last executing test programs: 1m28.66198397s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 1m23.8027092s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 1m11.390423846s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 1m9.276926155s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 55.042814191s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 54.141340608s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 41.057696877s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 39.874315988s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 26.136855262s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 17.733412868s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 9.682362001s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r2, 0x0, 0x100}, 0x18) close(r1) 4.228224425s ago: executing program 1 (id=2139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@getchain={0x34, 0x66, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff}, {0xffff}}, [{0x8, 0xb, 0xc44}, {0x8, 0xb, 0x202}]}, 0x34}}, 0x6008050) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xc9, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000e0601080000000000000000020000040900020073797a31000000000900820073797a32000000000900020073797a300000000009f5010073797a010000000005000100070000ffffb8fb2bbdb67de5036d0014ffff00070000000100010007000000050001000700000009"], 0x70}}, 0x40055) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000500)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6ac0c35babb5246b30bfab051013f2325f1a3901050b038da1880b25181aa59d943be3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42051a0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", ""]}, 0x14}}, 0x20000051) 3.868578983s ago: executing program 2 (id=2142): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@isdn={0x22, 0x8, 0x2, 0x61, 0x5a}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="b0cb06163c1bc00e61974962c8547a7bcace80c6fced3c2a4918fd1ad08c3963018e6778c8b7cd7906f364b0455e7005a03b0e69d86ace510231a9b60bb8b4163219cb7b04", 0x45}, {&(0x7f0000000540)="bebdaac2d90f23fdf0310c5ee6be3857d72e9ec2cae406c78d2ca8f205e990fd349e5662cabd67167717a19f2051865a2ffd528492bd834b6200b8797e4a8d525544479e9155bad0953a7e98b977d675848bc06dc527fdc25fd2c8c34a3b35e5c64b4bb7a0755a36d3c8f42b8d6133ae4a30f964c494ecca44f31425afcb16ea2862c82f4d4e31dc74d9556719d9389817255867343edaedd4ef8fba708595006e93677ee372566e81aab26ba3b50f9c3bca1951e4a40bcb5ae1956032395b64e67c0de2f5372a792ad3d1e8828d6e2242a72d3fcec7adc5c0ca", 0xda}, {&(0x7f0000000740)="4b68b1a441fcd4dff95201c3b98d3ba50e0d740463b4867f6877fb3c586cc9d3ded09da6d24fa1ef237610bb499212f8620842732f7399bc97134e5adfe98cd398cf218ac3ea5a39ec4447397a3e09cf25ad102ab45a229c439935ec9ce89bc7ea013bf416cb2946e30c37423c000ff4b5da31a3a0d3857d4ee1b7440d72232ab4cb38b6dde793e892f31b7e3360207308885be61debe4fd93353a9d7dc1c298b04d799174be", 0xa6}, {&(0x7f0000000040)='<', 0x1}, {&(0x7f0000000800)="00d60c215ef8556319ab77002e437fc02bc12af46a26013bf10a6a23e239567cf33b30e1349caaba15002ab465a054e6e4d9661a47b3598f005a1b0517230b1e788ed9145a761b90cc2810f82749ee60f5670d21cf351d008101a779a6ecda35711fe91461e8bd802e8a8b8e9888811292149d6ce85370d6feb8e48ca61c707cb3e3eba17de094b1b832439e6827dbc260ce2eb9706adabd913cee3613de1ddb", 0xa0}, {&(0x7f00000008c0)="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", 0x1000}], 0x6, &(0x7f00000018c0)=[{0x40, 0x118, 0x0, "6937cb7baecf7f703a2a72d5af184ea14f53101ef5e69b9dc1bdb50912746382347c659428b93a78d155950d89"}, {0x100, 0x10e, 0x331, "269ca8bbf843bb666d75fc2084030904fd6d2306a1927935776a3e658f7a15c4824f989770c3921e79772a4a2a06a45915378a5fa8f070e112f347ddb0c87ea58520ed9c788472dcb75f86cd52d88cf3909452fc6fb2cc62180d6b3237635cd819cc298decd1c69be573dc08791cb62eadf3a30740c540000465136db82a210a7966ac505ce83b8d7ed3ebd8a66d0ca6a2aaa7b48c9da285166bcfb50c19b40c67922521129a7b1c42aae1a49277144ab9cca7120cd11ef2f9afb5da03aca43c3d017eaddf2b29cbb7f39f0ed19d0f24aa4adefa84c1e32a5bd96493a9bd3bfee06b6f9f0ec99e9de796db336bd5"}, {0x1010, 0x8e, 0x6, "11738cd19f6af0a5f97d9b52f90d8fe7c3ede217caf5a1916e392d82f9df419e7e0e9e941db792795c0f3401d7a2a4ed7c0352003f0e9b07bb790c381c992d62d492c412153382681f596682f21821cf165c27d893f724433bc6acb191c6f0f7eeaae8735b23e749108c88e84d90f73baf5eeb4160240a562beeac2595d2222e07caf7317b4964d4f10c2f48efbe087c97b7685b965c2cfd43b7b073d4a97374bce487c210aa2c1378d0719e67c39c2c1046d23004209f0c4a1b34d7ff953fb08832328b322db1a2a4c3eaffda58d4322bb11c20be0235fb467eaa8362a6c204e48f85f170f25a967a5d4db5cec34c08db581e0c9eb93597a0edbb246a62b5b5c1852f2a7f7b956f43daa42d1fdf09f05713adcadb9ead84cc15205d3b7e93f7a9fcbbc9ee8d220ac839b5db52784f7bc8f0e34eac6c59e1cc6d2e2ae8724065ab310c6474a390cf84210e34f25611ffb869a04d776741c0ec0661d470efd56ebd3df8d0938b3ae0aaa93ba9d115caf9fceb180c79fcb5617f88f6c74ddd0a0d0032ad84d8d0e89d74a465d66fc0d8c6881c0181912339d5b604ff7625a08787211cd856f70ee19fd9fa1737402681ff674c78d9bf805df87590dddcd19f27f9052a12fcbdf1f166a82f8e11df78b1f5df3525d69272f2f1a2a929fe6c9382f63da518c9701aeb7088c451965c0814cfaa87392da5fc8ffc1b91c81c6adadd011443eb432eb154b1b4e2989dc8fcd9c9007a52d73d8b4db4613c8a5a07228cad2c94152c78bac9d74f8308bf6c0c1ba21b534799c4734f063424131a6efc368b7aa95c52edbb35f87fb403095d5348df136d3d2338cb40c357be529a30bc9c2373443a40b8670c3a3d87595be2ffd6995ca054c3c5351ca81ad72c358913b449079a8035c40c751171b489ce6af2ca86105232ed9273d8a31680dc826f9d22ad594c2f16b4138c592e1c87f18f476f9de349f56b4e1c521d6586aba8fd301e70a950bfd3fca6c96e84fe792a6dc8dbd757f16b7221c8471d54555524e302a7b8c0d667a120f747e4fed1f119bc75101aada500ae269d172e273937263fcf7dd0b332494ad7d20f08cc8d2f2fdf0607ee47e773ef64cebe9ecde8b9973208ad62fb33068405ee2df1774c3b65b3dc55b85f49b4d32eadb60f55fa076a662f110031a045b78c1e09ca6381d9e1ddbb0412e498b5fb0c2353d5e63ad96e6c120909654398bc9fcd3a839efceb727939adf437210f16de66ecd8505de495d975f77f96176a4350e83fe5e2d0b27eaed98e7d3aeae92da11eed427f9fde7140ab5875b81db7a79023435cc524b4cfd8819dda16fa9aa67ef5d4795f8ff0f8e065b52ddadc1989f788fdfcc6a02f7dbec82a1a5cc25c39d0b20848f67bc6c70877d6db09047543430a65bcc1ba2bc5e4bcc82fd5c158f8c55accfde9fd4817b943fc313685fcf8bd073cf1293e70784cc1cfe51c2c0b08ca34cb8598aa6900ce07ff0c185ae431e1563466ce5bfa9910e3fe8d98200999f6f8e0cf9ba14ba8f935d2925d771224ee1a1e3ed4a79063737afebb876bceeab41c1b255b2b9e44bbbabd1855cfdce3ac60d507b87ed7a16b46db0984b71ad547ec819cc02856f39506e6d9884d4d87d1a73d3b5c581d50a1f51813d3ddb12eb6a0ee740af5ea217ae4640926973dd6e8d7166cf783a93bc5898a6be3f540f072d0e69a1b18bee48c75a4101f513a520d8a301200b9ead2f8b7ff11cd2f9fdfbe143117d4f3d6b890731131b5dcf7204546c479fd7f4930b9d3fee62e3cf208b71bad7b3c9e3d9b620669227b04d80c0c51b3fa1a71efd85e29e1e07b2cf14a151025a177d5e76ea96b317935dc0008af94a2508312d5d6c9a9de56fe84cc06f9287389bc237fdd9bb79cbe6300c12a903ddddea18dba081d09507f385e2638c1064846780ccdcf33f04ab1eed1b6a5bdc424e7b28a5a7d4ac3a805ffc9bf40b26bfea2f071160aaa19a8d73c8a3b20c375def9e9fc8d0acfeabe45233c207b3588b7933564c3837fb2f64ab318953d4cbf6a51f6e4d7c7dd7ff748a2dc9249fa3badfca7d0f1164ece92f0ae7bb2dfbdad548597078a381e3969dc312e6818b8fa638070e44ec448ef3796283772f0c7fefa13e7877184911ff04c1c9e09993e32894319dbf18adc1149b704e6e4822cfa7873a0f16d151d00e07f1c16aa5602e0cb13890a69d03e1456bbbc95b5e9d3120ceb42a752a636d3858d3b9116d0bab8dd98cb49d9dd4e9f85e75b74c810105ee43544e7e9639964e67280bbf886845c3bc7dce9a4744c193b86053556e340fef77185e8851a9102d667ddf9da81d98849bd911b8b29854ad0c15fe3faa097e6d2cdfeea0b27eea8a640f746233218a444799a34a4873fa17c1bbc35610f9654c78c3ac6c737fd7d6e7db58103495a67e5c57c942893829a974c177fc03fa9cf43657b7f725d5c29d817a7c850f9cc3f4a14adeefa1f3f0413f1297eb63ac0f636c0d98d35f0b960020a74d9652990b5720409d1a8ec69f62817e35a75f171559f80c6c217b614677c2cac44d657531395948b5ed6f98bc21000d15668b8e133f2cbcc74dd62883e2623eb5c7474fd042ae1de1860e21948053b6933b25b177e31da18157a92b04d86b4244d7c7f2cbdda21d481834b6a0286627658c805d837565538ccc2039d2df9b6b2f77f6cf3659f6f466d562e85c27c0b44dd018a157cd8cccf67f254d263a1ce452ce9f3c90a6f8ef17ec8a6de8a660940b970b470f583e506543cc1909021b579e36e2316de9a3f980896fa28482f5c4f6c27c00e7e4f9750d71272562ba09715d7c072aaa87233d791891d76040015a1e3e8146faa3833103bf8ca09fd49362e4afaebc2778a6b249c11b4a3b0aab6220917b2e9fb0668e9e099866b603ecbf375a46f2d1f514751b8d86585a6572aa75e249404a7982c9b1597f433f49e412f3a6e21b245b462b01a392551bfd44f5b5e4c3b72f7171268509df1010a9422d972cdf18ea0c24ab60aa056a3f9048a9a08d0a979a5317a134197a04b4b82a37821afcbe6a34ae060a29d0017f3e9b64b68e0537f0051e21699138d020b4fb89d5aaebc42f315a416a94441f4574bfc420d3cf952ae3fb476dae2610bc5fde6c53940f410abbc5fcfabc889dbcb1627ead0c6ae210d5020281d2227fdfeaf0c5629ed0149573ce1b2db0097bd26ec007b0f7857597c76701ee2b877c51c45f85bc51501b8b324d268b4c2386b8618066b8f59903f8904c532ecd30f32112d60382553711acec183fd11741b2103ac564ab4b54e3f7084ccc6c415358f5dbefef3f758f0d34fbb451b9635d6f946e6c8bfe5742f18e8068df0e50bf38654c94828c187ddf1e4fc21e3103d06e82a21777d4f643e462e21890dcdc0b4bd2025b1ce715f23bc0f39bcd9ea3b22635c4b54fae1da90fed96f17553d04253e3e16d412c0dcdd57a9e130fa767b2dd60846b9eb4fb5c53b73cd2dba903bf48e7a0b6f4abf8d68b72ccf1335f9264c649127733f8e3f192c6701f52c91ae65b6d482c91e693dba14c17d978d7f4ca7e97a09f4ea58b3037d22240c48a530d3fa5ef5322c64034161c90b68efe68997022b2686b2cc7a85f73b992b26a57553c88d3b92e9dab26f6edac99ccdc8e6fc57616e7dcc5fe661f06965115b0f84ca47c19ac22e0a2760f7b2a35c5e4fe18b3a907260e2dc0cc79b0b82cb8114603ed3427c1412bad137a6a2542b2a019aaea3310beb52407370d8f84de5017d97a96626f515ed22be915d98757241e633455b144bcc10f20564cb543bd5d270df6f17019d7a8e69028cd6b33c1f328e6356e5138d72335ffb4ed56fbb498197687d376b2b202cb8404466fdbe84375be6dfee9205a6781b68060de9a7e355cc9a7298e735a095ee5a25bd77476198c992c659a08bce31ffbdbcbb65a39430a10c4eb23932a64e9914f6f692c73ab58ce6252a455b3740685e55efa17d8143d148945cff12ebbff3c18a31b49b68d7ef2e501edfb52563b089d37dbffaf1baefefe4fa076ec5a7ba612fb82d4b18ed5ba641f133c115d2a66180dd6d23c13f17c7a6a77f89ce26f7ddc47bc0ddeb80434cccc5ec49e8a46c4a10c1ab678617fe10cdc0d1914311a5b18d3e9a7b4af77699b8ac137d40caa270fe02e2643b37561bc3a319133ec468e3d9b3869a576c0747d9b5fec95d6003981b75dc402c053d81eaabae5bb633ba3dec32d2909f5abe9d50a759e2a86f90f787728786cb52f810a4001443d317d73e241547a580ce91effdcee33b2f816f7e58fe2c8e9d9f9defd0046f759e8e0edc14669c969d0baccee357f9f31df6045e4f69c4c081caf18175a036b5a6f7cdd11682bfb5b37a691dac268473517aff0dedf133a9c8fa8655e525a1a8d48fa06a9d95fb5688700797d95e03fb581d5bbdde51dd3993bd1e2ea1a0e666ee7ad5e7c349e8d612a8c8aec9d2cd063c9aa07dd40014ec0490f596155a007f33c356dcb9eb8a47354ffefa682e2e4e5ea3f707a2f7a3abd6597c41e07a47d5ab4af10367b0a53fc38b19e155531579f51ad0307ee436521b6bcc461a1c3213dc17313a3fbdca076a2ea0eb241bb69aaef6a62a16e580b8921df16804779d6fd0ca2e22551fe7fac7b1853e6bb84be153c61d3c0a79511d77f0ae0006ff6c5ec99884fc550b3a4cc02b03f4d4e392e1a8fe8a5cb28321e617357329064e82191fd63748c54d2848f8ddb1d17008a5dd2dc15fd3dfff29a30a7f15dcb5935b24083fd424ca64399441928c4cae85b170dad34c5c2603388f87297d564a1390aa49f13151b4711817ef20a44359e7fb1ea656d92bd764c66919e3f05d0bc8e5b9c62f5b2aaf889c7dc3f4bf46b5f40f26e2e34c2a5978e57c02243fe2f46f9df3f5180426c0cf42bb993200be32143b5ca751ab71e0d5d3677eda52bf89d5dce39fedf795ab3ec221d25fb7990b07651bb7486242fcea25511e693f6dabf5adfaab54a83469b060caaf08b6aa1417f4dd39733b2d24388423321ecc49e185cc89a5bcaaf6ef9013a9897f3787b604c9cabecd309f71314c6652fdadee9f833f4815623b778f8413c141d6d3c4d160312b89b0cebeba4cd3f39bf0ed55d1844b79f5050084e926a5a9719c6f12ab99cf8ba678be2d22f7f3d634df815d511efa4ffee9af61c2c29ad69a33f860ad4306aea14d5080bb79319ae2e0a21ae4909da1157328efad96197ae382019c838f3b3734c53d481ce2326478494aa46c579de3b6824eeac055cf6eec09bc1840f86af61150d6e3789d09d579b760a15e187a29d77d386ebbc8abe61047881b9257db197e406acc96c02ac6b2c8f6cdf30c8698de0e241b2d87325aa01c63a79cda430b9da35b4a2b0c5b37242c4996245ced9f272a76a3ddca7747ae4b00229cf7ffc1a476ec28db25e32f1455c552a3e917a5e2ef086f5d3c39b795f2e9d109561dee3ebb8d525c0f3da6de333ed83c6ed001f5b7d223dda2479ba5212f590e1c659f4012410afe3b431d9a1f9d751217f899232a7413395d44b30238d35641e300a34d894562e4e4a9b10c0e5cffae305d2585d89616cde3c22a7793b11222896dca63754707efd73924f9f95fb730dfb4447708e907ad557774f60496f82a1dc778b603df74eef8e457976a60062bd1a3b4e842a28b5491b4f8f61efbba895a372080b0a80fd38231c5c900a493e37811a149d96a1a54323eeebb710facc10233697c2b397e941303347fdfff571639ce3924a2ca1b1a6dc8f56924ea7bab60b995f1"}, {0x108, 0x11, 0x5, "79db9fae9c0b98679d47b58eccefd15a0804cfed44320459828d5820d45f94c7b750c942e7f0f602bddaecae95dd53f0304b0a7430e4f75b61c579ba726a10dedaa60b5cea08319b12e4cd9cd2a7537adbe2b66654c9e64585c496b1af2673d9812c15058901d5e7f8a5ea88dfd32e60df5be6d553975063a1d75d1a65e983976e0262d063fa302e9481abc0680b0a50ff6a5abc35360cffa12cac537862e817246dc6616664a23788ce7f8a90ca0d4a317f440139c35d04862b96d99838df4a26fc4c93a9a056a6ecfc1548ca9d28231faf4566862286fc8697b73805157b035fe6e9ebca15f9d36381f03e3cf83f508130df8afa8642"}], 0x1258}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.296837625s ago: executing program 1 (id=2144): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) connect$phonet_pipe(r0, &(0x7f000000a940)={0x23, 0x9, 0xfd, 0x82}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.259199108s ago: executing program 2 (id=2145): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="fd3b6441ffd687e4a172454d8f827dacec424046f5ab331b46caad2a6c0504", 0x1f}, {&(0x7f00000006c0)="c858119c3ed75acfcb026796c724df44930b6514078e62e6177bfec3e8e9983259", 0x21}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x4044094) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000340)=""/103, 0x67}], 0x2}}], 0x1, 0x42, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x8917}, @void, @eth={@multicast, @local, @void, {@mpls_mc={0x8848, {[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x5, 0x14, 0x68, 0x0, 0x19, 0x4a2864a3275c5c35, 0x0, @remote, @private=0xa010100}}}}}}}, 0x26) 2.163758033s ago: executing program 1 (id=2147): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40", 0x9c}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000040)) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000013c00000c0004802c204e"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 1.872777299s ago: executing program 2 (id=2149): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="580000001400192340c34b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcffc37ddc67bb2db559e8b99f9a34e411af889686519448ff29ea1b5b5c", 0x74}], 0x1) (rerun: 64) 1.870417409s ago: executing program 1 (id=2150): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7f, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff000000, 0xff000000], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x5}, 0x7a, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@limit={{0x48}, {0xcce6, 0xb, 0x100000000, 0x28000000, 0x8ef, 0xd, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'dvmrp0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x21, 0x3, 0x7, 0x44}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3, 0x6d, 0x1, 0x398, 0x80, 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x848) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="a5915931", @ANYRES16=r7, @ANYBLOB="01002cbd70100400000005000000080009000220000008000c00a60a000008000b000300000000001700", @ANYRES32=r3, @ANYBLOB="2df9d6336a79b9b969c6a595cc7a0b6ec0418cc215cfa58a"], 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 1.699142549s ago: executing program 2 (id=2152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) 1.484360165s ago: executing program 1 (id=2153): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) socket(0x29, 0x2, 0x7) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001022030500"/20, @ANYRES32=0x0, @ANYBLOB="1821040002200400280012800e0001006970366772657461700000001400028006000200650600000600030008000000"], 0x48}}, 0x0) 1.380625331s ago: executing program 2 (id=2154): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7020fbdbdf250300000008000100ffffffff"], 0x1c}}, 0x20000060) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000040), 0x12) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$x25(r8, &(0x7f0000000240), 0x12) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x4, 0xfffbfffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0], 0x2d74}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00f5fb0f001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.282023729s ago: executing program 1 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f00000005c0), 0x0}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r11, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r12}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00220000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30080000090a010200000000000000000100000608000640ffffff00080812800c0001800700010072740000540001800b0001006e756d67656e00004400028008000440000003ff08000340000000010800034000000001080004400000064e080004400000004008000140000000140800044000000006080001400000000c58000180080001006e6174004c000280080004400000000c0800074000000001080005400000000f080003400000000b0800064000000012080003400000001208000540000000100800014000000000080002400000000a4c0701800c00010062697477697365003c070280080001400000001708000140000000124403078040000280080003400000000308000180fffffffb08000180fffffffb0800034000000003080003400000000408000180fffffffc0900020073797a31000000003f00010001bd36aeebcab53959f3bfeb90c3fa8fee364ec501f0be84ee52cc950b5938fa608b3188e34fa3537553617df2d042d7ad473e423aab059f20aa60000c00028008000180fffffffcd7000100ad5c0d75c3c15679d38afd27c2666ed1b67fa3cee1ae5aabb027170ee860fc45313ac3d980230e0171cbb16fe1d0bca367f21a748c5abde491e48a8d6e4cdc18b8665e98bb64427fe14fb3e8cfe230b4109e106169cc97a10c436257cdec30365036bb1fea56bd0db36e2b381ffd1eefd95db4d0767b6db6d0173ace3d67ca18d40aecef1e671c37b12c4a985b2e1c59a5132d5f5d4720c2084bb464e2101c2f53c83f07b7464aea575971573680e0efc733e632f6e62284e8fecfd6e18ec181133855490915867be9aad9fa183c774336516f0074000100ca00b74f0f8a1e027ac37219763473066e504099e67280e8aa64165cd508098ae3d724b7cfae735385206c4dd5194a2eb6e9d17e24aaf6eb92bf9aac507f89dc759e16cca8f954338b1b9b6042461edb6921d7160fa80bf2ec60a90cf459be738770d9209f113e24f4f901f5cbf99f1add000100121d71a778bb2edd97ccbaa4a60293242f84c5cfe22f0b9d76cc59525a83c7e7e2cd01b153a0ff3e6b4cfd2255435b312d11d31ff7e7e399f643fc3ccdf65f6acc347c2f0e2a0a7fa5d3e4d9df370f96b28e84d7cfda6de42dcd3d31caa0d22e909fd981370bc430eefd6a11ad9d5500b41612c2497db663a863c62ae84b398480fc6b3ee42be37ed38d9e7743dad5fb2933f459970afafe7c4243364dcc524ed25a48b9c71d9fc8c671af614a7cfcab96bf911a534ddb38cef8d62e71e061b03dc03c7ab52ffd8239dc26da35e50e47f1f477dd0f128faf900000002400028008000180fffffffe0900020073797a32000000000900020073797a3200000000240002800900020073797a30000000000900020073797a32000000000800034000000004040002803c0002800900020073797a32000000000900020073797a32000000000900020073797a30000000000900020073797a310000000008000180fffffffc0800014000000004b80205803c000280080001800000000108000180ffffffff0900020073797a32000000000900020073797a320000000008000180fffffffb080003400000000314000280080003400000000408000340000000010c0002800800034000000002c000010006c8f7a7185de881a29a9a50700e67891f20e30797cb5cec73c9a6c41039705f21cdc7ac1000a2e2c475158684cab5796ce4b520f3715d517d42638e4fc35315205bcdb99dfadd333204ab1bb4bea0ad96952fe8ed43ec322b2a4cc279a56aab130e125b720b8aecdc292e3ebd0944ab6d56b6ea5322226c4c1a2ec492bbb99a8426c1dfaf0f05c69766cac3f4f3d7a892b7bfba7d4a638bff067c3ae726d06d7337a7d78da3363e228d192d3d774b45e35b1899d139f3e59594db0b1f000100992ccf3ce698486c1f81154c39e8da4ac38a18c69eb2d68079ae9a00830001007ee68bdce956ad31c2ca1c5de0b031fc6b8cc8bae286d5bbf88567caedee15d9b76ee207a9bd25142f2e24c2588a44f9c148ea8c79217c1cd15b343e5587893291a4edcc1002858bef41c79d18c3e7f7aff8498523df2fb4fab1684988060a5bf9fac86d8785719cfb9849c1cf5763911a85ef49af8d7bbd72385487671e450086000100f1bd44a00f55de39a3ea3d833cd4bcc7ad18a4e46dba8b7d889330ebd0626a1461c3f73ed7226a49678674ac32c3408fae4102132f2e84ff873a0b1c342f8de374ab234c9d89affba8aaf3e3b3062cdb4df4fc4d579eb6ea11fc301711479a7a54c07a4645e1c001271ffe003941a1c1487000d0139f038786beb1fe4598d3b7cf670000240002800900020073797a30000000000900020073797a30000000000800018000000000480002800900020073797a31000000000900020073797a32000000000900020073797a3200000000080003400000000208000180fffffffb080001800000000008000340000000030c010780e2000100402e6bf1f60ec3e6c653d9c306c8984f0ba9786e71ec4a27cb2d819fdda688024c8e45c1d7624b978155da80b5ff066b964d84deb6803dc39e29af2234f7613db3235c2eb4e756c45247012a378ba4343f11a60ff67394595cb7d2d0db1a94b7a3f85f2161b80ec16d9df10834c30aba0665ef3df208057c32ba569b492340c7e7843a33b4e79482850d01fe7b4428e8ffad0f3f0738281333f5c4ea48963e45782f49a923d2be4ba243d1f6b6e0b412f4db26da24ac0222af335560b4c7e3d5178ce17945d572f025babfbcf648477ba2b2c05f6fef1b19de20a204890e00002400028008000180fffffffb080003400000000408000180fffffffb08000340000000040800014000000012080003400000000a08000240000000020c000b4000000000ffffffff140000001100010000000000000000000000000a"], 0x858}}, 0x0) 1.229681031s ago: executing program 4 (id=2157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.013161747s ago: executing program 4 (id=2158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xf858828485fa0e1b}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x7e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)=ANY=[], 0x290) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="0c13496af5add8b71b58114da9b6080050800800070002000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc4c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c082) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000013c0)={0x0, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000900"], 0xb1) 907.983146ms ago: executing program 2 (id=2159): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) r4 = socket(0x1d, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001480)=0xff, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001480)=0xff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="b60a00000000000061116400000000001800631ebee59d3577cd769da36a000000000000000000000000000095000000000000005576a4a8e9ce373eae59c08f0ba3e53a90b3a970647b2da159c91f9403651ec830832e8e21dd467078f1c40622acad0c70f9bf1bac0f77bae72169bb09cbf086c27375eef9634addd823621fa304a08b5bdbf8c243935ae307025714caa69b29c277f810a1e6d4c7f2d8097cf3b021b48449df54a77c0bd1666a8f1b4f166c833a114ccdc94caeb57782"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) recvmmsg(r3, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/39, 0x27}], 0x5, &(0x7f0000000380)=""/58, 0x3a}, 0x11e}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/67, 0x43}], 0x1, &(0x7f0000000840)=""/49, 0x31}, 0x81}, {{&(0x7f0000000940)=@hci, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000880)=""/20, 0x14}], 0x7, &(0x7f0000000e80)=""/62, 0x3e}, 0x49}, {{&(0x7f0000000ec0)=@caif=@dbg, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/252, 0xfc}], 0x1, &(0x7f0000001080)=""/62, 0x3e}, 0xffffffff}, {{&(0x7f00000010c0)=@nl=@unspec, 0x80, &(0x7f0000001240)=[{&(0x7f0000001140)=""/97, 0x61}, {&(0x7f00000011c0)=""/112, 0x70}], 0x2, &(0x7f0000001280)=""/226, 0xe2}, 0x5a2}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/89, 0x59}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/82, 0x52}, {&(0x7f0000001540)=""/218, 0xda}, {&(0x7f0000001640)=""/98, 0x62}, {&(0x7f00000016c0)=""/11, 0xb}], 0x6}, 0x80000001}, {{&(0x7f0000001780)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/149, 0x95}, {&(0x7f0000001a40)=""/153, 0x99}, {&(0x7f0000001b00)=""/79, 0x4f}, {&(0x7f0000001b80)=""/214, 0xd6}, {&(0x7f0000001c80)=""/87, 0x57}, {&(0x7f0000001d00)=""/92, 0x5c}], 0x9, &(0x7f0000001e40)=""/200, 0xc8}, 0xdf}, {{&(0x7f0000001f40)=@qipcrtr, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/194, 0xc2}], 0x1, &(0x7f0000002100)=""/199, 0xc7}, 0x80}, {{&(0x7f0000002200)=@ax25={{0x3, @rose}, [@bcast, @default, @default, @remote, @rose, @default, @netrom, @bcast]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/139, 0x8b}, {&(0x7f0000003440)=""/207, 0xcf}, {&(0x7f0000003540)=""/169, 0xa9}], 0x5}, 0x1fc0}], 0x9, 0x20000, &(0x7f00000038c0)) (async) recvmmsg(r3, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/39, 0x27}], 0x5, &(0x7f0000000380)=""/58, 0x3a}, 0x11e}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/67, 0x43}], 0x1, &(0x7f0000000840)=""/49, 0x31}, 0x81}, {{&(0x7f0000000940)=@hci, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000880)=""/20, 0x14}], 0x7, &(0x7f0000000e80)=""/62, 0x3e}, 0x49}, {{&(0x7f0000000ec0)=@caif=@dbg, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/252, 0xfc}], 0x1, &(0x7f0000001080)=""/62, 0x3e}, 0xffffffff}, {{&(0x7f00000010c0)=@nl=@unspec, 0x80, &(0x7f0000001240)=[{&(0x7f0000001140)=""/97, 0x61}, {&(0x7f00000011c0)=""/112, 0x70}], 0x2, &(0x7f0000001280)=""/226, 0xe2}, 0x5a2}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/89, 0x59}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/82, 0x52}, {&(0x7f0000001540)=""/218, 0xda}, {&(0x7f0000001640)=""/98, 0x62}, {&(0x7f00000016c0)=""/11, 0xb}], 0x6}, 0x80000001}, {{&(0x7f0000001780)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/149, 0x95}, {&(0x7f0000001a40)=""/153, 0x99}, {&(0x7f0000001b00)=""/79, 0x4f}, {&(0x7f0000001b80)=""/214, 0xd6}, {&(0x7f0000001c80)=""/87, 0x57}, {&(0x7f0000001d00)=""/92, 0x5c}], 0x9, &(0x7f0000001e40)=""/200, 0xc8}, 0xdf}, {{&(0x7f0000001f40)=@qipcrtr, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/194, 0xc2}], 0x1, &(0x7f0000002100)=""/199, 0xc7}, 0x80}, {{&(0x7f0000002200)=@ax25={{0x3, @rose}, [@bcast, @default, @default, @remote, @rose, @default, @netrom, @bcast]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/139, 0x8b}, {&(0x7f0000003440)=""/207, 0xcf}, {&(0x7f0000003540)=""/169, 0xa9}], 0x5}, 0x1fc0}], 0x9, 0x20000, &(0x7f00000038c0)) 568.723962ms ago: executing program 4 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x7c}}, 0x20048040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000060a010400000000000000000200000a200004801c0001800a0001006d617463680000000c00028008000100756470000900010073797a30000000000900020073797a32000000001400000011e98d000100"/116], 0x74}}, 0x4) 478.606873ms ago: executing program 4 (id=2161): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1050, 0x8130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x3239}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x2}, 0x5d) sendmmsg$unix(r1, &(0x7f0000003440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 241.904513ms ago: executing program 4 (id=2162): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1415, 0x1}, 0x10}}, 0x0) 52.797656ms ago: executing program 4 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000000)="57b0a807818590adf83b8a3a5cdc0559ac6e2a5ff536593c2934c5f2e98c49d3c493607df655d74c50f554efcbc681158318e0d23af4b0e9dcfe54a89855dab5052504403febe1716b73de3e8c2b2ad6e68bdc") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 0s ago: executing program 3 (id=39): getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000b3de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017c01a0db0235af20000000000000000000000000000000000000000000000000100"/144], 0xb1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000b54221bd02000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='@\x00'/18], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) kernel console output (not intermixed with test programs): small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.350518][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 257.439829][T12333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.507423][T12333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.538454][T12333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.595363][T12333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.783824][T12333] hsr_slave_0: entered promiscuous mode [ 257.793036][T12333] hsr_slave_1: entered promiscuous mode [ 257.803445][T12333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.813916][T12333] Cannot create hsr debugfs directory [ 257.822030][T12537] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 258.062440][ T5835] Bluetooth: hci4: command tx timeout [ 258.119599][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 258.292293][T12572] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 258.316272][T12573] x_tables: duplicate underflow at hook 1 [ 258.322462][T12572] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 258.337627][T12573] netlink: 'syz.0.1428': attribute type 33 has an invalid length. [ 258.348688][T12573] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1428'. [ 258.531664][T12588] openvswitch: netlink: Flow key attr not present in new flow. [ 258.729890][T12599] netem: incorrect gi model size [ 258.735131][T12599] netem: change failed [ 258.920295][T12614] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.244772][T12635] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 259.320086][T12637] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 259.702148][T12333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.719554][T12333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.729895][T12333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.753693][T12333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.773539][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 259.810841][T12658] xfrm0 speed is unknown, defaulting to 1000 [ 260.141856][ T55] Bluetooth: hci4: command tx timeout [ 260.181248][T12664] netlink: 'syz.2.1449': attribute type 7 has an invalid length. [ 260.374306][T12333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.464708][T12333] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.512381][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.519661][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.592937][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.600193][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.764819][T12333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.787045][T12333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.819374][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 260.829249][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'. [ 260.868190][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1458'. [ 261.159425][T12724] netlink: 'syz.4.1461': attribute type 3 has an invalid length. [ 261.376460][T12333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.542208][T12333] veth0_vlan: entered promiscuous mode [ 261.564097][ T30] audit: type=1107 audit(1746520437.081:3): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 261.588278][T12333] veth1_vlan: entered promiscuous mode [ 261.624996][T12746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.745854][T12333] veth0_macvtap: entered promiscuous mode [ 261.764617][T12746] __nla_validate_parse: 1 callbacks suppressed [ 261.764635][T12746] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1465'. [ 261.791455][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.794325][T12333] veth1_macvtap: entered promiscuous mode [ 261.888415][T12333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.933312][T12333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.982368][T12333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.996446][T12768] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 262.045195][T12333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.063809][T12333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.073828][T12333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.118671][T12775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1472'. [ 262.303038][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.341323][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.428012][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 262.459079][ T5090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.493859][ T5090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.564675][T12793] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 262.605418][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1475'. [ 262.618017][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 262.640484][T12793] ÿ: entered promiscuous mode [ 262.651686][T12793] bridge0: port 1(ÿ) entered blocking state [ 262.661608][T12793] bridge0: port 1(ÿ) entered disabled state [ 262.668575][T12793] ÿ: entered allmulticast mode [ 262.679201][T12793] ÿ: left allmulticast mode [ 262.713827][T12793] A link change request failed with some changes committed already. Interface ÿ may have been left with an inconsistent configuration, please check. [ 262.810246][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 262.820172][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 262.842608][T12804] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1477'. [ 262.927583][T12814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 263.198912][T12828] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 263.234054][T12828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1480'. [ 263.252504][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.265066][T12835] netlink: 'syz.0.1480': attribute type 23 has an invalid length. [ 263.428456][T12832] dvmrp0: entered allmulticast mode [ 263.538064][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.704335][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.773846][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.339871][ T13] bridge_slave_1: left allmulticast mode [ 264.352239][ T13] bridge_slave_1: left promiscuous mode [ 264.359178][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.369500][ T13] bridge_slave_0: left allmulticast mode [ 264.375181][ T13] bridge_slave_0: left promiscuous mode [ 264.387141][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.709737][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.720551][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.731357][ T13] bond0 (unregistering): Released all slaves [ 265.410963][ T13] hsr_slave_0: left promiscuous mode [ 265.447081][ T13] hsr_slave_1: left promiscuous mode [ 265.463113][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.484183][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.531652][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.558927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.586419][T12911] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 265.610841][T12911] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 265.643521][ T13] veth1_macvtap: left promiscuous mode [ 265.664894][ T13] veth0_macvtap: left promiscuous mode [ 265.681647][ T13] veth1_vlan: left promiscuous mode [ 265.692950][ T13] veth0_vlan: left promiscuous mode [ 265.853954][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.864024][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.876563][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.897696][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.920491][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.480895][ T13] team0 (unregistering): Port device team_slave_1 removed [ 266.518881][ T13] team0 (unregistering): Port device team_slave_0 removed [ 266.968315][T12919] veth0_to_team: entered promiscuous mode [ 267.021798][T12928] __nla_validate_parse: 1 callbacks suppressed [ 267.021821][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 267.119612][T12920] xfrm0 speed is unknown, defaulting to 1000 [ 267.508405][T12972] net veth1_virt_wifi : renamed from virt_wifi0 (while UP) [ 267.738124][T12989] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1507'. [ 267.763279][T12920] chnl_net:caif_netlink_parms(): no params data found [ 267.876246][T12996] sctp: [Deprecated]: syz.0.1509 (pid 12996) Use of int in max_burst socket option. [ 267.876246][T12996] Use struct sctp_assoc_value instead [ 267.979369][ T5835] Bluetooth: hci4: command tx timeout [ 268.323774][T13028] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1513'. [ 268.361062][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.382523][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.415640][T12920] bridge_slave_0: entered allmulticast mode [ 268.423510][T12920] bridge_slave_0: entered promiscuous mode [ 268.469576][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.496805][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.504069][T12920] bridge_slave_1: entered allmulticast mode [ 268.541993][T12920] bridge_slave_1: entered promiscuous mode [ 268.606060][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 268.637362][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.684021][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.858549][T13056] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1519'. [ 268.872814][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1521'. [ 268.948029][T12920] team0: Port device team_slave_0 added [ 268.968945][T12920] team0: Port device team_slave_1 added [ 269.116278][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.123272][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.150620][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.167348][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.179824][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.206653][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.476275][T12920] hsr_slave_0: entered promiscuous mode [ 269.487736][T12920] hsr_slave_1: entered promiscuous mode [ 269.506548][T12920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.511072][T13086] atomic_op ffff88802f8a8198 conn xmit_atomic 0000000000000000 [ 269.523502][T12920] Cannot create hsr debugfs directory [ 269.530708][T13088] IPVS: length: 149 != 8 [ 269.542910][ T5885] IPVS: starting estimator thread 0... [ 269.636754][T13089] IPVS: using max 29 ests per chain, 69600 per kthread [ 269.950581][T13110] SET target dimension over the limit! [ 269.957193][T13110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.057192][ T5835] Bluetooth: hci4: command tx timeout [ 270.359503][T13126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1540'. [ 270.397560][T13129] openvswitch: netlink: EtherType 0 is less than min 600 [ 270.413907][T13130] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1541'. [ 270.417075][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 270.622540][T12920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.639555][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.663143][T12920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.693423][T12920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.768599][T12920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.121245][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.209333][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.266434][T13168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1550'. [ 271.283109][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.290329][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.324607][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.331785][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.642172][T13184] : entered promiscuous mode [ 271.753910][T13200] netlink: 'syz.1.1557': attribute type 29 has an invalid length. [ 271.926181][T13206] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 272.119711][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.135444][ T5835] Bluetooth: hci4: command tx timeout [ 272.157672][T13220] netlink: 'syz.1.1561': attribute type 7 has an invalid length. [ 272.211771][T12920] veth0_vlan: entered promiscuous mode [ 272.232228][T12920] veth1_vlan: entered promiscuous mode [ 272.293267][T12920] veth0_macvtap: entered promiscuous mode [ 272.324556][T12920] veth1_macvtap: entered promiscuous mode [ 272.378688][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.404960][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.425576][T12920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.434470][T12920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.447747][T12920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.462550][T12920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.614501][T13232] __nla_validate_parse: 1 callbacks suppressed [ 272.614518][T13232] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1565'. [ 272.690188][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.717300][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.832809][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.865192][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 272.878123][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.260390][T13254] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 273.609339][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 273.660295][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 273.671675][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 273.707971][T13289] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 273.719130][T13289] nbd: error processing sock list [ 273.748329][T13293] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 273.810826][T13293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.849829][T13297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.860208][T13297] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.878555][T13297] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 273.951948][T13293] veth7: entered promiscuous mode [ 273.969961][T13293] bond2: (slave veth7): Enslaving as an active interface with a down link [ 273.998455][T13297] vlan2: entered allmulticast mode [ 274.003883][T13297] bond2: entered allmulticast mode [ 274.134825][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.803531][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.061331][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.140625][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.257976][ T65] bridge_slave_1: left allmulticast mode [ 275.263673][ T65] bridge_slave_1: left promiscuous mode [ 275.269895][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.279814][ T65] bridge_slave_0: left allmulticast mode [ 275.286560][ T65] bridge_slave_0: left promiscuous mode [ 275.292321][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.578660][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.589625][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.600547][ T65] bond0 (unregistering): Released all slaves [ 275.850169][T13349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1583'. [ 276.069773][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 276.139212][T13362] netlink: 'syz.2.1588': attribute type 11 has an invalid length. [ 276.175459][T13362] netlink: 'syz.2.1588': attribute type 11 has an invalid length. [ 276.183333][T13362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1588'. [ 276.274348][T13357] xt_CT: No such helper "pptp" [ 276.353474][ T65] hsr_slave_0: left promiscuous mode [ 276.389724][ T65] hsr_slave_1: left promiscuous mode [ 276.411589][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.432149][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.468389][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.491596][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.592452][ T65] veth1_macvtap: left promiscuous mode [ 276.607421][ T65] veth0_macvtap: left promiscuous mode [ 276.623637][ T65] veth1_vlan: left promiscuous mode [ 276.633611][ T65] veth0_vlan: left promiscuous mode [ 276.658434][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.666450][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.674997][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.688058][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.698462][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.144853][ T65] team0 (unregistering): Port device team_slave_1 removed [ 277.191179][ T65] team0 (unregistering): Port device team_slave_0 removed [ 277.818608][T13385] xfrm0 speed is unknown, defaulting to 1000 [ 277.848086][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 277.887181][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 277.916506][T13396] netlink: 'syz.4.1594': attribute type 5 has an invalid length. [ 277.933251][T13401] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.954668][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 277.981970][T13402] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 278.020114][T13402] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1597'. [ 278.240721][T13413] netlink: 'syz.4.1599': attribute type 27 has an invalid length. [ 278.291745][T13416] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 278.306825][T13416] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1599'. [ 278.416376][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1600'. [ 278.775644][ T5835] Bluetooth: hci4: command tx timeout [ 279.170514][T13385] chnl_net:caif_netlink_parms(): no params data found [ 279.262061][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.414249][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.593842][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.652437][T13441] syzkaller0: entered promiscuous mode [ 279.658203][T13441] syzkaller0: entered allmulticast mode [ 279.787842][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.821173][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.840866][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.863884][T13385] bridge_slave_0: entered allmulticast mode [ 279.871589][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 279.882237][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.891913][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.900114][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.911395][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.920567][T13385] bridge_slave_0: entered promiscuous mode [ 279.927149][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.937525][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.944734][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.953436][T13385] bridge_slave_1: entered allmulticast mode [ 279.964317][T13385] bridge_slave_1: entered promiscuous mode [ 279.997158][T13467] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1613'. [ 280.042468][T13467] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 280.064974][T13385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.086042][T13385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.102305][T13463] xfrm0 speed is unknown, defaulting to 1000 [ 280.214797][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 280.253038][T13385] team0: Port device team_slave_0 added [ 280.266827][T13385] team0: Port device team_slave_1 added [ 280.376338][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1615'. [ 280.482097][ T65] bridge_slave_1: left allmulticast mode [ 280.511734][ T65] bridge_slave_1: left promiscuous mode [ 280.524724][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.566287][ T65] bridge_slave_0: left allmulticast mode [ 280.585672][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.640990][T13489] can: request_module (can-proto-0) failed. [ 280.867738][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 281.977805][ T55] Bluetooth: hci0: command tx timeout [ 282.285124][ T65] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 282.620169][ T65] bond1 (unregistering): Released all slaves [ 282.711953][ T65] bond2 (unregistering): Released all slaves [ 282.799329][ T65] bond3 (unregistering): Released all slaves [ 282.813026][ T65] bond4 (unregistering): Released all slaves [ 282.896404][ T65] bond0 (unregistering): Released all slaves [ 282.910073][T13385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.918124][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.944293][ T55] Bluetooth: hci4: command 0x041b tx timeout [ 282.951418][T13385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.964265][T13385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.971394][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.998328][T13385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.023710][T13504] tipc: Enabling of bearer rejected, media not registered [ 283.143330][ T65] : left promiscuous mode [ 283.228735][T13517] __nla_validate_parse: 2 callbacks suppressed [ 283.228756][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 283.299765][ T65] tipc: Disabling bearer [ 283.335502][ T65] tipc: Disabling bearer [ 283.361206][ T65] tipc: Left network mode [ 283.514402][T13385] hsr_slave_0: entered promiscuous mode [ 283.543909][T13385] hsr_slave_1: entered promiscuous mode [ 283.566352][T13385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.573949][T13385] Cannot create hsr debugfs directory [ 283.619700][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 283.651578][T13541] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 283.660837][ T6303] IPVS: starting estimator thread 0... [ 283.796464][T13542] IPVS: using max 39 ests per chain, 93600 per kthread [ 283.835795][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 283.915285][T13463] chnl_net:caif_netlink_parms(): no params data found [ 284.013971][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1628'. [ 284.062028][ T55] Bluetooth: hci0: command tx timeout [ 284.260912][T13577] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1634'. [ 284.448926][ T65] team0: left promiscuous mode [ 284.468353][ T65] team_slave_0: left promiscuous mode [ 284.485583][ T65] team_slave_1: left promiscuous mode [ 284.505455][ T65] batadv_slave_1: left promiscuous mode [ 284.520673][ T65] hsr_slave_0: left promiscuous mode [ 284.531819][ T65] hsr_slave_1: left promiscuous mode [ 284.683991][T13594] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 284.698803][T13594] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 284.993475][ T65] team0 (unregistering): Port device team_slave_1 removed [ 285.015571][ T55] Bluetooth: hci4: command 0x041b tx timeout [ 285.031284][ T65] team0 (unregistering): Port device team_slave_0 removed [ 285.508982][T13613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.581030][T13463] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.589048][T13463] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.598341][T13463] bridge_slave_0: entered allmulticast mode [ 285.627349][T13463] bridge_slave_0: entered promiscuous mode [ 285.655233][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 285.694041][T13463] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.703844][T13463] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.712369][T13463] bridge_slave_1: entered allmulticast mode [ 285.719880][T13463] bridge_slave_1: entered promiscuous mode [ 285.754650][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 285.884967][T13463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.914481][T13463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.070820][T13463] team0: Port device team_slave_0 added [ 286.099380][T13463] team0: Port device team_slave_1 added [ 286.127358][ T65] IPVS: stop unused estimator thread 0... [ 286.136567][ T55] Bluetooth: hci0: command tx timeout [ 286.201637][T13463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.219557][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'. [ 286.235341][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.285354][T13463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.344297][T13463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.354683][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.391851][T13463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.679836][T13463] hsr_slave_0: entered promiscuous mode [ 286.707061][T13463] hsr_slave_1: entered promiscuous mode [ 286.713404][T13463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.734332][T13463] Cannot create hsr debugfs directory [ 286.843243][T13385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.899323][T13385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.907735][T13663] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.941546][T13661] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1651'. [ 286.963307][T13385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.022120][T13385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.101773][ T55] Bluetooth: hci4: command 0x041b tx timeout [ 287.166262][T13668] veth0: entered promiscuous mode [ 287.177844][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 287.215047][T13667] veth0: left promiscuous mode [ 287.779938][T13694] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 288.042432][T13385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.111103][T13713] x_tables: duplicate underflow at hook 4 [ 288.155810][T13385] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.213073][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.216698][ T55] Bluetooth: hci0: command tx timeout [ 288.220289][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.307040][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.314900][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.654760][T13463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.707708][T13463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.817993][T13463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.901044][T13463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.251365][T13385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.261143][T13772] netlink: 'syz.1.1679': attribute type 10 has an invalid length. [ 289.303640][T13772] vlan0: entered allmulticast mode [ 289.315805][T13772] veth0_vlan: entered allmulticast mode [ 289.457582][T13463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.543955][T13463] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.547716][T13780] netlink: 'syz.2.1683': attribute type 11 has an invalid length. [ 289.558849][T13780] __nla_validate_parse: 3 callbacks suppressed [ 289.558863][T13780] netlink: 8864 bytes leftover after parsing attributes in process `syz.2.1683'. [ 289.590928][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.598208][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.659203][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.666413][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.669977][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 289.714835][T13385] veth0_vlan: entered promiscuous mode [ 289.754761][T13385] veth1_vlan: entered promiscuous mode [ 289.908940][T13799] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.917036][T13385] veth0_macvtap: entered promiscuous mode [ 289.963302][T13385] veth1_macvtap: entered promiscuous mode [ 290.029440][T13802] delete_channel: no stack [ 290.050515][T13385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.095095][T13385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.139401][T13385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.161852][T13385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.172125][T13385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.181280][T13385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.552361][T13463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.588752][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.637429][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.721227][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.730685][T13834] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.747234][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.764944][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 290.879811][T13463] veth0_vlan: entered promiscuous mode [ 290.964654][T13463] veth1_vlan: entered promiscuous mode [ 291.034910][T13851] netlink: 'syz.4.1700': attribute type 2 has an invalid length. [ 291.105084][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 291.135562][T13855] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 291.143187][T13855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.222359][T13861] netlink: 'syz.2.1702': attribute type 4 has an invalid length. [ 291.223172][T13463] veth0_macvtap: entered promiscuous mode [ 291.472324][ T1340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.524061][T13463] veth1_macvtap: entered promiscuous mode [ 291.562907][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 291.572102][T13876] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 291.598245][T13876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.693928][ T1340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.817727][ T1340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.852732][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.872599][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.889515][T13463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.915119][ T1340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.942166][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.953943][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.975138][T13463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.998558][T13463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.012175][T13463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.022726][T13463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.037133][T13463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.152051][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.177935][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.222636][ T5090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.245704][ T5090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.359022][ T1340] bridge_slave_1: left allmulticast mode [ 292.364808][ T1340] bridge_slave_1: left promiscuous mode [ 292.384266][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.403130][ T1340] bridge_slave_0: left allmulticast mode [ 292.413159][ T1340] bridge_slave_0: left promiscuous mode [ 292.420796][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.871390][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.883878][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.894826][ T1340] bond0 (unregistering): Released all slaves [ 293.275562][ T1340] hsr_slave_0: left promiscuous mode [ 293.295916][ T1340] hsr_slave_1: left promiscuous mode [ 293.317698][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.325274][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.356200][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.364095][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.488133][ T1340] veth1_macvtap: left promiscuous mode [ 293.493730][ T1340] veth0_macvtap: left promiscuous mode [ 293.535703][ T1340] veth1_vlan: left promiscuous mode [ 293.541093][ T1340] veth0_vlan: left promiscuous mode [ 294.259979][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.282227][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.290407][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.303825][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.318495][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.460859][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.470808][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.478567][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.492977][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.505184][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.962848][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 295.012887][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 295.382177][T13969] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.473946][T13947] xfrm0 speed is unknown, defaulting to 1000 [ 295.501884][T13955] xfrm0 speed is unknown, defaulting to 1000 [ 296.183558][T14005] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1720'. [ 296.273801][ T1340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.306845][ T30] audit: type=1800 audit(1746520471.821:4): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1717" name="memory.events" dev="tmpfs" ino=2263 res=0 errno=0 [ 296.342164][T14012] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 296.352937][T14012] syzkaller0: linktype set to 768 [ 296.364499][T13947] chnl_net:caif_netlink_parms(): no params data found [ 296.377340][ T5842] Bluetooth: hci0: command tx timeout [ 296.396077][T13955] chnl_net:caif_netlink_parms(): no params data found [ 296.439518][T14016] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1722'. [ 296.500660][ T1340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.536135][ T5842] Bluetooth: hci4: command tx timeout [ 296.601896][T14020] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 296.609907][T14020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1724'. [ 296.676391][T14020] xt_CT: No such helper "netbios-ns" [ 296.712852][ T1340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.754099][T14022] netlink: 'syz.1.1725': attribute type 3 has an invalid length. [ 296.765698][T14022] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1725'. [ 296.950023][ T1340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.983005][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 296.999736][T14037] ipt_ECN: cannot use operation on non-tcp rule [ 297.034413][T14040] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1728'. [ 297.061435][T14040] netem: invalid attributes len -24 [ 297.071531][T14040] netem: change failed [ 297.142202][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.154916][T13947] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.163250][T13947] bridge_slave_0: entered allmulticast mode [ 297.176327][T13947] bridge_slave_0: entered promiscuous mode [ 297.195469][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.202764][T13947] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.204855][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 297.210131][T13947] bridge_slave_1: entered allmulticast mode [ 297.236930][T13947] bridge_slave_1: entered promiscuous mode [ 297.321322][T14050] batman_adv: batadv0: Adding interface: erspan0 [ 297.327938][T14050] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.354565][T14050] batman_adv: batadv0: Not using interface erspan0 (retrying later): interface not active [ 297.417334][T13955] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.424703][T13955] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.438960][T13955] bridge_slave_0: entered allmulticast mode [ 297.447265][T13955] bridge_slave_0: entered promiscuous mode [ 297.471545][T13947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.486928][T13955] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.496683][T13955] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.503897][T13955] bridge_slave_1: entered allmulticast mode [ 297.511938][T13955] bridge_slave_1: entered promiscuous mode [ 297.543737][T13947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.706252][T13955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.733776][T13955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.920631][ T1340] bridge_slave_1: left allmulticast mode [ 297.936093][ T1340] bridge_slave_1: left promiscuous mode [ 297.941918][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.977223][ T1340] bridge_slave_0: left allmulticast mode [ 297.987379][ T1340] bridge_slave_0: left promiscuous mode [ 297.995373][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.420673][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.433412][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.451017][ T1340] bond0 (unregistering): Released all slaves [ 298.457152][ T5842] Bluetooth: hci0: command tx timeout [ 298.489289][T13947] team0: Port device team_slave_0 added [ 298.628775][ T5842] Bluetooth: hci4: command tx timeout [ 298.656365][T13955] team0: Port device team_slave_0 added [ 298.690753][T13955] team0: Port device team_slave_1 added [ 298.769579][T13947] team0: Port device team_slave_1 added [ 299.012000][T13947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.032566][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.064865][T13947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.197060][T14125] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1746'. [ 299.214874][T14131] xt_nat: multiple ranges no longer supported [ 299.218021][T14125] nbd: illegal input index 61504 [ 299.228868][T13955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.237405][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.269337][T13955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.282092][T13947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.289658][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.317531][T13947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.374410][T14131] bridge7: entered promiscuous mode [ 299.379916][T14131] bridge7: entered allmulticast mode [ 299.397848][T14135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1750'. [ 299.407214][T14135] netlink: 'syz.2.1750': attribute type 7 has an invalid length. [ 299.437573][T14135] netlink: 'syz.2.1750': attribute type 8 has an invalid length. [ 299.447795][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 299.472442][ T1340] hsr_slave_0: left promiscuous mode [ 299.481477][ T1340] hsr_slave_1: left promiscuous mode [ 299.490214][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.501798][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.513298][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.525116][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.549669][ T1340] veth1_macvtap: left promiscuous mode [ 299.555202][ T1340] veth0_macvtap: left promiscuous mode [ 299.561631][ T1340] veth1_vlan: left promiscuous mode [ 299.567128][ T1340] veth0_vlan: left promiscuous mode [ 299.965088][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 300.002219][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 300.332080][T13955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.341188][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.367762][T13955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.547884][ T5842] Bluetooth: hci0: command tx timeout [ 300.559996][T13947] hsr_slave_0: entered promiscuous mode [ 300.589947][T13947] hsr_slave_1: entered promiscuous mode [ 300.631686][T13947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.641014][T13947] Cannot create hsr debugfs directory [ 300.651435][T14148] hsr_slave_1: left allmulticast mode [ 300.696048][ T5842] Bluetooth: hci4: command tx timeout [ 300.710622][T13955] hsr_slave_0: entered promiscuous mode [ 300.718682][T13955] hsr_slave_1: entered promiscuous mode [ 300.725113][T13955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.734965][T13955] Cannot create hsr debugfs directory [ 301.365725][T14182] netlink: 'syz.4.1761': attribute type 15 has an invalid length. [ 301.507755][T14192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.605786][T14197] __nla_validate_parse: 3 callbacks suppressed [ 301.605807][T14197] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1764'. [ 302.302855][T13955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.331959][T13955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.386411][T13955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.428272][T13955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.618908][ T5842] Bluetooth: hci0: command tx timeout [ 302.778803][ T5842] Bluetooth: hci4: command tx timeout [ 302.861607][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'. [ 302.978767][T13955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.088547][T13955] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.232149][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.239466][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.262619][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.269831][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.402897][T13947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.457866][T13947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.501594][T13947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.546934][T13947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.838749][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 303.879792][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 303.893891][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 304.093378][T13947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.150014][T13947] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.198477][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.205707][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.262957][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.270183][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.452012][T13955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.678127][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 304.693955][T13955] veth0_vlan: entered promiscuous mode [ 304.694765][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 304.742960][T13955] veth1_vlan: entered promiscuous mode [ 304.993287][T13955] veth0_macvtap: entered promiscuous mode [ 305.079462][T13955] veth1_macvtap: entered promiscuous mode [ 305.140663][T13947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.228317][T13955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.278800][T13955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.354662][T13955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.375701][T13955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.384455][T13955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.402770][T13955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.642693][T14367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 305.691527][T13947] veth0_vlan: entered promiscuous mode [ 305.723326][T13947] veth1_vlan: entered promiscuous mode [ 305.953770][T14383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1801'. [ 306.327272][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.335222][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.430132][T13947] veth0_macvtap: entered promiscuous mode [ 306.437910][T14394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'. [ 306.473490][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.482675][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.494614][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1806'. [ 306.513714][T13947] veth1_macvtap: entered promiscuous mode [ 306.610835][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.626714][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.637557][ T6303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.660392][T13947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.718215][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.740145][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.751565][ T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.778101][T13947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.805613][ T6303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.828639][T13947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.849358][ T6303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.863992][T13947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.873469][T13947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.911224][T13947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.957467][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 306.995827][ T8978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.010119][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 307.031624][T14414] netlink: 'syz.1.1809': attribute type 7 has an invalid length. [ 307.246291][ T5934] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.308023][ T5934] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.456583][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.538467][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.569280][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.614544][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1813'. [ 307.623726][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.632120][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.857414][ T972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.933118][T14444] netlink: 'syz.1.1814': attribute type 21 has an invalid length. [ 307.945976][ T5934] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.984333][T14444] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1814'. [ 308.136003][ T972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.497505][ T972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.581837][T14470] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1818'. [ 308.740972][ T972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.001991][ T972] bridge_slave_1: left allmulticast mode [ 309.028354][ T972] bridge_slave_1: left promiscuous mode [ 309.042697][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.068695][ T972] bridge_slave_0: left allmulticast mode [ 309.088412][ T972] bridge_slave_0: left promiscuous mode [ 309.094231][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.107070][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.119013][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.130854][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.143882][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.161438][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.561753][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.577422][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.588623][ T972] bond0 (unregistering): Released all slaves [ 309.640986][T14479] xfrm0 speed is unknown, defaulting to 1000 [ 309.894284][ T972] hsr_slave_0: left promiscuous mode [ 309.902246][ T972] hsr_slave_1: left promiscuous mode [ 309.912081][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.924289][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.932776][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.944834][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.969658][ T972] veth1_macvtap: left promiscuous mode [ 309.975242][ T972] veth0_macvtap: left promiscuous mode [ 309.984409][ T972] veth1_vlan: left promiscuous mode [ 309.990586][ T972] veth0_vlan: left promiscuous mode [ 310.382152][ T972] team0 (unregistering): Port device team_slave_1 removed [ 310.421039][ T972] team0 (unregistering): Port device team_slave_0 removed [ 310.746763][T14502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.101192][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 311.258435][ T5842] Bluetooth: hci0: command tx timeout [ 311.396653][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.443287][T14479] chnl_net:caif_netlink_parms(): no params data found [ 311.451517][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.471124][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.491342][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.505123][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.671535][T14543] nr0: entered promiscuous mode [ 311.932221][T14534] xfrm0 speed is unknown, defaulting to 1000 [ 311.979990][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1830'. [ 311.991232][T14564] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1832'. [ 312.014147][T14564] gretap0: entered promiscuous mode [ 312.041558][T14564] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1832'. [ 312.053824][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.065516][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.072756][T14479] bridge_slave_0: entered allmulticast mode [ 312.093512][T14479] bridge_slave_0: entered promiscuous mode [ 312.108660][T14567] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 312.123974][T14564] 0ªî{X¹¦: renamed from gretap0 [ 312.133308][T14564] 0ªî{X¹¦: left promiscuous mode [ 312.144149][T14564] 0ªî{X¹¦: entered allmulticast mode [ 312.155023][T14564] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 312.199948][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.210263][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.217702][T14479] bridge_slave_1: entered allmulticast mode [ 312.225770][T14479] bridge_slave_1: entered promiscuous mode [ 312.362135][T14582] netlink: 'syz.2.1835': attribute type 39 has an invalid length. [ 312.381471][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.492047][ T972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.648227][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.669166][T14598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.814355][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 312.862697][ T972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.947343][T14479] team0: Port device team_slave_0 added [ 313.048147][ T972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.077180][T14479] team0: Port device team_slave_1 added [ 313.101915][T14613] IPVS: set_ctl: invalid protocol: 44 172.20.20.40:20001 [ 313.202250][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 313.248435][ T972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.312849][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.324621][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.355407][ T5842] Bluetooth: hci0: command tx timeout [ 313.384260][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.397492][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 313.463577][T14625] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1841'. [ 313.480347][T14625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.534514][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.552808][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.585857][ T5842] Bluetooth: hci4: command tx timeout [ 313.603657][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.779118][T14479] hsr_slave_0: entered promiscuous mode [ 313.793527][T14479] hsr_slave_1: entered promiscuous mode [ 313.807165][T14479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.817397][T14479] Cannot create hsr debugfs directory [ 314.005035][T14534] chnl_net:caif_netlink_parms(): no params data found [ 314.058282][ T5842] Bluetooth: hci3: command 0x0401 tx timeout [ 314.405150][ T972] bridge_slave_1: left allmulticast mode [ 314.416476][ T972] bridge_slave_1: left promiscuous mode [ 314.422346][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.450347][ T972] bridge_slave_0: left allmulticast mode [ 314.465459][ T972] bridge_slave_0: left promiscuous mode [ 314.476729][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.929898][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.942153][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.953708][ T972] bond0 (unregistering): Released all slaves [ 315.194981][T14693] raw_sendmsg: syz.4.1858 forgot to set AF_INET. Fix it! [ 315.387282][T14534] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.394511][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 315.403774][T14534] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.413712][T14534] bridge_slave_0: entered allmulticast mode [ 315.419947][ T5842] Bluetooth: hci0: command tx timeout [ 315.422292][T14534] bridge_slave_0: entered promiscuous mode [ 315.491237][T14534] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.513060][T14534] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.532099][T14534] bridge_slave_1: entered allmulticast mode [ 315.544648][T14534] bridge_slave_1: entered promiscuous mode [ 315.655650][ T5842] Bluetooth: hci4: command tx timeout [ 315.720401][T14534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.775926][ T972] hsr_slave_0: left promiscuous mode [ 315.791987][ T972] hsr_slave_1: left promiscuous mode [ 315.801822][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.810075][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.839685][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.848186][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.894978][ T972] veth1_macvtap: left promiscuous mode [ 315.900788][ T972] veth0_macvtap: left promiscuous mode [ 315.913480][ T972] veth1_vlan: left promiscuous mode [ 315.919655][ T972] veth0_vlan: left promiscuous mode [ 316.484334][ T972] team0 (unregistering): Port device team_slave_1 removed [ 316.522898][ T972] team0 (unregistering): Port device team_slave_0 removed [ 316.899747][T14534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.173899][T14534] team0: Port device team_slave_0 added [ 317.213479][T14534] team0: Port device team_slave_1 added [ 317.367135][T14534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.374459][T14534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.407379][T14534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.434131][T14534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.445619][T14534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.480372][T14534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.495680][ T5842] Bluetooth: hci0: command tx timeout [ 317.629295][T14534] hsr_slave_0: entered promiscuous mode [ 317.638519][T14534] hsr_slave_1: entered promiscuous mode [ 317.644957][T14534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.652975][T14534] Cannot create hsr debugfs directory [ 317.736750][ T5842] Bluetooth: hci4: command tx timeout [ 318.033265][T14479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.082288][T14479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.126521][T14479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.195230][T14479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.307631][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 318.732160][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.806709][T14534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.851247][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.863642][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 318.882666][T14534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.923178][T14534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.956612][T14534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.976928][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.984187][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.034138][T14806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.071215][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.078401][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.418667][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 319.452346][T14534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.476215][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 319.489365][T14824] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.559763][T14534] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.592065][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.599325][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.671099][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.678295][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.699947][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.748559][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.815855][ T5842] Bluetooth: hci4: command tx timeout [ 319.972286][T14479] veth0_vlan: entered promiscuous mode [ 320.023291][T14479] veth1_vlan: entered promiscuous mode [ 320.123941][T14479] veth0_macvtap: entered promiscuous mode [ 320.170986][T14479] veth1_macvtap: entered promiscuous mode [ 320.253384][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.286905][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.319638][T14534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.349542][T14479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.369795][T14479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.395079][T14479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.404235][T14479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.661337][T14534] veth0_vlan: entered promiscuous mode [ 320.714845][T14534] veth1_vlan: entered promiscuous mode [ 320.767534][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.788284][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.914165][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.944852][T14534] veth0_macvtap: entered promiscuous mode [ 320.962366][T14534] veth1_macvtap: entered promiscuous mode [ 320.974932][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.071628][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.117074][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.167226][T14534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.194447][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.230266][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.257637][T14534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.432962][T14899] syzkaller0: refused to change device tx_queue_len [ 321.454478][T14902] IPVS: Error joining to the multicast group [ 321.489533][T14534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.516204][T14534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.535554][T14534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.544420][T14534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.723997][ T1340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.907311][ T1340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.101922][ T1340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.213755][ T1340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.244097][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.270495][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.320430][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.330872][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.580582][ T1340] bridge_slave_1: left allmulticast mode [ 322.586679][ T1340] bridge_slave_1: left promiscuous mode [ 322.592489][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.607165][ T1340] bridge_slave_0: left allmulticast mode [ 322.613112][ T1340] bridge_slave_0: left promiscuous mode [ 322.620012][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.461534][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.477105][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.498598][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.509771][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.523220][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.613016][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.631630][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.642564][ T1340] bond0 (unregistering): Released all slaves [ 323.766987][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 324.064877][ T1340] hsr_slave_0: left promiscuous mode [ 324.071726][ T1340] hsr_slave_1: left promiscuous mode [ 324.078958][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.090732][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.099409][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.107257][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.134230][ T1340] veth1_macvtap: left promiscuous mode [ 324.140267][ T1340] veth0_macvtap: left promiscuous mode [ 324.147076][ T1340] veth1_vlan: left promiscuous mode [ 324.152442][ T1340] veth0_vlan: left promiscuous mode [ 324.587165][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 324.623884][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 325.084661][T14965] chnl_net:caif_netlink_parms(): no params data found [ 325.315589][T14992] gtp0: entered promiscuous mode [ 325.335575][T14992] gtp0: entered allmulticast mode [ 325.575582][ T5842] Bluetooth: hci0: command tx timeout [ 325.592554][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.629076][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.660795][T14965] bridge_slave_0: entered allmulticast mode [ 325.713045][T14965] bridge_slave_0: entered promiscuous mode [ 326.012470][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.022668][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.030896][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.042444][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.050572][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.089417][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.154675][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.165600][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.172834][T14965] bridge_slave_1: entered allmulticast mode [ 326.187708][T14965] bridge_slave_1: entered promiscuous mode [ 326.358317][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 326.441054][T15036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 326.531234][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.584690][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 326.621549][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.662102][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.773596][T15027] xfrm0 speed is unknown, defaulting to 1000 [ 326.841617][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.961352][T14965] team0: Port device team_slave_0 added [ 327.002389][T14965] team0: Port device team_slave_1 added [ 327.080812][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.259184][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.273999][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.333759][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.426619][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.448289][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.481809][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.656213][ T5842] Bluetooth: hci0: command tx timeout [ 327.737958][T14965] hsr_slave_0: entered promiscuous mode [ 327.745620][T14965] hsr_slave_1: entered promiscuous mode [ 327.752166][T14965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.763090][T14965] Cannot create hsr debugfs directory [ 327.812450][T15094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1929'. [ 327.859137][T15094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1929'. [ 327.873893][T15095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1929'. [ 328.021351][ T3506] bridge_slave_1: left allmulticast mode [ 328.033904][ T3506] bridge_slave_1: left promiscuous mode [ 328.040946][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.063489][ T3506] bridge_slave_0: left allmulticast mode [ 328.074022][ T3506] bridge_slave_0: left promiscuous mode [ 328.086853][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.137578][ T5842] Bluetooth: hci4: command tx timeout [ 328.564480][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.579253][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.590878][ T3506] bond0 (unregistering): Released all slaves [ 328.875366][T15131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1935'. [ 328.893147][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 328.917473][T15138] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1936'. [ 329.112175][T15146] netlink: 'syz.4.1936': attribute type 39 has an invalid length. [ 329.132474][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 329.198738][T15027] chnl_net:caif_netlink_parms(): no params data found [ 329.301046][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.558740][ T3506] hsr_slave_0: left promiscuous mode [ 329.579080][ T3506] hsr_slave_1: left promiscuous mode [ 329.585197][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.607896][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.636823][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.651153][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.682196][ T3506] veth1_macvtap: left promiscuous mode [ 329.690223][ T3506] veth0_macvtap: left promiscuous mode [ 329.702334][ T3506] veth1_vlan: left promiscuous mode [ 329.708701][ T3506] veth0_vlan: left promiscuous mode [ 329.735784][ T5842] Bluetooth: hci0: command tx timeout [ 330.218621][ T5842] Bluetooth: hci4: command tx timeout [ 330.284520][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 330.325162][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 330.754178][T15169] tipc: Enabling of bearer rejected, failed to enable media [ 331.081212][T15191] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.114818][T15191] tipc: Enabled bearer , priority 10 [ 331.215804][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.355666][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.437906][T15208] __nla_validate_parse: 1 callbacks suppressed [ 331.437925][T15208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1951'. [ 331.495619][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.515761][T15027] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.527356][T15027] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.545197][T15027] bridge_slave_0: entered allmulticast mode [ 331.566436][T15027] bridge_slave_0: entered promiscuous mode [ 331.577202][T15027] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.594520][T15027] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.610332][T15027] bridge_slave_1: entered allmulticast mode [ 331.627501][T15027] bridge_slave_1: entered promiscuous mode [ 331.635394][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.693464][T15222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1955'. [ 331.785399][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.815671][ T5842] Bluetooth: hci0: command tx timeout [ 331.837935][T15027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.869215][T15027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.925639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.051017][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.057919][T15027] team0: Port device team_slave_0 added [ 332.066012][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.074867][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.084836][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.121931][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.124994][T15027] team0: Port device team_slave_1 added [ 332.132353][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.149933][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.160327][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.175706][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 332.215690][ T5883] tipc: Node number set to 4069902890 [ 332.295446][ T5842] Bluetooth: hci4: command tx timeout [ 332.365364][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.429391][T15027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.485357][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.523059][T15027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.573876][T15027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.581765][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.613475][T15027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.635376][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.643192][T14965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.683859][T14965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.707107][T14965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.833691][T14965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.961253][T15027] hsr_slave_0: entered promiscuous mode [ 332.995026][T15027] hsr_slave_1: entered promiscuous mode [ 333.012959][T15027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.031346][T15027] Cannot create hsr debugfs directory [ 333.199994][T15269] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 333.636869][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.697133][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.733687][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.740919][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.814022][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.821267][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.248097][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.376384][ T5842] Bluetooth: hci4: command tx timeout [ 334.388735][T15027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.438342][T15027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.470970][T15027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.516358][T15027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.618667][T14965] veth0_vlan: entered promiscuous mode [ 334.682553][T14965] veth1_vlan: entered promiscuous mode [ 334.782150][T14965] veth0_macvtap: entered promiscuous mode [ 334.830087][T14965] veth1_macvtap: entered promiscuous mode [ 334.874602][T15027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.919650][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.951462][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.988096][T14965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.010726][T14965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.022916][T14965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.033487][T14965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.082074][T15352] macvlan0: left allmulticast mode [ 335.087608][T15352] netlink: 'syz.4.1989': attribute type 2 has an invalid length. [ 335.154456][T15027] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.260294][T15359] netlink: 'syz.1.1991': attribute type 7 has an invalid length. [ 335.410420][T15365] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 335.430804][T15356] bond0 (unregistering): Released all slaves [ 335.476235][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.483387][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.517206][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.524360][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.589744][T15359] : entered promiscuous mode [ 335.625784][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.659351][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.774011][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.804039][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.003936][T15373] x_tables: duplicate underflow at hook 1 [ 336.126835][T15377] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 336.141535][T15379] net_ratelimit: 3 callbacks suppressed [ 336.141554][T15379] openvswitch: netlink: Actions may not be safe on all matching packets [ 336.284563][T15027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.295512][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.454866][T15387] tipc: Enabled bearer , priority 0 [ 336.531582][T15387] syzkaller0: entered promiscuous mode [ 336.542856][T15387] syzkaller0: entered allmulticast mode [ 336.554069][T15387] tipc: Resetting bearer [ 336.576530][T15392] __nla_validate_parse: 35 callbacks suppressed [ 336.576547][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 336.611647][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 336.625202][T15392] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2000'. [ 336.708162][ T3506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.882702][ T3506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.902795][T15386] tipc: Resetting bearer [ 337.335621][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.772502][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.796004][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.804208][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.825198][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.837476][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.292131][T15386] tipc: Disabling bearer [ 338.323019][ T3506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.375461][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.442801][ T3506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.502889][T15027] veth0_vlan: entered promiscuous mode [ 338.537296][T15413] xfrm0 speed is unknown, defaulting to 1000 [ 338.612008][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 338.641697][T15027] veth1_vlan: entered promiscuous mode [ 338.738297][T15427] bond4: entered promiscuous mode [ 339.129537][ T3506] bridge_slave_1: left allmulticast mode [ 339.142542][ T3506] bridge_slave_1: left promiscuous mode [ 339.159947][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.185902][ T3506] bridge_slave_0: left allmulticast mode [ 339.208858][ T3506] bridge_slave_0: left promiscuous mode [ 339.222091][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.425406][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.649603][T15472] netlink: 'syz.1.2013': attribute type 24 has an invalid length. [ 339.721399][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.733703][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.745075][ T3506] bond0 (unregistering): Released all slaves [ 339.768361][T15027] veth0_macvtap: entered promiscuous mode [ 339.895838][ T55] Bluetooth: hci0: command tx timeout [ 340.020590][T15485] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 340.051857][T15027] veth1_macvtap: entered promiscuous mode [ 340.106076][ T30] audit: type=1800 audit(1746520515.611:5): pid=15485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2014" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=2783 res=0 errno=0 [ 340.298088][T15500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2018'. [ 340.321802][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2018'. [ 340.360455][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2018'. [ 340.395400][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2018'. [ 340.437392][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2016'. [ 340.455542][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.612407][ T3506] hsr_slave_0: left promiscuous mode [ 340.622083][ T3506] hsr_slave_1: left promiscuous mode [ 340.637305][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.654133][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.664718][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.672733][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.684278][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 340.737639][ T3506] veth1_macvtap: left promiscuous mode [ 340.743234][ T3506] veth0_macvtap: left promiscuous mode [ 340.769386][ T3506] veth1_vlan: left promiscuous mode [ 340.791081][ T3506] veth0_vlan: left promiscuous mode [ 341.487082][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 341.495464][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.537435][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 341.879999][T15413] chnl_net:caif_netlink_parms(): no params data found [ 341.893587][T15027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.913149][T15027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.986804][ T55] Bluetooth: hci0: command tx timeout [ 342.076061][T15547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.121168][T15027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.130454][T15027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.142131][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 342.151869][T15027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.169442][T15027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.182991][T15547] tipc: Enabling of bearer rejected, failed to enable media [ 342.224391][T15552] vlan1: entered allmulticast mode [ 342.242553][T15552] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 342.265184][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 342.275959][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 342.290566][T15556] veth0: entered promiscuous mode [ 342.307203][T15557] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2026'. [ 342.376453][T15554] veth0: left promiscuous mode [ 342.421357][T15560] geneve1: entered promiscuous mode [ 342.438912][T15560] geneve1: entered allmulticast mode [ 342.472146][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 342.513061][T15413] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.523807][T15413] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.531484][T15413] bridge_slave_0: entered allmulticast mode [ 342.537654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.555131][T15413] bridge_slave_0: entered promiscuous mode [ 342.619222][T15568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.647575][T15568] team0: Port device bond0 added [ 342.684875][T15413] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.712313][T15413] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.748642][T15413] bridge_slave_1: entered allmulticast mode [ 342.766912][T15413] bridge_slave_1: entered promiscuous mode [ 342.807558][T15581] warn_alloc: 3 callbacks suppressed [ 342.807577][T15581] syz.2.2032: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.833325][T15581] CPU: 1 UID: 0 PID: 15581 Comm: syz.2.2032 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 342.833355][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 342.833376][T15581] Call Trace: [ 342.833388][T15581] [ 342.833398][T15581] dump_stack_lvl+0x189/0x250 [ 342.833439][T15581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.833469][T15581] ? __pfx__printk+0x10/0x10 [ 342.833490][T15581] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.833524][T15581] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.833560][T15581] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 342.833596][T15581] warn_alloc+0x214/0x310 [ 342.833624][T15581] ? __pfx___schedule+0x10/0x10 [ 342.833648][T15581] ? __pfx_warn_alloc+0x10/0x10 [ 342.833675][T15581] ? kasan_save_track+0x4f/0x80 [ 342.833697][T15581] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 342.833720][T15581] ? xskq_create+0x56/0x170 [ 342.833742][T15581] ? __x64_sys_setsockopt+0x18b/0x220 [ 342.833764][T15581] ? do_syscall_64+0xf6/0x210 [ 342.833786][T15581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.833819][T15581] __vmalloc_node_range_noprof+0x125/0x12c0 [ 342.833881][T15581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.833913][T15581] ? __kasan_kmalloc+0x93/0xb0 [ 342.833943][T15581] vmalloc_user_noprof+0x74/0x80 [ 342.833972][T15581] ? xskq_create+0xbf/0x170 [ 342.833991][T15581] xskq_create+0xbf/0x170 [ 342.834016][T15581] xsk_init_queue+0xb0/0x110 [ 342.834039][T15581] xsk_setsockopt+0x43f/0x710 [ 342.834062][T15581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.834094][T15581] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 342.834116][T15581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.834138][T15581] do_sock_setsockopt+0x257/0x3e0 [ 342.834165][T15581] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 342.834186][T15581] ? __fget_files+0x2a/0x420 [ 342.834217][T15581] ? __fget_files+0x3a0/0x420 [ 342.834241][T15581] ? __fget_files+0x2a/0x420 [ 342.834275][T15581] __x64_sys_setsockopt+0x18b/0x220 [ 342.834314][T15581] do_syscall_64+0xf6/0x210 [ 342.834339][T15581] ? clear_bhb_loop+0x45/0xa0 [ 342.834364][T15581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.834384][T15581] RIP: 0033:0x7fa1f1d8e969 [ 342.834403][T15581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.834420][T15581] RSP: 002b:00007fa1f2c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.834440][T15581] RAX: ffffffffffffffda RBX: 00007fa1f1fb5fa0 RCX: 00007fa1f1d8e969 [ 342.834455][T15581] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 342.834468][T15581] RBP: 00007fa1f1e10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 342.834480][T15581] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.834492][T15581] R13: 0000000000000000 R14: 00007fa1f1fb5fa0 R15: 00007ffdef693b08 [ 342.834538][T15581] [ 342.834550][T15581] Mem-Info: [ 343.236867][T15581] active_anon:6731 inactive_anon:0 isolated_anon:0 [ 343.236867][T15581] active_file:1389 inactive_file:38452 isolated_file:0 [ 343.236867][T15581] unevictable:768 dirty:40 writeback:0 [ 343.236867][T15581] slab_reclaimable:10843 slab_unreclaimable:103557 [ 343.236867][T15581] mapped:32143 shmem:2935 pagetables:860 [ 343.236867][T15581] sec_pagetables:0 bounce:0 [ 343.236867][T15581] kernel_misc_reclaimable:0 [ 343.236867][T15581] free:1335952 free_pcp:2289 free_cma:0 [ 343.302680][T15581] Node 0 active_anon:27024kB inactive_anon:0kB active_file:5556kB inactive_file:153736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128672kB dirty:160kB writeback:0kB shmem:10204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12260kB pagetables:3440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.344645][T15413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.349162][T15581] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.420000][T15413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.427049][T15581] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.457795][T15581] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 343.463714][T15581] Node 0 DMA32 free:1421996kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:30116kB inactive_anon:0kB active_file:5556kB inactive_file:153644kB unevictable:1536kB writepending:156kB present:3129332kB managed:2564156kB mlocked:0kB bounce:0kB free_pcp:4032kB local_pcp:1576kB free_cma:0kB [ 343.500228][T15581] lowmem_reserve[]: 0 0 0 0 0 [ 343.505344][T15581] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 343.546485][T15581] lowmem_reserve[]: 0 0 0 0 0 [ 343.551379][T15581] Node 1 Normal free:3908156kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:424kB local_pcp:232kB free_cma:0kB [ 343.583404][T15581] lowmem_reserve[]: 0 0 0 0 0 [ 343.588595][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.592393][T15413] team0: Port device team_slave_0 added [ 343.601307][T15581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.606997][T15413] team0: Port device team_slave_1 added [ 343.620719][T15581] Node 0 DMA32: 917*4kB (U) 308*8kB (UE) 112*16kB (UE) 145*32kB (UE) 43*64kB (UME) 6*128kB (UME) 30*256kB (U) 37*512kB (UE) 21*1024kB (UM) 2*2048kB (M) 330*4096kB (UME) = 1419988kB [ 343.648530][T15581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.674263][T15581] Node 1 Normal: 241*4kB (UE) 63*8kB (UME) 44*16kB (UME) 228*32kB (UME) 115*64kB (UME) 41*128kB (UME) 12*256kB (UM) 8*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3908156kB [ 343.693421][T15581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.704592][T15581] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.714404][T15581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.724613][T15581] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.734453][T15581] 44101 total pagecache pages [ 343.739687][T15581] 0 pages in swap cache [ 343.743896][T15581] Free swap = 124996kB [ 343.757634][T15581] Total swap = 124996kB [ 343.761851][T15581] 2097051 pages RAM [ 343.769234][T15581] 0 pages HighMem/MovableOnly [ 343.774136][T15581] 424354 pages reserved [ 343.779702][T15581] 0 pages cma reserved [ 343.791178][T15413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.810362][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.885468][T15413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.919180][T15413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.939151][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.986191][T15609] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2039'. [ 344.003545][T15607] netlink: 'syz.4.2038': attribute type 4 has an invalid length. [ 344.005696][T15413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.011467][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 344.043794][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.051922][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.060344][ T55] Bluetooth: hci0: command tx timeout [ 344.157228][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 344.251531][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 344.267312][T15619] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2042'. [ 344.284442][T15413] hsr_slave_0: entered promiscuous mode [ 344.293509][T15413] hsr_slave_1: entered promiscuous mode [ 344.303617][T15619] netlink: 'syz.4.2042': attribute type 5 has an invalid length. [ 344.312606][T15413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.321265][T15413] Cannot create hsr debugfs directory [ 344.373807][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.382882][T15628] IPv6: Can't replace route, no match found [ 344.390598][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.518105][T15635] nr0: left promiscuous mode [ 344.551231][T15634] sctp: [Deprecated]: syz.4.2045 (pid 15634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.551231][T15634] Use struct sctp_sack_info instead [ 344.615809][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.835183][T15647] syzkaller1: entered promiscuous mode [ 344.858741][T15647] syzkaller1: entered allmulticast mode [ 344.934729][T15651] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 345.022807][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.120318][T15651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.182541][T15653] bond5: (slave gretap1): making interface the new active one [ 345.236277][T15653] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 345.279074][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.353377][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.440444][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.493857][T15413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.521060][T15413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.537334][T15413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.564520][T15413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.655491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.709677][ T53] bridge_slave_1: left allmulticast mode [ 345.716529][ T53] bridge_slave_1: left promiscuous mode [ 345.722323][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.733581][ T53] bridge_slave_0: left allmulticast mode [ 345.743184][ T53] bridge_slave_0: left promiscuous mode [ 345.750205][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.145460][ T55] Bluetooth: hci0: command tx timeout [ 346.209756][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.229258][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.244825][ T53] bond0 (unregistering): Released all slaves [ 346.391408][T15413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.448178][T15413] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.509221][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.516452][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.577745][ T53] hsr_slave_0: left promiscuous mode [ 346.583910][ T53] hsr_slave_1: left promiscuous mode [ 346.598635][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.607346][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.617500][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.624976][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.651663][ T53] veth1_macvtap: left promiscuous mode [ 346.657644][ T53] veth0_macvtap: left promiscuous mode [ 346.663338][ T53] veth1_vlan: left promiscuous mode [ 346.670956][ T53] veth0_vlan: left promiscuous mode [ 346.695426][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.433375][ T53] team0 (unregistering): Port device team_slave_1 removed [ 347.493455][ T53] team0 (unregistering): Port device team_slave_0 removed [ 347.503027][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.513170][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.522656][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.537995][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.546514][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.745412][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.904277][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.911514][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.982354][T15713] veth0: entered promiscuous mode [ 347.991446][T15707] veth0: left promiscuous mode [ 348.093630][T15718] xfrm0 speed is unknown, defaulting to 1000 [ 348.714777][T15758] openvswitch: netlink: Message has -1 unknown bytes. [ 348.775427][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.881548][T15413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.948424][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 348.988025][T15718] chnl_net:caif_netlink_parms(): no params data found [ 349.023254][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 349.065723][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2065'. [ 349.117644][T15776] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2065'. [ 349.190203][T15413] veth0_vlan: entered promiscuous mode [ 349.244203][T15786] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 349.368263][T15718] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.395584][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.402957][T15718] bridge_slave_0: entered allmulticast mode [ 349.424680][T15718] bridge_slave_0: entered promiscuous mode [ 349.441381][T15718] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.454210][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.462401][T15718] bridge_slave_1: entered allmulticast mode [ 349.470841][T15718] bridge_slave_1: entered promiscuous mode [ 349.492851][T15413] veth1_vlan: entered promiscuous mode [ 349.576228][ T55] Bluetooth: hci4: command tx timeout [ 349.611164][T15799] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 349.639988][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 349.678052][T15718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.691824][T15801] netlink: 'syz.1.2076': attribute type 5 has an invalid length. [ 349.716001][T15718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.803359][T15718] team0: Port device team_slave_0 added [ 349.815443][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.849660][T15812] can: request_module (can-proto-0) failed. [ 349.854324][T15718] team0: Port device team_slave_1 added [ 349.953480][T15718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.976400][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.007443][T15718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.044908][T15413] veth0_macvtap: entered promiscuous mode [ 350.068737][T15718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.088176][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.129656][T15718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.248774][T15413] veth1_macvtap: entered promiscuous mode [ 350.269791][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 350.403073][T15834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.410420][T15834] IPv6: NLM_F_CREATE should be set when creating new route [ 350.505692][T15718] hsr_slave_0: entered promiscuous mode [ 350.536879][T15718] hsr_slave_1: entered promiscuous mode [ 350.553238][T15718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.585194][T15718] Cannot create hsr debugfs directory [ 350.621944][T15413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.827761][T15413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.855408][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.957185][T15413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.985453][T15413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.025658][T15413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.038701][T15413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.576618][T15903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 351.594421][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.619159][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.658757][ T55] Bluetooth: hci4: command tx timeout [ 351.895452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.074036][ T5090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.110687][ T5090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.426931][T15933] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 352.592246][T15957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2105'. [ 352.936567][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.953094][T15978] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 353.099006][ T1340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.377265][ T1340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.430536][T15718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.464669][T15718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.486246][T15718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.547495][ T1340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.570187][T15718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.652725][ T1340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.737838][ T55] Bluetooth: hci4: command tx timeout [ 353.872357][T15718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.908547][ T1340] bridge_slave_1: left allmulticast mode [ 353.915062][ T1340] bridge_slave_1: left promiscuous mode [ 353.921817][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.932640][ T1340] bridge_slave_0: left allmulticast mode [ 353.939456][ T1340] bridge_slave_0: left promiscuous mode [ 353.945222][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.975401][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.284112][T16025] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 354.541853][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 354.593412][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 354.729729][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.758422][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.782998][ T1340] bond0 (unregistering): Released all slaves [ 354.825896][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.839513][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.864208][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.877036][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.887953][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.933153][T15718] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.025372][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.061106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.068358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.130156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.137422][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.160724][T16047] xfrm0 speed is unknown, defaulting to 1000 [ 355.420414][T16067] netlink: 'syz.1.2120': attribute type 11 has an invalid length. [ 355.439726][T16067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2120'. [ 355.641115][ T1340] hsr_slave_0: left promiscuous mode [ 355.648306][ T1340] hsr_slave_1: left promiscuous mode [ 355.656565][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.672836][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.683133][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.692111][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.700154][T16078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 355.764954][ T1340] veth1_macvtap: left promiscuous mode [ 355.773484][ T1340] veth0_macvtap: left promiscuous mode [ 355.779943][ T1340] veth1_vlan: left promiscuous mode [ 355.785821][ T1340] veth0_vlan: left promiscuous mode [ 355.815536][ T55] Bluetooth: hci4: command tx timeout [ 356.065414][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.284173][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 356.324068][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 356.790099][T16092] netlink: 'syz.4.2125': attribute type 2 has an invalid length. [ 356.879168][T16096] netlink: 'syz.1.2126': attribute type 4 has an invalid length. [ 356.921151][T16097] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2125'. [ 356.938005][ T55] Bluetooth: hci0: command tx timeout [ 357.003225][T16096] netlink: 'syz.1.2126': attribute type 4 has an invalid length. [ 357.095528][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.221938][T15718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.235097][T16047] chnl_net:caif_netlink_parms(): no params data found [ 357.503813][T15718] veth0_vlan: entered promiscuous mode [ 357.517518][T16047] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.546339][T16047] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.564517][T16125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'. [ 357.578423][T16047] bridge_slave_0: entered allmulticast mode [ 357.607144][T16047] bridge_slave_0: entered promiscuous mode [ 357.648279][T16047] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.691444][T16047] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.710613][T16047] bridge_slave_1: entered allmulticast mode [ 357.727564][T16047] bridge_slave_1: entered promiscuous mode [ 357.935034][T16047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.972999][T16047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.135394][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.203686][T15718] veth1_vlan: entered promiscuous mode [ 358.232561][T16047] team0: Port device team_slave_0 added [ 358.342554][T16047] team0: Port device team_slave_1 added [ 358.489419][T16047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.510423][T16047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.547676][T16165] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 358.560894][T16047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.577633][T16047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.584672][T16047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.611631][T16047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.661209][T16174] openvswitch: netlink: Missing key (keys=40, expected=100) [ 358.684000][T16165] bond6: entered promiscuous mode [ 358.684477][T16174] SET target dimension over the limit! [ 358.694716][T16165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.749955][T16166] syzkaller0: entered promiscuous mode [ 358.755719][T16166] syzkaller0: entered allmulticast mode [ 358.782843][T16171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.790342][T16171] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 358.801384][T16171] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 358.817239][T16171] bond6: (slave wireguard1): making interface the new active one [ 358.825110][T16171] wireguard1: entered promiscuous mode [ 358.832488][T16171] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 359.019071][ T55] Bluetooth: hci0: command tx timeout [ 359.176891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.216972][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.291912][T16177] netlink: 'syz.2.2142': attribute type 3 has an invalid length. [ 360.299836][T16177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2142'. [ 360.371605][T16047] hsr_slave_0: entered promiscuous mode [ 360.397465][T16047] hsr_slave_1: entered promiscuous mode [ 360.419162][T16047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.428210][T16047] Cannot create hsr debugfs directory [ 360.495317][T15718] veth0_macvtap: entered promiscuous mode [ 360.785196][T15718] veth1_macvtap: entered promiscuous mode [ 360.849899][T16202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2150'. [ 360.881726][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 361.016634][T15718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.065691][T16216] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2152'. [ 361.096855][ T55] Bluetooth: hci0: command tx timeout [ 361.105247][T15718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.117620][T16216] nbd: illegal input index -8454144 [ 361.138321][T15718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.164505][T15718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.186011][T15718] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.194780][T15718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.255502][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.340655][T16224] netlink: 'syz.2.2154': attribute type 1 has an invalid length. [ 361.510078][T16224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.064186][T16240] can: request_module (can-proto-3) failed. [ 362.107863][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.134398][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.295655][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.342955][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.355245][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.460161][T16047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.555583][T16047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.581013][T16047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.619588][T16047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.657797][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 362.760361][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.971092][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.123790][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.176222][ C1] ================================================================== [ 363.177631][ T55] Bluetooth: hci0: command tx timeout [ 363.184324][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 363.197602][ C1] Read of size 2 at addr ffff88805ec8d82a by task syz-executor/15695 [ 363.205687][ C1] [ 363.208028][ C1] CPU: 1 UID: 0 PID: 15695 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 363.208058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 363.208072][ C1] Call Trace: [ 363.208080][ C1] [ 363.208089][ C1] dump_stack_lvl+0x189/0x250 [ 363.208124][ C1] ? __virt_addr_valid+0x18c/0x540 [ 363.208152][ C1] ? rcu_is_watching+0x15/0xb0 [ 363.208184][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.208213][ C1] ? rcu_is_watching+0x15/0xb0 [ 363.208244][ C1] ? lock_release+0x4b/0x3e0 [ 363.208274][ C1] ? __virt_addr_valid+0x18c/0x540 [ 363.208301][ C1] ? __virt_addr_valid+0x469/0x540 [ 363.208330][ C1] print_report+0xb4/0x290 [ 363.208355][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 363.208385][ C1] kasan_report+0x118/0x150 [ 363.208413][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 363.208454][ C1] rose_timer_expiry+0x471/0x4b0 [ 363.208485][ C1] call_timer_fn+0x17b/0x5f0 [ 363.208514][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 363.208543][ C1] ? call_timer_fn+0xbe/0x5f0 [ 363.208569][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 363.208602][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.208623][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.208644][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 363.208674][ C1] __run_timer_base+0x61a/0x860 [ 363.208711][ C1] ? ktime_get+0x3e/0x1f0 [ 363.208738][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 363.208761][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 363.208792][ C1] run_timer_softirq+0xb7/0x180 [ 363.208818][ C1] handle_softirqs+0x283/0x870 [ 363.208852][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 363.208873][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 363.208907][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 363.208934][ C1] __irq_exit_rcu+0xca/0x1f0 [ 363.208951][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 363.208974][ C1] irq_exit_rcu+0x9/0x30 [ 363.208990][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 363.209011][ C1] [ 363.209018][ C1] [ 363.209026][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.209048][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 363.209069][ C1] Code: 74 05 e8 0b d3 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 54 38 f6 65 8b 05 5c d5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 363.209087][ C1] RSP: 0018:ffffc90004fdf9a0 EFLAGS: 00000206 [ 363.209106][ C1] RAX: d13b40ea11738900 RBX: 0000000000000a02 RCX: d13b40ea11738900 [ 363.209121][ C1] RDX: 0000000000000000 RSI: ffffffff8d749ecb RDI: 0000000000000001 [ 363.209135][ C1] RBP: ffffc90004fdfa38 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 363.209150][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 363.209166][ C1] R13: ffffc90013eb0000 R14: ffffffff99aa7170 R15: 1ffff920009fbf34 [ 363.209193][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 363.209220][ C1] debug_check_no_obj_freed+0x451/0x470 [ 363.209262][ C1] remove_vm_area+0x1d3/0x300 [ 363.209291][ C1] ? __pfx_kcov_close+0x10/0x10 [ 363.209316][ C1] vfree+0x63/0x330 [ 363.209343][ C1] ? __pfx_kcov_close+0x10/0x10 [ 363.209367][ C1] kcov_close+0x28/0x50 [ 363.209390][ C1] __fput+0x449/0xa70 [ 363.209426][ C1] task_work_run+0x1d1/0x260 [ 363.209461][ C1] ? __pfx_task_work_run+0x10/0x10 [ 363.209488][ C1] ? kmem_cache_free+0x192/0x3f0 [ 363.209517][ C1] do_exit+0x8d6/0x2550 [ 363.209547][ C1] ? __pfx_do_exit+0x10/0x10 [ 363.209577][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.209609][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.209630][ C1] do_group_exit+0x21c/0x2d0 [ 363.209657][ C1] __x64_sys_exit_group+0x3f/0x40 [ 363.209680][ C1] x64_sys_call+0x21ba/0x21c0 [ 363.209698][ C1] do_syscall_64+0xf6/0x210 [ 363.209720][ C1] ? clear_bhb_loop+0x45/0xa0 [ 363.209741][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.209760][ C1] RIP: 0033:0x7f972d98e969 [ 363.209775][ C1] Code: Unable to access opcode bytes at 0x7f972d98e93f. [ 363.209785][ C1] RSP: 002b:00007fff3ede11d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 363.209803][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f972d98e969 [ 363.209817][ C1] RDX: 00007f972d98d3e0 RSI: 0000000000000004 RDI: 0000000000000043 [ 363.209829][ C1] RBP: 00007f972dbb6738 R08: 00007fff3eddef76 R09: 0000000000000008 [ 363.209841][ C1] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 363.209852][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 363.209873][ C1] [ 363.209879][ C1] [ 363.652055][ C1] Allocated by task 15413: [ 363.656472][ C1] kasan_save_track+0x3e/0x80 [ 363.661152][ C1] __kasan_kmalloc+0x93/0xb0 [ 363.665742][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 363.670610][ C1] fib6_info_alloc+0x30/0xf0 [ 363.675203][ C1] ip6_route_info_create+0x4b3/0x1360 [ 363.680575][ C1] addrconf_f6i_alloc+0x1c6/0x3f0 [ 363.685599][ C1] ipv6_add_addr+0x56e/0x1090 [ 363.690290][ C1] addrconf_add_linklocal+0x28c/0x6c0 [ 363.695669][ C1] addrconf_addr_gen+0x490/0x580 [ 363.700599][ C1] addrconf_init_auto_addrs+0x7b6/0xb80 [ 363.706137][ C1] addrconf_notify+0xacc/0x1010 [ 363.710986][ C1] notifier_call_chain+0x1b3/0x3e0 [ 363.716100][ C1] __dev_notify_flags+0x18d/0x2e0 [ 363.721127][ C1] netif_change_flags+0xe8/0x1a0 [ 363.726064][ C1] do_setlink+0xcb9/0x40d0 [ 363.730471][ C1] rtnl_newlink+0x160b/0x1c70 [ 363.735140][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 363.740074][ C1] netlink_rcv_skb+0x219/0x490 [ 363.744851][ C1] netlink_unicast+0x758/0x8d0 [ 363.749633][ C1] netlink_sendmsg+0x805/0xb30 [ 363.754400][ C1] __sock_sendmsg+0x219/0x270 [ 363.759093][ C1] __sys_sendto+0x3bd/0x520 [ 363.763626][ C1] __x64_sys_sendto+0xde/0x100 [ 363.768422][ C1] do_syscall_64+0xf6/0x210 [ 363.772928][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.778823][ C1] [ 363.781150][ C1] Freed by task 16089: [ 363.785214][ C1] kasan_save_track+0x3e/0x80 [ 363.789900][ C1] kasan_save_free_info+0x46/0x50 [ 363.794940][ C1] __kasan_slab_free+0x62/0x70 [ 363.799710][ C1] kfree+0x193/0x440 [ 363.803610][ C1] rcu_core+0xca5/0x1710 [ 363.807860][ C1] handle_softirqs+0x283/0x870 [ 363.812632][ C1] __irq_exit_rcu+0xca/0x1f0 [ 363.817219][ C1] irq_exit_rcu+0x9/0x30 [ 363.821464][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 363.827099][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.833079][ C1] [ 363.835403][ C1] Last potentially related work creation: [ 363.841118][ C1] kasan_save_stack+0x3e/0x60 [ 363.845792][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 363.850991][ C1] call_rcu+0x142/0x990 [ 363.855148][ C1] __ip6_del_rt+0x111/0x180 [ 363.859646][ C1] ip6_del_rt+0xb3/0x100 [ 363.863889][ C1] __ipv6_ifa_notify+0x5c7/0xac0 [ 363.868848][ C1] addrconf_ifdown+0xe69/0x1880 [ 363.873712][ C1] addrconf_notify+0x1bc/0x1010 [ 363.878560][ C1] notifier_call_chain+0x1b3/0x3e0 [ 363.883668][ C1] dev_close_many+0x29c/0x410 [ 363.888346][ C1] unregister_netdevice_many_notify+0x834/0x2330 [ 363.894673][ C1] default_device_exit_batch+0x819/0x890 [ 363.900300][ C1] cleanup_net+0x7a9/0xbd0 [ 363.904711][ C1] process_scheduled_works+0xadb/0x17a0 [ 363.910263][ C1] worker_thread+0x8a0/0xda0 [ 363.914853][ C1] kthread+0x70e/0x8a0 [ 363.918919][ C1] ret_from_fork+0x4b/0x80 [ 363.923329][ C1] ret_from_fork_asm+0x1a/0x30 [ 363.928096][ C1] [ 363.930414][ C1] The buggy address belongs to the object at ffff88805ec8d800 [ 363.930414][ C1] which belongs to the cache kmalloc-512 of size 512 [ 363.944477][ C1] The buggy address is located 42 bytes inside of [ 363.944477][ C1] freed 512-byte region [ffff88805ec8d800, ffff88805ec8da00) [ 363.958193][ C1] [ 363.960520][ C1] The buggy address belongs to the physical page: [ 363.966948][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ec8f000 pfn:0x5ec8c [ 363.977014][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 363.985515][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 363.994016][ C1] page_type: f5(slab) [ 363.998001][ C1] raw: 00fff00000000240 ffff88801a041c80 ffffea0000d13d10 ffffea0000af3c10 [ 364.006585][ C1] raw: ffff88805ec8f000 000000000010000e 00000000f5000000 0000000000000000 [ 364.015168][ C1] head: 00fff00000000240 ffff88801a041c80 ffffea0000d13d10 ffffea0000af3c10 [ 364.023835][ C1] head: ffff88805ec8f000 000000000010000e 00000000f5000000 0000000000000000 [ 364.032512][ C1] head: 00fff00000000002 ffffea00017b2301 00000000ffffffff 00000000ffffffff [ 364.041183][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 364.049848][ C1] page dumped because: kasan: bad access detected [ 364.056263][ C1] page_owner tracks the page as allocated [ 364.061966][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 86538161791, free_ts 26772156027 [ 364.082453][ C1] post_alloc_hook+0x1d8/0x230 [ 364.087250][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 364.092802][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 364.098616][ C1] alloc_pages_mpol+0x232/0x4a0 [ 364.103464][ C1] allocate_slab+0x8a/0x3b0 [ 364.107966][ C1] ___slab_alloc+0xbfc/0x1480 [ 364.112643][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 364.118015][ C1] set_kthread_struct+0xbb/0x340 [ 364.122954][ C1] copy_process+0x10b7/0x3b80 [ 364.127631][ C1] kernel_clone+0x21e/0x870 [ 364.132130][ C1] kernel_thread+0x10c/0x160 [ 364.136720][ C1] kthreadd+0x575/0x770 [ 364.140873][ C1] ret_from_fork+0x4b/0x80 [ 364.145332][ C1] ret_from_fork_asm+0x1a/0x30 [ 364.150112][ C1] page last free pid 1 tgid 1 stack trace: [ 364.155926][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 364.161049][ C1] free_contig_range+0x159/0x440 [ 364.165984][ C1] destroy_args+0x86/0x460 [ 364.170400][ C1] debug_vm_pgtable+0x3cf/0x410 [ 364.175259][ C1] do_one_initcall+0x233/0x820 [ 364.180045][ C1] do_initcall_level+0x137/0x1f0 [ 364.184986][ C1] do_initcalls+0x69/0xd0 [ 364.189318][ C1] kernel_init_freeable+0x3d9/0x570 [ 364.194953][ C1] kernel_init+0x1d/0x1d0 [ 364.199290][ C1] ret_from_fork+0x4b/0x80 [ 364.203714][ C1] ret_from_fork_asm+0x1a/0x30 [ 364.208471][ C1] [ 364.210790][ C1] Memory state around the buggy address: [ 364.216414][ C1] ffff88805ec8d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.224473][ C1] ffff88805ec8d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.232538][ C1] >ffff88805ec8d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.240594][ C1] ^ [ 364.245955][ C1] ffff88805ec8d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.254029][ C1] ffff88805ec8d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.262108][ C1] ================================================================== [ 364.270325][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 364.277544][ C1] CPU: 1 UID: 0 PID: 15695 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 364.289818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 364.299904][ C1] Call Trace: [ 364.303188][ C1] [ 364.306038][ C1] dump_stack_lvl+0x99/0x250 [ 364.310642][ C1] ? __asan_memcpy+0x40/0x70 [ 364.315232][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.320441][ C1] ? __pfx__printk+0x10/0x10 [ 364.325049][ C1] panic+0x2db/0x790 [ 364.328960][ C1] ? __pfx_panic+0x10/0x10 [ 364.333386][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 364.339286][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 364.345183][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.351518][ C1] ? print_memory_metadata+0x314/0x400 [ 364.356985][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 364.362099][ C1] check_panic_on_warn+0x89/0xb0 [ 364.367041][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 364.372152][ C1] end_report+0x78/0x160 [ 364.376402][ C1] kasan_report+0x129/0x150 [ 364.380912][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 364.386042][ C1] rose_timer_expiry+0x471/0x4b0 [ 364.390991][ C1] call_timer_fn+0x17b/0x5f0 [ 364.395583][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 364.401049][ C1] ? call_timer_fn+0xbe/0x5f0 [ 364.405745][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 364.410868][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.416063][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.421261][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 364.426723][ C1] __run_timer_base+0x61a/0x860 [ 364.431577][ C1] ? ktime_get+0x3e/0x1f0 [ 364.435909][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 364.441281][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 364.447546][ C1] run_timer_softirq+0xb7/0x180 [ 364.452413][ C1] handle_softirqs+0x283/0x870 [ 364.457183][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 364.461960][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 364.467250][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 364.472453][ C1] __irq_exit_rcu+0xca/0x1f0 [ 364.477041][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 364.482323][ C1] irq_exit_rcu+0x9/0x30 [ 364.486558][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 364.492211][ C1] [ 364.495133][ C1] [ 364.498054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.504027][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 364.510522][ C1] Code: 74 05 e8 0b d3 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 54 38 f6 65 8b 05 5c d5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 364.530131][ C1] RSP: 0018:ffffc90004fdf9a0 EFLAGS: 00000206 [ 364.536190][ C1] RAX: d13b40ea11738900 RBX: 0000000000000a02 RCX: d13b40ea11738900 [ 364.544159][ C1] RDX: 0000000000000000 RSI: ffffffff8d749ecb RDI: 0000000000000001 [ 364.552133][ C1] RBP: ffffc90004fdfa38 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 364.560100][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 364.568063][ C1] R13: ffffc90013eb0000 R14: ffffffff99aa7170 R15: 1ffff920009fbf34 [ 364.576052][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.582395][ C1] debug_check_no_obj_freed+0x451/0x470 [ 364.587961][ C1] remove_vm_area+0x1d3/0x300 [ 364.592642][ C1] ? __pfx_kcov_close+0x10/0x10 [ 364.597503][ C1] vfree+0x63/0x330 [ 364.601317][ C1] ? __pfx_kcov_close+0x10/0x10 [ 364.606165][ C1] kcov_close+0x28/0x50 [ 364.610331][ C1] __fput+0x449/0xa70 [ 364.614317][ C1] task_work_run+0x1d1/0x260 [ 364.618905][ C1] ? __pfx_task_work_run+0x10/0x10 [ 364.624027][ C1] ? kmem_cache_free+0x192/0x3f0 [ 364.628975][ C1] do_exit+0x8d6/0x2550 [ 364.633135][ C1] ? __pfx_do_exit+0x10/0x10 [ 364.637730][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.642928][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.648161][ C1] do_group_exit+0x21c/0x2d0 [ 364.652766][ C1] __x64_sys_exit_group+0x3f/0x40 [ 364.657793][ C1] x64_sys_call+0x21ba/0x21c0 [ 364.662506][ C1] do_syscall_64+0xf6/0x210 [ 364.667026][ C1] ? clear_bhb_loop+0x45/0xa0 [ 364.671707][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.677596][ C1] RIP: 0033:0x7f972d98e969 [ 364.682003][ C1] Code: Unable to access opcode bytes at 0x7f972d98e93f. [ 364.689013][ C1] RSP: 002b:00007fff3ede11d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 364.697426][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f972d98e969 [ 364.705414][ C1] RDX: 00007f972d98d3e0 RSI: 0000000000000004 RDI: 0000000000000043 [ 364.713380][ C1] RBP: 00007f972dbb6738 R08: 00007fff3eddef76 R09: 0000000000000008 [ 364.721343][ C1] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 364.729311][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 364.737289][ C1] [ 364.740633][ C1] Kernel Offset: disabled [ 364.744958][ C1] Rebooting in 86400 seconds..