f0 [ 267.417901][ T5845] task_work_run+0x24f/0x310 [ 267.422477][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 267.427570][ T5845] ? do_exit+0xa25/0x28e0 [ 267.431890][ T5845] ? do_exit+0xa25/0x28e0 [ 267.436209][ T5845] do_exit+0xa2a/0x28e0 [ 267.440360][ T5845] ? __pfx_do_exit+0x10/0x10 [ 267.444939][ T5845] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.450911][ T5845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.457236][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.462429][ T5845] ? lockdep_hardirqs_on+0x99/0x150 [ 267.467617][ T5845] do_group_exit+0x207/0x2c0 [ 267.472201][ T5845] __x64_sys_exit_group+0x3f/0x40 [ 267.477213][ T5845] x64_sys_call+0x26a8/0x26b0 [ 267.482225][ T5845] do_syscall_64+0xf3/0x230 [ 267.486717][ T5845] ? clear_bhb_loop+0x35/0x90 [ 267.491382][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.497263][ T5845] RIP: 0033:0x7fe2cb18d169 [ 267.501662][ T5845] Code: Unable to access opcode bytes at 0x7fe2cb18d13f. [ 267.508669][ T5845] RSP: 002b:00007ffee725d4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 267.517074][ T5845] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe2cb18d169 [ 267.525046][ T5845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 267.533002][ T5845] RBP: 00007fe2cb1eaad8 R08: 00007ffee725b297 R09: 00000000000927c0 [ 267.540958][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.548915][ T5845] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffee725dd90 [ 267.556877][ T5845] [ 267.560144][ T5845] Kernel Offset: disabled [ 267.564450][ T5845] Rebooting in 86400 seconds..