last executing test programs: 16.443097914s ago: executing program 1 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1daa00240005000000950000000800"/24], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 16.330374926s ago: executing program 1 (id=1074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="4b385aa3949100dc6626c892b3bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r4], 0x34}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2, 0x30, 0x20000000, 0x3}, &(0x7f0000000340)=0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r7, 0x10d, 0xb, &(0x7f0000000040), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="898b76b6c7579b6dbc64e655f62108e5c7f9b5c0b5faef937be0a1163e6d870f23db556a37ab2fe9f166ed415a0f78516e71c9f667a7847cde18f10c13597e86df1c9711ff6128beac81ecd055af5d7da9a4430800"/99, @ANYRES64=0x0], 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x2, 0x0, @void, @value}, 0x10) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r12, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20002bbd700006dcdf250a00000008003c0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24009800}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x8, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000012"], 0x30}}, 0x0) accept$alg(r0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r13}, 0x20) 16.199373347s ago: executing program 1 (id=1075): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r5, @ANYBLOB="24003080200001800800010000e0ce0b0400038008000200030000000600010000"], 0x40}}, 0x0) 15.959511849s ago: executing program 1 (id=1078): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x9000, 0x5, 0x90, [], 0x0, 0x0, &(0x7f0000000440)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108) 9.297521122s ago: executing program 1 (id=1078): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x9000, 0x5, 0x90, [], 0x0, 0x0, &(0x7f0000000440)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108) 2.10425246s ago: executing program 2 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x9c, r2, 0x225d4e0ca6d4f90b, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000500000006001100040000000800150000000001000000006e657464657673696d0000008f0002006e657464657673696d300000080003000100000008000b000400000006001100010100000800150009000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000311ffc)=0x5, 0x4) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r4, 0x11e, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff16) (async) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="2f000000000008000001000100000800"], 0x10) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) sendto$inet6(r3, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket(0x22, 0x2, 0x59) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22, 0x9577, @loopback, 0x8}, 0x1c) (async) getsockopt$MRT6(r7, 0x29, 0xd0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.658454565s ago: executing program 0 (id=1302): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="4eca5ff30c020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000002300000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000fb00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010b9f7cd020000000000"], 0x310) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000380)="075fdaf9"}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000640)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 1.654736053s ago: executing program 4 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200001000000006a00fdfc7aa2d6a48d2506000000000002008000000000000000000008000200ac1e0001"], 0x24}}, 0x0) 1.612949079s ago: executing program 0 (id=1305): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000100)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 1.498399147s ago: executing program 0 (id=1307): select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) select(0x40, &(0x7f0000000540)={0xcf99, 0xfffffffffffffff4, 0x1, 0x9, 0x83d4, 0x4, 0x0, 0x7fff}, &(0x7f0000000580)={0x2, 0x9, 0x80000000, 0x40, 0x5, 0x41d, 0xffffffffffffffb2, 0x6}, &(0x7f00000005c0)={0x6, 0x80, 0x1, 0x2, 0x0, 0x7ff, 0x47f, 0x1ff}, &(0x7f0000000640)={r0, r1/1000+60000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, {[@noop, @ssrr={0x89, 0x3, 0xe8}, @timestamp_prespec={0x44, 0xc, 0x42, 0x3, 0xc, [{@empty, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) r5 = accept4(r3, &(0x7f0000000180)=@sco={0x1f, @fixed}, &(0x7f0000000300)=0x80, 0x80000) r6 = accept4$tipc(r5, &(0x7f0000000680), &(0x7f00000006c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x800008, 0x8010, r6, 0x1eec5000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x140d, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20000041) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000900)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "f9ffe6"}}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0x5}, &(0x7f0000000040)={0x5}, &(0x7f0000000100)={0x1}, 0x0) 1.497946792s ago: executing program 1 (id=1078): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x9000, 0x5, 0x90, [], 0x0, 0x0, &(0x7f0000000440)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108) 1.322475102s ago: executing program 3 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newqdisc={0x180, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x150, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x38, 0xaa7f, 0x9, 0x64de}}, @NETEM_LOSS_GI={0x18, 0x1, {0x10001, 0xff, 0x1, 0x2, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x10, 0x5, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7ff, 0xff, 0x8, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x840, 0x5, 0x8, 0xfffffffc, 0x9}}]}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "55ce530b56be2fa00894a77b716d1e8fab91d7b5f2d08ab349994db9eba4d6401d40c61fca9c4fd026d6e8e31092422a4bed1e"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000000, 0x8, 0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x653348e8, 0xff, 0x8, 0x2}}]}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa, 0x4, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc9d, 0x2, 0xd58, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80, 0x1, 0xc, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x1000, 0x1, 0x80000000}}]}]}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x48855}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newqdisc={0x180, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x150, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x38, 0xaa7f, 0x9, 0x64de}}, @NETEM_LOSS_GI={0x18, 0x1, {0x10001, 0xff, 0x1, 0x2, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x10, 0x5, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7ff, 0xff, 0x8, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x840, 0x5, 0x8, 0xfffffffc, 0x9}}]}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "55ce530b56be2fa00894a77b716d1e8fab91d7b5f2d08ab349994db9eba4d6401d40c61fca9c4fd026d6e8e31092422a4bed1e"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000000, 0x8, 0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x653348e8, 0xff, 0x8, 0x2}}]}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa, 0x4, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc9d, 0x2, 0xd58, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80, 0x1, 0xc, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x1000, 0x1, 0x80000000}}]}]}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x48855}, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da288a8", 0xe, 0x1051, &(0x7f0000000440)={0x11, 0x18, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r10, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r10, 0x7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="3f9d00000000000000001300000008000300", @ANYRES32=r16, @ANYBLOB], 0x5c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="3f9d00000000000000001300000008000300", @ANYRES32=r16, @ANYBLOB], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4881) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x7, 0xc}}}, 0x24}}, 0x84) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000000)=0x2) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000000)=0x2) 1.264747564s ago: executing program 0 (id=1309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r3, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840), 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000090000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r9, 0x810, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) 1.1341439s ago: executing program 2 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0xc, 0x1, 0x6, 0xc, 0x10}, @jmp={0x5, 0x0, 0x9, 0x6, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x51}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES64=r1, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES8, @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2000003, @void, @value}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) accept$alg(r7, 0x0, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r6}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r11, 0x0, 0x1, 0x0, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) r13 = socket$inet(0xa, 0x801, 0x84) connect$inet(r13, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r13, 0x8) r14 = accept4(r13, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x2}, {0x8}, 0x167, 0x0, 0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000b00)="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", 0x1af, 0x0, &(0x7f0000000880)={0x2, 0x120, {0x1, 0xc, 0x57, "94439e853cc2d30984abc6ea52a93b1e37c803649c9c369d4af59d2f7d3b6e24ba2755e891f1fa1750e97a1cda6cf93714faf5ef3600c0aa1455522483f7f6f3fe6ba79ac90add13a73ee34dddd9f3405af9c2954cf669", 0xbc, "8b991f22c811b98cff61c9c41fa63db894cd9309e9c4ea13c40b1522bdfc3b84b995d1177dee22d7bd7d7204d16c60009637d152552a64c85513286e3ec10430a310856a12766fec5d70f8becd4ce748df77bf07a8c5d5862400461f67b35462e052d6a5c433fe85d107a12e021f97bec570ff880666401fbe3133317310cb13eac5adb12e6160f0d85dc72aefd0b1e526cbff1d47aa6688290117a44cbd7e9b76df4429201402f211300fe2d96404ca42849db37b85610856623ad3"}}, 0x12c}) setsockopt(r14, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, r12, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20040800) r15 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000000000900000000010000000000001203000000000000000000000300000000130000000200000000000000005f00"], 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write(r15, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.012337333s ago: executing program 0 (id=1311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x7, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108) r3 = socket(0x23, 0x5, 0x9) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000002c0)={0x0, 0x2}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800d1}, 0x20000004) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb, 0xa8, @random="3776aa7cc23d30"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x1ff) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000800)=""/178, &(0x7f00000008c0)=0xb2) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000900)={0x0, 0x17, '\x00', [@generic={0x8, 0xb4, "8ea0d80fb8727d272dae24bea6ee40279fccb47b8898efe33d2c2881b5da3ad60465fbc29302bab399d63ce4e82814926b6efbce08bde8b9731bcbc9ae844a25577efbe999c09b6806f2bc83ff45e217ddfdcd3d887824202bf39da28403efe4496a3e91eaf9d4c932b549865dfaa14d3d0b1fdd3bd95a402c1378566c3e552b3c57e882932902fd6f17f6045860bcde6cf2007b16d21c0ab142ae1bd4bf970cbf4488cb64cded27f4572b50d7c0e27976fe1459"}, @padn]}, 0xc0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x174, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc024cfeef14e7351}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9a}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4188}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdfa}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000}, 0x20004080) accept$alg(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000c40)={0x0, 0x0, 0x6}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000c80)={0x56b9, 0x7, 0xd3, 0x1}, 0x10) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d80)={0x0, @rand_addr, @local}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x10, 0x1}, {0xa, 0x2}, {0x7, 0xf}}, [{0x8, 0xb, 0xc}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xd39bc182}, {0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20800) clock_gettime(0x0, &(0x7f0000000f40)={0x0, 0x0}) ppoll(&(0x7f0000000f00)=[{r3, 0x400}], 0x1, &(0x7f0000000f80)={r9, r10+60000000}, &(0x7f0000000fc0), 0x8) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r1, 0x100, 0xfffffffd, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x4c000) 917.401989ms ago: executing program 3 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x80, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffff915}, {0x6, 0x11, 0xf}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x7ff}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40428c0) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async, rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) splice(r6, 0x0, r4, 0x0, 0xc, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140b, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b40000000000008e1e000000000000006301a000000000009519c1030841b1202100000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="05000600cb000004e0c23bda", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) 598.152877ms ago: executing program 2 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x6, 0xd, 0x6040, 0x42, @loopback, @mcast1, 0x20, 0x10, 0x3, 0x10}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@newqdisc={0x134, 0x24, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfd6391bd7abfef0d, 0xfff3}, {0xb, 0xf}, {0xe, 0xffe0}}, [@q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x71}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc25}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2b}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1b}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)=@getsadinfo={0x1100, 0x23, 0x800, 0x70bd2d, 0x25dfdbfe, 0x0, [@user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x8, 0x1000, "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"}}, @replay_thresh={0x8, 0xb, 0x2}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@local, 0x4e23, 0x0, 0x4e24, 0x2, 0x2, 0x80, 0xa0, 0x2c, r4, r5}, {0x1, 0x4, 0x6, 0x2, 0x5, 0x6, 0x5, 0x18000000}, {0x8e, 0x8000, 0x3, 0x2}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}}]}, 0x1100}, 0x1, 0x0, 0x0, 0x40}, 0x408d0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="20060000", @ANYRES16=r6, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x8000}, 0x20042821) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r3, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000f340000000000000006040002000000d78ab21a03c44932cf73ef0dc84d342e006bcf5acadea74286ef676a7705e4e9190ec2f4c482a8a6496e2dad5046024ff975fce554f8408bb8c4b65758112b472156cb009609cbab282c64f1aada8d1127a1610f086ca82f89f09033066219952cb719a710632cbd1be3c75c12bdbc08d07aa3e5b585fa941900d95422ef7edc434f316651d8fc293796f577fd6b3424b77801a0ac1d5d328c893c6b5e336d734325d889fe3cfa51f4f0a19cdd8799e431b99b4c771e18967642e125696b1772708e0380eb50492749f51639a5379be7ad400000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000060000000400000002000000000000001d5e6ed3a818f48a43b2c27ea962b4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0xa, 0x3, 0x3a) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019"], 0xb8}}, 0x0) unshare(0x20000400) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r11 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) 505.409255ms ago: executing program 4 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000340)={0x4, &(0x7f00000002c0)=[{0x9f, 0xfb, &(0x7f0000000140)="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", 0x0, 0x1}, {0x0, 0x5b, &(0x7f0000000040)="54017207a06f416748cceda97151c4944d7e98defcf49e8cdceaec5665098c7b37e3b1523927633384cc85c7c802c7edcb67b09d875a71c2b7e27a3a65d152b9ba217f78c5e9d53a5af24b58b65023140140a3c2fef851d637ad3d", 0x0, 0x1}, {0xb, 0x4d, &(0x7f0000000240)="efd1668cae5134ddf8fb49d59ffe542ddbd8ac7b708063da7eb3badc238cf9960f66476820b13b70d168e6141d99e8d082983dd6924a5ecd0e42a3f973dc235766408e59d42ee514d40f6f998e"}, {0x7, 0x2d, &(0x7f00000000c0)="d50b2b93f8819505bb51e16a2ce39edbf391e498cf0c37763cb3ec749f017ec5e3ee13a581d5f012138f5cafa1", 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa000000000000036000000080013002d03010000000000950000000000000069165e0000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf310000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44b6b498b98ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089da6d6a710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f50e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8d829906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a443c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87100900000000000000de8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e52a2a10f922cc2de27ac24483639c369b06ecc7ea4195898691cc9c414c599c33eac655d01d1c4f89c999fd7aaa5d0984c82128ad6a1fad9dd079e095aa8331fe3d2e2baed37d6c93d402dc67b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000340)={0x4, &(0x7f00000002c0)=[{0x9f, 0xfb, &(0x7f0000000140)="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", 0x0, 0x1}, {0x0, 0x5b, &(0x7f0000000040)="54017207a06f416748cceda97151c4944d7e98defcf49e8cdceaec5665098c7b37e3b1523927633384cc85c7c802c7edcb67b09d875a71c2b7e27a3a65d152b9ba217f78c5e9d53a5af24b58b65023140140a3c2fef851d637ad3d", 0x0, 0x1}, {0xb, 0x4d, &(0x7f0000000240)="efd1668cae5134ddf8fb49d59ffe542ddbd8ac7b708063da7eb3badc238cf9960f66476820b13b70d168e6141d99e8d082983dd6924a5ecd0e42a3f973dc235766408e59d42ee514d40f6f998e"}, {0x7, 0x2d, &(0x7f00000000c0)="d50b2b93f8819505bb51e16a2ce39edbf391e498cf0c37763cb3ec749f017ec5e3ee13a581d5f012138f5cafa1", 0x1}]}) (async) 504.846288ms ago: executing program 3 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000020601120000000000000000000000000500010007000000140007800800124000000000050015000c0000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400000000000500050002"], 0x60}}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}]}, 0x24}}, 0x0) 464.112656ms ago: executing program 2 (id=1316): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003802800010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c17010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 362.32496ms ago: executing program 3 (id=1317): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390426bdf90d9db0fb3a70000000", @ANYRES32=r3, @ANYBLOB="01010000000000001800128008000100677265000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010003904fdffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="7c0e922c000002001800128008000100677265000c0002"], 0x38}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r10, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)='5', 0x1}, {&(0x7f00000004c0)="14b6ce5e287e01453a6f10b6", 0xc}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xff03}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 305.964642ms ago: executing program 4 (id=1318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/439], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe00000, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}}}}}}}, 0x0) 286.054337ms ago: executing program 2 (id=1319): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001340)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @unused=[0x6, 0x7, 0x9, 0x5], @devid}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x43, &(0x7f00000006c0)=0xc, 0x4) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400e6a68dd09e8cd7924f080000", @ANYRES16=r3, @ANYBLOB="010000000000000000000d00000005000700000000000600080000000000050017000000000006000a0000000000"], 0x34}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 226.417479ms ago: executing program 3 (id=1320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xa, 0x16, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}]}, 0x20}, 0x1, 0x3000000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2ee14ec33", 0x5}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x4}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000000d00)="22577ca3de", 0x5}], 0x1}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = gettid() r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='netfs_failure\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r5, 0x0, 0xc, &(0x7f0000000300)='-({-&-%S,\\@\x00'}, 0x30) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x3, &(0x7f0000000200)=""/138, &(0x7f0000000000)=0x8a) sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x6, 0x2, 0x0, 0x0, 0x6, 0x1000e}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 163.894137ms ago: executing program 4 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'geneve1\x00', @multicast}) 138.365447ms ago: executing program 2 (id=1322): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6058afc4b4dcb5be, 0x10, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x54, r2, 0x701, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="08030000386404e90e1dc5fc7e42be9d896814788b3a5eab7a570f23cba72fd47088cd3466dc2089cbc8f335e2ca73ba528e4a82d8b5a267777949f0d4fd57fb1abe921f720a372b8f30d5d3602a00ab4ae911d3c259fb9b856502fc834b7224bacb138e284bfa1ffe777f1bbb8582bdfc8f2eba33ce1abd8de4de73977b93eb9ed508701bb319b6e216ead160cbc30f79f30d669cfa0c2f0795969905a156ca22", @ANYRES16=r3, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008804) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 58.339383ms ago: executing program 3 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0x6}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x7dba}, 0x8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x47}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@map=0x1, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xab, 0x6, "109b8c66e581cef2309dedfebe228aac633a43c2b24ae97985a66f70d1b25b395f6c3a8630657b0fc9beb9f2587b25582de2d26b8eab594fb64806fb6fa2152e8aad8a69231877b3302033d5d7eabf3df5218e167e159fc0179d73825072c2a1dedea56e01763d787ed424754a6a60a409f340409c4f918e635b675835c7b696f2e33715f9dc0ec161de6d6a6e6b54b5159e0bdc2c8a58dd6db6ee873caab99590fe18b7490b9a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x3, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x130, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x104, 0x8, "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"}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x88, 0x8, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "6708b055527f61a5d3da42c4e7578444d4ff7c9e84f15b29018a7f709d00c37eca2dea59c83e75448ce698b7219a883471dd257636cdcfecc62f3b41653fe04d944e36323734e8277fc6f64a44ab4347ef850ac634ebab4d5a9f"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0xfffffffffffffed8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r4, 0x10, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 58.007536ms ago: executing program 4 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000c30000005100000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x12, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000082007b8af8ff00000000bfa2000000000000ffffb70300000800853463fb561d02e300008500000098000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.788134ms ago: executing program 0 (id=1325): syz_emit_ethernet(0x55, &(0x7f0000000000)={@random="1abace814844", @random="5da0b13a2d00", @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x1, 0x1}}, {@llc={0x4, {@snap={0xa9, 0x1, "0f67", "dfaa98", 0x883e, "738bc4564fd89d9a5445cef16bcd719f1bcb5b6a7c785fb47c2fb57bd45062ea6b727188533834c0428cfe8b742c123a98cbadab5720"}}}}}, &(0x7f0000000080)={0x0, 0x4, [0x9c0, 0xab, 0x52, 0x5e7]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000001c0)=0xe, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7, 0x10, 0x475, 0xd58a}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={r4, 0xfff9, 0x5, [0x2, 0xfff, 0x400, 0x1, 0x9]}, &(0x7f00000002c0)=0x12) read(r1, &(0x7f0000000300)=""/8, 0x8) r5 = openat$cgroup_ro(r3, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = accept$ax25(r5, 0x0, &(0x7f0000000380)) r7 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "ecb9aa83e608f665", "3d75da6eee5ef3955d9c6c2d7b7c573c5abae5012da38e2a32c5b5bac30e6757", "85f90958", "1956411f0a819407"}, 0x38) sendto$packet(r1, &(0x7f0000000440)="2c03214b9050c913321d7bf7512e2b6552906647b3cf952770357a5c04b5905c44fdeac699015ab4e4ec99e703", 0x2d, 0x4, &(0x7f0000000480)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) socketpair(0x1d, 0x4, 0xfffffffb, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x43, &(0x7f0000000580)=""/67, 0x41000, 0x8, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1a767ad4, 0x1, 0x3, 0x8000}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0xffffffffffffffff, r5, r2, r3, r2, r3, r2, r3, r5, r5], &(0x7f0000000700)=[{0x4, 0x3, 0x3, 0x5}, {0x4, 0x3, 0xb, 0x3}, {0x5, 0x2, 0x4, 0x9}, {0x1, 0x4, 0x6, 0x9}, {0x4, 0x2, 0x9, 0xc}], 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000840)={r6}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x3045080}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r12, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7f, 0x69}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000a00)={r2}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r14, 0x10e, 0x1, &(0x7f0000000a40)=0x18, 0x4) socketpair(0x16, 0x4, 0x1, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@map=r2, 0xb, 0x0, 0x10000000, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup=r7, r10, 0x1f, 0x2002, r10, @value=r3, @void, @void, @void, r17}, 0x20) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000c80)=0x7c1) ioctl$SIOCAX25GETINFO(r16, 0x89ed, &(0x7f0000000cc0)) 0s ago: executing program 4 (id=1326): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 52.101033][ T5218] cgroup: Unknown subsys name 'net' [ 52.255919][ T5218] cgroup: Unknown subsys name 'cpuset' [ 52.263988][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.508961][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.474823][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.498893][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.506448][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.514711][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.522913][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.530196][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.544491][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.553956][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.561370][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.563627][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.569831][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.578051][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.583285][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.590269][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.596690][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.604555][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.610939][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.625311][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.625475][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.632817][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.641311][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.647329][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.655069][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.667368][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.669667][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.674820][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.736213][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.737773][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.750976][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.752848][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.152631][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 56.163009][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 56.218480][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.258288][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 56.292203][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.380092][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.387400][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.394976][ T5228] bridge_slave_0: entered allmulticast mode [ 56.401552][ T5228] bridge_slave_0: entered promiscuous mode [ 56.435537][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.442634][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.450051][ T5228] bridge_slave_1: entered allmulticast mode [ 56.456949][ T5228] bridge_slave_1: entered promiscuous mode [ 56.487323][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.494492][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.501593][ T5237] bridge_slave_0: entered allmulticast mode [ 56.508289][ T5237] bridge_slave_0: entered promiscuous mode [ 56.516106][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.523269][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.530492][ T5237] bridge_slave_1: entered allmulticast mode [ 56.537351][ T5237] bridge_slave_1: entered promiscuous mode [ 56.560156][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.567449][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.574965][ T5229] bridge_slave_0: entered allmulticast mode [ 56.581417][ T5229] bridge_slave_0: entered promiscuous mode [ 56.589420][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.596607][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.604437][ T5229] bridge_slave_1: entered allmulticast mode [ 56.610935][ T5229] bridge_slave_1: entered promiscuous mode [ 56.639210][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.661754][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.672007][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.679260][ T5239] bridge_slave_0: entered allmulticast mode [ 56.686662][ T5239] bridge_slave_0: entered promiscuous mode [ 56.696034][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.707369][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.717793][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.740404][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.747656][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.755191][ T5235] bridge_slave_0: entered allmulticast mode [ 56.762108][ T5235] bridge_slave_0: entered promiscuous mode [ 56.776321][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.783506][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.790637][ T5239] bridge_slave_1: entered allmulticast mode [ 56.797877][ T5239] bridge_slave_1: entered promiscuous mode [ 56.819172][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.826486][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.833818][ T5235] bridge_slave_1: entered allmulticast mode [ 56.840384][ T5235] bridge_slave_1: entered promiscuous mode [ 56.857045][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.892532][ T5228] team0: Port device team_slave_0 added [ 56.900456][ T5228] team0: Port device team_slave_1 added [ 56.914701][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.933922][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.946787][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.958291][ T5237] team0: Port device team_slave_0 added [ 56.966622][ T5237] team0: Port device team_slave_1 added [ 56.979985][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.000045][ T5229] team0: Port device team_slave_0 added [ 57.035159][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.042114][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.068641][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.082379][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.101040][ T5229] team0: Port device team_slave_1 added [ 57.125390][ T5239] team0: Port device team_slave_0 added [ 57.131360][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.139251][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.165367][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.177434][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.184701][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.210756][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.240384][ T5239] team0: Port device team_slave_1 added [ 57.257951][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.265205][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.291585][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.306762][ T5235] team0: Port device team_slave_0 added [ 57.326158][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.333244][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.359648][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.385804][ T5235] team0: Port device team_slave_1 added [ 57.391893][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.398935][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.425020][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.436707][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.443828][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.469822][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.507644][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.514842][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.541233][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.568320][ T5228] hsr_slave_0: entered promiscuous mode [ 57.574980][ T5228] hsr_slave_1: entered promiscuous mode [ 57.582400][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.589414][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.615439][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.627536][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.634630][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.660655][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.701482][ T5237] hsr_slave_0: entered promiscuous mode [ 57.708193][ T5237] hsr_slave_1: entered promiscuous mode [ 57.714920][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.722751][ T5237] Cannot create hsr debugfs directory [ 57.733673][ T5233] Bluetooth: hci3: command tx timeout [ 57.742842][ T5233] Bluetooth: hci0: command tx timeout [ 57.764177][ T5239] hsr_slave_0: entered promiscuous mode [ 57.770783][ T5239] hsr_slave_1: entered promiscuous mode [ 57.777030][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.784771][ T5239] Cannot create hsr debugfs directory [ 57.798431][ T5229] hsr_slave_0: entered promiscuous mode [ 57.804839][ T5229] hsr_slave_1: entered promiscuous mode [ 57.810786][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.812890][ T5233] Bluetooth: hci1: command tx timeout [ 57.818940][ T5229] Cannot create hsr debugfs directory [ 57.824034][ T5240] Bluetooth: hci4: command tx timeout [ 57.835078][ T54] Bluetooth: hci2: command tx timeout [ 57.890175][ T5235] hsr_slave_0: entered promiscuous mode [ 57.897237][ T5235] hsr_slave_1: entered promiscuous mode [ 57.903878][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.911440][ T5235] Cannot create hsr debugfs directory [ 58.182518][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.194525][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.204682][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.215394][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.269604][ T5229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.279438][ T5229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.290439][ T5229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.304175][ T5229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.380208][ T5237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.391143][ T5237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.414263][ T5237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.438713][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.445780][ T5237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.490174][ T5235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.505650][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.516633][ T5235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.528928][ T5235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.555949][ T5235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.571178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.578452][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.615877][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.623014][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.649863][ T5239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.662521][ T5239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.672100][ T5239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.683201][ T5239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.719065][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.756756][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.797193][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.804327][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.866972][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.874106][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.895150][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.964344][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.983827][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.010212][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.017400][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.037998][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.047523][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.054643][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.102326][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.131237][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.138370][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.171789][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.179194][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.260033][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.288488][ T5228] veth0_vlan: entered promiscuous mode [ 59.313599][ T5228] veth1_vlan: entered promiscuous mode [ 59.358269][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.410549][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.430351][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.437510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.459720][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.466838][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.535465][ T5228] veth0_macvtap: entered promiscuous mode [ 59.568327][ T5228] veth1_macvtap: entered promiscuous mode [ 59.578757][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.624965][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.659658][ T5229] veth0_vlan: entered promiscuous mode [ 59.681267][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.709891][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.728373][ T5229] veth1_vlan: entered promiscuous mode [ 59.750224][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.760389][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.772367][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793717][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.816128][ T5233] Bluetooth: hci0: command tx timeout [ 59.821575][ T54] Bluetooth: hci3: command tx timeout [ 59.893034][ T54] Bluetooth: hci1: command tx timeout [ 59.893125][ T5233] Bluetooth: hci2: command tx timeout [ 59.898453][ T54] Bluetooth: hci4: command tx timeout [ 59.941514][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.960394][ T5237] veth0_vlan: entered promiscuous mode [ 59.992089][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.012727][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.023791][ T5229] veth0_macvtap: entered promiscuous mode [ 60.056901][ T5229] veth1_macvtap: entered promiscuous mode [ 60.091346][ T5237] veth1_vlan: entered promiscuous mode [ 60.104625][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.112469][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.150219][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.172199][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.186025][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.196514][ T5239] veth0_vlan: entered promiscuous mode [ 60.202603][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.216984][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.228502][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.244655][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.252534][ T5237] veth0_macvtap: entered promiscuous mode [ 60.286287][ T5237] veth1_macvtap: entered promiscuous mode [ 60.298293][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.307218][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.317231][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.332957][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.350493][ T5235] veth0_vlan: entered promiscuous mode [ 60.371868][ T5239] veth1_vlan: entered promiscuous mode [ 60.401855][ T5235] veth1_vlan: entered promiscuous mode [ 60.413133][ T5311] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.424813][ T5239] veth0_macvtap: entered promiscuous mode [ 60.443581][ T5311] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 60.467245][ T5239] veth1_macvtap: entered promiscuous mode [ 60.485716][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.497453][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.517356][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.529314][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.542321][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.554764][ T5314] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 60.561330][ T5235] veth0_macvtap: entered promiscuous mode [ 60.597979][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.609269][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.629828][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.643612][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.654504][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.676091][ T5237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.685274][ T5237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.694964][ T5237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.705305][ T5237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.729815][ T5235] veth1_macvtap: entered promiscuous mode [ 60.757358][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.768930][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.780818][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.791629][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.801887][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.814228][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.825778][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.842966][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.863116][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.878830][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.890181][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.900135][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.910962][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.922011][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.964992][ T5239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973837][ T5239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.982533][ T5239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.991816][ T5239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.022178][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.038050][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.049322][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.077355][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.087484][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.099429][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.109468][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.120215][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.129165][ T5324] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.132024][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.179794][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.197693][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.208858][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.222019][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.232335][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.243907][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.262245][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.273417][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.284177][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.295151][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.306664][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.320466][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.330156][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.337548][ T5235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.337601][ T5235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.337628][ T5235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.337654][ T5235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.459986][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.477504][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.491149][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.499135][ T5330] Zero length message leads to an empty skb [ 61.517489][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.664291][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.685696][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.738606][ T5337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12'. [ 61.760031][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.780723][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.855425][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.876715][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.886061][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.901449][ T54] Bluetooth: hci3: command tx timeout [ 61.907608][ T54] Bluetooth: hci0: command tx timeout [ 61.947199][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.974154][ T54] Bluetooth: hci2: command tx timeout [ 61.974205][ T5233] Bluetooth: hci1: command tx timeout [ 61.979873][ T54] Bluetooth: hci4: command tx timeout [ 62.282399][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 62.310670][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.451753][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 62.480853][ T5374] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 62.489190][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 62.662187][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 62.688794][ T5386] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22'. [ 62.757502][ T5389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20'. [ 62.839699][ T5392] netlink: 164 bytes leftover after parsing attributes in process `syz.3.24'. [ 62.866326][ T5392] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 63.285033][ T5420] netlink: 'syz.1.29': attribute type 11 has an invalid length. [ 63.426375][ T5429] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 63.481854][ T5432] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 63.498260][ T5432] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 63.650690][ T5440] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.975073][ T54] Bluetooth: hci3: command tx timeout [ 63.982446][ T54] Bluetooth: hci0: command tx timeout [ 64.038989][ T5462] tipc: Enabling of bearer rejected, failed to enable media [ 64.054272][ T5240] Bluetooth: hci4: command tx timeout [ 64.063088][ T5240] Bluetooth: hci1: command tx timeout [ 64.069279][ T54] Bluetooth: hci2: command tx timeout [ 64.198739][ T5470] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 64.208980][ T5470] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 64.641600][ T5502] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.700261][ T5493] syzkaller0: entered promiscuous mode [ 64.706060][ T5493] syzkaller0: entered allmulticast mode [ 64.730572][ T5502] IPv6: sit1: Disabled Multicast RS [ 66.201539][ T5530] dccp_invalid_packet: P.Data Offset(100) too large [ 66.230329][ T5533] dccp_invalid_packet: P.Data Offset(100) too large [ 66.375800][ T5540] __nla_validate_parse: 9 callbacks suppressed [ 66.375818][ T5540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.68'. [ 66.425493][ T5540] openvswitch: netlink: Multiple metadata blocks provided [ 66.610739][ T5544] ebtables: ebtables: counters copy to user failed while replacing table [ 66.630956][ T5556] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.71'. [ 66.641293][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 66.664412][ T5556] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 66.683162][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 66.698982][ T5556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.720309][ T5553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.72'. [ 66.751576][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 66.789885][ T5547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 66.800000][ T5553] netlink: zone id is out of range [ 66.819363][ T5553] netlink: zone id is out of range [ 66.823210][ T5547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 66.837119][ T5553] netlink: zone id is out of range [ 66.846772][ T5547] syz_tun: entered promiscuous mode [ 66.849400][ T5553] netlink: zone id is out of range [ 66.859445][ T5547] batadv_slave_1: entered promiscuous mode [ 66.871846][ T5559] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.878909][ T5553] netlink: zone id is out of range [ 67.036565][ T5565] syzkaller0: entered promiscuous mode [ 67.042084][ T5565] syzkaller0: entered allmulticast mode [ 68.166063][ T5570] netlink: 'syz.1.76': attribute type 8 has an invalid length. [ 68.407420][ T5590] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.84'. [ 68.437171][ T5599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.84'. [ 68.649262][ T5611] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 68.829996][ T5617] bridge0: port 3(vlan2) entered blocking state [ 68.853866][ T5617] bridge0: port 3(vlan2) entered disabled state [ 68.860301][ T5617] vlan2: entered allmulticast mode [ 68.900528][ T5617] vlan2: entered promiscuous mode [ 68.921960][ T5617] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 68.965040][ T5617] Bluetooth: MGMT ver 1.23 [ 68.970904][ T5617] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 69.146126][ T5631] syzkaller0: entered promiscuous mode [ 69.151637][ T5631] syzkaller0: entered allmulticast mode [ 69.164540][ T2933] syzkaller0: tun_net_xmit 48 [ 69.172943][ T5637] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 69.178781][ T5637] syzkaller0: Linktype set failed because interface is up [ 69.433809][ T5648] delete_channel: no stack [ 71.512204][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.568026][ T5716] net_ratelimit: 163 callbacks suppressed [ 71.568045][ T5716] openvswitch: netlink: Message has 4 unknown bytes. [ 71.750605][ T5724] __nla_validate_parse: 6 callbacks suppressed [ 71.750623][ T5724] netlink: 164 bytes leftover after parsing attributes in process `syz.3.123'. [ 71.891762][ T5728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.124'. [ 71.962877][ T5732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 72.055459][ T5736] netlink: 2 bytes leftover after parsing attributes in process `syz.0.129'. [ 72.457242][ T5738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 72.613944][ T5751] netlink: 'syz.1.132': attribute type 7 has an invalid length. [ 72.631891][ T5751] netlink: 140 bytes leftover after parsing attributes in process `syz.1.132'. [ 72.680231][ T5757] netlink: 116 bytes leftover after parsing attributes in process `syz.1.132'. [ 72.701414][ T5758] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 73.152408][ T5776] netlink: 'syz.0.142': attribute type 12 has an invalid length. [ 73.205083][ T5781] batadv0: entered promiscuous mode [ 73.231838][ T5781] macsec1: entered promiscuous mode [ 73.254076][ T5781] macsec1: entered allmulticast mode [ 73.280645][ T5781] batadv0: entered allmulticast mode [ 73.426489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 73.700541][ T5805] openvswitch: netlink: nsh attr 15105 is out of range max 3 [ 73.726491][ T5809] IPv6: sit2: Disabled Multicast RS [ 74.291165][ T5838] bridge_slave_0: left allmulticast mode [ 74.347225][ T5838] bridge_slave_0: left promiscuous mode [ 74.359181][ T5843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 74.369283][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.425635][ T5838] bridge_slave_1: left allmulticast mode [ 74.431978][ T5838] bridge_slave_1: left promiscuous mode [ 74.463551][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.525429][ T5838] bond0: (slave bond_slave_0): Releasing backup interface [ 74.546087][ T5838] bond0: (slave bond_slave_1): Releasing backup interface [ 74.579083][ T5838] team0: Port device team_slave_0 removed [ 74.591698][ T5838] team0: Port device team_slave_1 removed [ 74.600957][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.609018][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.619690][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.627995][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.676941][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.690809][ T5840] team0: Port device bond0 added [ 74.706200][ T5841] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 74.732111][ T5841] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.782626][ T5854] batadv_slave_1: entered promiscuous mode [ 74.808750][ T5865] syzkaller0: entered allmulticast mode [ 75.222281][ T5889] netlink: 228 bytes leftover after parsing attributes in process `syz.3.173'. [ 75.262888][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 75.281034][ T5860] batadv_slave_1: left promiscuous mode [ 75.526314][ T5914] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ω2Ό”›U7‘Εδ‹‘τΎΠΛέ;&!ιi‡Ό [ 76.051000][ T5950] bridge_slave_0: entered allmulticast mode [ 76.560644][ T5987] batadv_slave_1: entered promiscuous mode [ 76.567097][ T1165] IPVS: starting estimator thread 0... [ 76.595505][ T5991] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 76.663727][ T938] cfg80211: failed to load regulatory.db [ 76.702872][ T5989] IPVS: using max 19 ests per chain, 45600 per kthread [ 76.718320][ T6000] x_tables: duplicate underflow at hook 2 [ 76.751894][ T5992] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 76.772079][ T5983] batadv_slave_1: left promiscuous mode [ 76.843691][ T6002] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 77.761276][ T6049] batadv_slave_1: entered promiscuous mode [ 77.767959][ T6049] batadv_slave_1: left promiscuous mode [ 77.931506][ T6059] __nla_validate_parse: 5 callbacks suppressed [ 77.931525][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'. [ 77.936981][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.228'. [ 77.945520][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.3.229'. [ 78.123743][ T6076] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 78.193051][ T6076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.231'. [ 78.249893][ T6086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.463455][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.240'. [ 78.636547][ T6103] netlink: 148 bytes leftover after parsing attributes in process `syz.2.241'. [ 78.720979][ T6099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 78.741207][ T6099] batman_adv: batadv0: Adding interface: ip6gretap1 [ 78.748042][ T6099] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.827992][ T6099] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 78.878470][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 78.894355][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.912911][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.981173][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.002195][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.037318][ T6099] batman_adv: batadv0: Removing interface: ip6gretap1 [ 79.116450][ T6099] batadv0 (unregistering): left allmulticast mode [ 79.180109][ T6110] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 79.201817][ T6110] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 79.212520][ T6110] team0: Failed to send options change via netlink (err -105) [ 79.221069][ T6110] team0: Port device netdevsim0 added [ 79.342288][ T6113] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 79.350666][ T6139] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 79.363758][ T6139] netlink: 212848 bytes leftover after parsing attributes in process `syz.4.251'. [ 79.373782][ T6138] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 79.385214][ T6138] netlink: 212848 bytes leftover after parsing attributes in process `syz.4.251'. [ 79.397251][ T6113] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 79.420358][ T6113] team0: Failed to send options change via netlink (err -105) [ 79.437695][ T6113] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 79.466684][ T6113] team0: Port device netdevsim0 removed [ 79.477080][ T6113] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 79.497801][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 79.763842][ T6162] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 79.872749][ T6168] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 80.266913][ T6185] IPv6: sit3: Disabled Multicast RS [ 80.675879][ T6203] netlink: 'syz.2.274': attribute type 14 has an invalid length. [ 80.676294][ T6212] xt_SECMARK: invalid mode: 0 [ 81.228569][ T6250] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 81.352162][ T6259] netlink: 'syz.1.292': attribute type 24 has an invalid length. [ 81.571214][ T6269] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.572722][ T6271] raw_sendmsg: syz.3.298 forgot to set AF_INET. Fix it! [ 81.596285][ T6266] xt_l2tp: invalid flags combination: 4 [ 82.178793][ T6303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 82.208092][ T6303] batman_adv: batadv0: Adding interface: ip6gretap1 [ 82.253513][ T6303] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.312787][ T6303] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 82.380919][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.388441][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.399874][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.407639][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.466664][ T6303] batman_adv: batadv0: Removing interface: ip6gretap1 [ 82.541499][ T6319] vxcan1: tx address claim with dest, not broadcast [ 82.681779][ T6332] tipc: Started in network mode [ 82.692941][ T6332] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 82.716828][ T6332] tipc: Enabled bearer , priority 10 [ 82.763739][ T6342] bond0: option updelay: invalid value (18446744073709551615) [ 82.772087][ T6342] bond0: option updelay: allowed values 0 - 2147483647 [ 82.779175][ T6343] bond0: option updelay: invalid value (18446744073709551615) [ 82.788763][ T6343] bond0: option updelay: allowed values 0 - 2147483647 [ 83.331979][ T6385] Bluetooth: MGMT ver 1.23 [ 83.455523][ T6388] __nla_validate_parse: 8 callbacks suppressed [ 83.455543][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 83.523369][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 83.568289][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 83.692081][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 83.706393][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 83.734492][ T6401] netlink: zone id is out of range [ 83.739760][ T6401] netlink: zone id is out of range [ 83.749443][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 83.753430][ T6401] netlink: zone id is out of range [ 83.763729][ T6401] netlink: zone id is out of range [ 83.768877][ T6401] netlink: zone id is out of range [ 83.778338][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 83.821223][ T6401] netlink: zone id is out of range [ 83.834860][ T938] tipc: Node number set to 4269801488 [ 83.845892][ T6401] netlink: zone id is out of range [ 83.861247][ T6401] netlink: zone id is out of range [ 83.883419][ T6401] netlink: zone id is out of range [ 84.006038][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 84.049662][ T6423] dummy0: entered promiscuous mode [ 84.164663][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 84.195296][ T6438] netlink: 80 bytes leftover after parsing attributes in process `syz.3.350'. [ 84.667815][ T6457] sit1: entered promiscuous mode [ 84.861385][ T6472] netlink: 'syz.4.362': attribute type 21 has an invalid length. [ 85.379116][ T6499] team0: Port device vlan2 added [ 85.550692][ T6506] vlan3: entered promiscuous mode [ 85.823867][ T6525] netlink: 'syz.0.379': attribute type 3 has an invalid length. [ 85.864320][ T6525] netlink: 'syz.0.379': attribute type 2 has an invalid length. [ 85.900158][ T6531] netlink: 'syz.3.382': attribute type 3 has an invalid length. [ 86.109605][ T6541] xt_hashlimit: size too large, truncated to 1048576 [ 86.588427][ T6560] dvmrp0: entered allmulticast mode [ 86.693940][ T6563] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 86.756005][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.796111][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.045681][ T6582] net_ratelimit: 18 callbacks suppressed [ 87.045700][ T6582] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 87.230809][ T6594] bond3: entered promiscuous mode [ 87.238773][ T6594] bond3: entered allmulticast mode [ 87.245028][ T6594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.494453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.520053][ T6612] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 87.535213][ T6612] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 87.653153][ T5240] Bluetooth: hci3: command tx timeout [ 89.348622][ T6682] __nla_validate_parse: 16 callbacks suppressed [ 89.348640][ T6682] netlink: 112 bytes leftover after parsing attributes in process `syz.0.425'. [ 89.714603][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 89.759541][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.806219][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.841737][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.854906][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.041082][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 90.144429][ T6717] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 90.177885][ T6720] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 90.230840][ T6720] geneve2: entered promiscuous mode [ 90.236511][ T6720] geneve2: entered allmulticast mode [ 90.297776][ T6724] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 90.555307][ T6736] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 91.555622][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.099269][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 92.109534][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 92.137397][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 92.249903][ T6830] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 92.390654][ T6844] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 92.430431][ T6844] netlink: 'syz.0.479': attribute type 2 has an invalid length. [ 92.464651][ T6844] netlink: 3 bytes leftover after parsing attributes in process `syz.0.479'. [ 92.466138][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 92.490649][ T6851] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 92.591906][ T6857] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.645430][ T6857] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.782556][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 92.798041][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 93.226348][ T6899] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 93.387983][ T6909] netlink: 'syz.3.500': attribute type 9 has an invalid length. [ 93.396741][ T6909] netlink: 'syz.3.500': attribute type 11 has an invalid length. [ 93.517866][ T6918] netlink: 'syz.0.503': attribute type 19 has an invalid length. [ 93.538094][ T6918] netlink: 'syz.0.503': attribute type 9 has an invalid length. [ 93.546315][ T6918] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 93.610319][ T6925] sctp: [Deprecated]: syz.0.506 (pid 6925) Use of int in maxseg socket option. [ 93.610319][ T6925] Use struct sctp_assoc_value instead [ 93.686864][ T6929] netlink: 'syz.0.507': attribute type 9 has an invalid length. [ 93.698806][ T6929] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 93.711707][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.721017][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.864084][ T6940] netlink: 'syz.0.512': attribute type 3 has an invalid length. [ 94.400542][ T6984] __nla_validate_parse: 4 callbacks suppressed [ 94.400560][ T6984] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.525'. [ 94.578528][ T6991] trusted_key: syz.3.528 sent an empty control message without MSG_MORE. [ 94.757706][ T7002] Κό: entered promiscuous mode [ 94.767359][ T7006] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.533'. [ 94.778198][ T7006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.029716][ T7021] bridge2: entered promiscuous mode [ 95.105088][ T7023] x_tables: duplicate underflow at hook 1 [ 95.247522][ T7036] validate_nla: 4 callbacks suppressed [ 95.247539][ T7036] netlink: 'syz.2.548': attribute type 3 has an invalid length. [ 95.260929][ T7036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.548'. [ 95.531766][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.539356][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.756930][ T7065] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 95.810973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.819192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.861416][ T7077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.558'. [ 95.891875][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 95.911080][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.946448][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.953672][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.062650][ T7089] hsr0: entered allmulticast mode [ 96.076741][ T7088] ebtables: ebtables: counters copy to user failed while replacing table [ 96.087101][ T7089] hsr_slave_0: entered allmulticast mode [ 96.089234][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 96.099821][ T7089] hsr_slave_1: entered allmulticast mode [ 96.119056][ T7092] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 96.163787][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'. [ 96.184465][ T7094] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.428842][ T7115] ip6tnl0: entered promiscuous mode [ 96.435916][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.450744][ T7114] ip6tnl0: left promiscuous mode [ 96.676500][ T7136] bridge0: port 3(syz_tun) entered blocking state [ 96.685663][ T7136] bridge0: port 3(syz_tun) entered disabled state [ 96.692409][ T7136] syz_tun: entered allmulticast mode [ 96.704599][ T7136] syz_tun: entered promiscuous mode [ 96.724922][ T7136] bridge0: port 3(syz_tun) entered blocking state [ 96.731754][ T7136] bridge0: port 3(syz_tun) entered forwarding state [ 96.997037][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.584'. [ 97.128270][ T7166] netlink: 224 bytes leftover after parsing attributes in process `syz.0.586'. [ 97.185649][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.352961][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 97.957060][ T7229] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 98.128528][ T7236] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 98.276623][ T7244] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 98.286396][ T7244] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 98.309830][ T7244] team0: Cannot enslave team device to itself [ 98.330293][ T7246] bridge_slave_0: left allmulticast mode [ 98.336289][ T7246] bridge_slave_0: left promiscuous mode [ 98.342030][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.352255][ T7246] bridge_slave_1: left allmulticast mode [ 98.360161][ T7246] bridge_slave_1: left promiscuous mode [ 98.366119][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.379110][ T7246] bond0: (slave bond_slave_0): Releasing backup interface [ 98.392911][ T7246] bond0: (slave bond_slave_1): Releasing backup interface [ 98.429780][ T7246] team0: Port device team_slave_0 removed [ 98.497185][ T7246] team0: Port device team_slave_1 removed [ 98.516031][ T7246] bond0: (slave netdevsim0): Releasing backup interface [ 98.533286][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 98.559111][ T7246] vlan2: left allmulticast mode [ 98.576271][ T7246] vlan2: left promiscuous mode [ 98.585135][ T7246] bridge0: port 3(vlan2) entered disabled state [ 98.601111][ T7244] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 98.875936][ T7278] batadv_slave_1: entered promiscuous mode [ 98.886982][ T7278] batadv_slave_1: entered allmulticast mode [ 98.929055][ T7281] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 99.127197][ T7299] nftables ruleset with unbound set [ 99.400745][ T7321] netlink: 'syz.2.637': attribute type 2 has an invalid length. [ 99.571610][ T7331] netlink: 'syz.2.640': attribute type 21 has an invalid length. [ 99.582076][ T7331] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.603158][ T7331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.610691][ T7331] IPv6: NLM_F_CREATE should be set when creating new route [ 99.617992][ T7331] IPv6: NLM_F_CREATE should be set when creating new route [ 99.625250][ T7331] IPv6: NLM_F_CREATE should be set when creating new route [ 99.634089][ T7334] __nla_validate_parse: 7 callbacks suppressed [ 99.634110][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 99.971858][ T7357] netlink: 'syz.0.649': attribute type 10 has an invalid length. [ 100.016952][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.034705][ T7357] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.046898][ T7367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.650'. [ 100.099965][ T7370] netlink: 'syz.1.651': attribute type 3 has an invalid length. [ 100.118259][ T7370] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.651'. [ 100.121015][ T7372] pimreg: entered allmulticast mode [ 100.143385][ T7366] netlink: 'syz.0.649': attribute type 10 has an invalid length. [ 100.155535][ T7366] bond0: (slave team0): Releasing backup interface [ 100.177664][ T7366] bridge0: port 1(team0) entered blocking state [ 100.199334][ T7366] bridge0: port 1(team0) entered disabled state [ 100.210487][ T7366] team0: entered allmulticast mode [ 100.218287][ T7366] team0: entered promiscuous mode [ 100.613936][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 100.779112][ T7385] tipc: Started in network mode [ 100.792765][ T7385] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 100.801148][ T7385] tipc: Enabled bearer , priority 10 [ 100.963980][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 100.997038][ T7392] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 101.013477][ T7392] netlink: 'syz.3.658': attribute type 3 has an invalid length. [ 101.022932][ T7392] netlink: 224 bytes leftover after parsing attributes in process `syz.3.658'. [ 101.375384][ T7426] netlink: 104 bytes leftover after parsing attributes in process `syz.3.668'. [ 101.399796][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 101.411553][ T7427] netlink: 2 bytes leftover after parsing attributes in process `syz.0.667'. [ 101.479052][ T7432] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.607825][ T7441] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.748721][ T7450] tipc: Started in network mode [ 101.753910][ T7450] tipc: Node identity 5af1128f1a36, cluster identity 4711 [ 101.762284][ T7450] tipc: Enabled bearer , priority 0 [ 101.782648][ T7453] netlink: 'syz.2.678': attribute type 15 has an invalid length. [ 101.803881][ T7450] syzkaller0: entered promiscuous mode [ 101.809379][ T7450] syzkaller0: entered allmulticast mode [ 101.815833][ T7450] tipc: Resetting bearer [ 101.908888][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.680'. [ 101.913976][ T46] tipc: Node number set to 10005162 [ 102.510257][ T7446] tipc: Resetting bearer [ 102.518700][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'. [ 102.802984][ T46] tipc: Node number set to 1086788239 [ 103.064430][ T7508] Bluetooth: MGMT ver 1.23 [ 103.885551][ T7446] tipc: Disabling bearer [ 103.903295][ T7517] netlink: 'syz.2.693': attribute type 29 has an invalid length. [ 104.244146][ T7549] ebt_among: dst integrity fail: 200 [ 104.250313][ T7547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 104.285018][ T7547] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 104.423430][ T7559] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 104.471667][ T7559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.639432][ T7573] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 104.653891][ T7576] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 104.661591][ T7573] netlink: 'syz.3.713': attribute type 2 has an invalid length. [ 104.675575][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 104.707389][ T7578] lo speed is unknown, defaulting to 1000 [ 104.730674][ T7578] lo speed is unknown, defaulting to 1000 [ 104.746563][ T7578] lo speed is unknown, defaulting to 1000 [ 104.877827][ T7593] __nla_validate_parse: 7 callbacks suppressed [ 104.877845][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.719'. [ 104.887193][ T7578] infiniband syz0: set active [ 104.899586][ T938] lo speed is unknown, defaulting to 1000 [ 104.906600][ T7578] infiniband syz0: added lo [ 104.912855][ T7578] syz0: rxe_create_cq: returned err = -12 [ 104.918882][ T7578] infiniband syz0: Couldn't create ib_mad CQ [ 104.926414][ T7578] infiniband syz0: Couldn't open port 1 [ 104.954298][ T7578] RDS/IB: syz0: added [ 104.963581][ T7578] smc: adding ib device syz0 with port count 1 [ 104.970018][ T7578] smc: ib device syz0 port 1 has pnetid [ 104.978796][ T7596] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 104.999478][ T7596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.009273][ T5281] lo speed is unknown, defaulting to 1000 [ 105.017674][ T7578] lo speed is unknown, defaulting to 1000 [ 105.124322][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'. [ 105.140162][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'. [ 105.208935][ T7578] lo speed is unknown, defaulting to 1000 [ 105.217984][ T7608] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 105.225149][ T7610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.724'. [ 105.362492][ T7578] lo speed is unknown, defaulting to 1000 [ 105.378470][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.726'. [ 105.532026][ T7578] lo speed is unknown, defaulting to 1000 [ 105.661469][ T7578] lo speed is unknown, defaulting to 1000 [ 105.950766][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 106.130369][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 106.357711][ T7677] netem: change failed [ 106.473679][ T7682] netlink: 'syz.0.748': attribute type 3 has an invalid length. [ 106.492824][ T7682] netlink: 92 bytes leftover after parsing attributes in process `syz.0.748'. [ 106.657726][ T7699] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.667082][ T7699] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.676081][ T7699] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.684875][ T7699] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.717212][ T7699] vxlan0: entered promiscuous mode [ 106.722373][ T7699] vxlan0: entered allmulticast mode [ 106.761417][ T7699] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.770799][ T7699] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.780215][ T7699] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.789263][ T7699] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.036400][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 107.088857][ T7725] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 107.103293][ T7725] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.762'. [ 107.112727][ T7725] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 107.211889][ T7734] netlink: 'syz.4.766': attribute type 9 has an invalid length. [ 107.250397][ T7737] netlink: 'syz.0.767': attribute type 7 has an invalid length. [ 107.258697][ T7737] netlink: 'syz.0.767': attribute type 8 has an invalid length. [ 107.274623][ T7738] nbd: couldn't find device at index 0 [ 107.518912][ T7750] bridge_slave_1: left allmulticast mode [ 107.544049][ T7750] bridge_slave_1: left promiscuous mode [ 107.553889][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.704500][ T7782] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 107.713495][ T7782] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 108.134584][ T7819] netlink: 'syz.2.794': attribute type 7 has an invalid length. [ 108.272567][ T7816] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 108.462220][ T7844] infiniband syz0: set active [ 108.473238][ T7844] infiniband syz0: set active [ 108.583167][ T8] lo speed is unknown, defaulting to 1000 [ 108.597692][ T7847] bridge0: port 2(ipvlan0) entered blocking state [ 108.604603][ T7847] bridge0: port 2(ipvlan0) entered disabled state [ 108.612270][ T7847] ipvlan0: entered allmulticast mode [ 108.620491][ T7856] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.622951][ T7847] bridge0: entered allmulticast mode [ 108.641512][ T7852] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.642910][ T7847] ipvlan0: left allmulticast mode [ 108.657812][ T7847] bridge0: left allmulticast mode [ 108.675864][ T7852] xt_l2tp: invalid flags combination: 4 [ 108.693176][ T938] lo speed is unknown, defaulting to 1000 [ 108.880724][ T7861] xt_CT: No such helper "pptp" [ 109.401788][ T7914] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 109.424104][ T7918] Driver unsupported XDP return value 0 on prog (id 143) dev N/A, expect packet loss! [ 109.766359][ T7951] veth0_macvtap: left promiscuous mode [ 109.772512][ T7951] macvtap0: entered allmulticast mode [ 109.795297][ T7951] macvtap0: refused to change device tx_queue_len [ 110.228764][ T7988] __nla_validate_parse: 79 callbacks suppressed [ 110.228782][ T7988] netlink: 13 bytes leftover after parsing attributes in process `syz.2.846'. [ 110.439346][ T8008] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 110.494031][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 110.644236][ T8021] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.853'. [ 110.727862][ T8021] netlink: zone id is out of range [ 110.742589][ T8021] netlink: zone id is out of range [ 110.749272][ T8021] netlink: zone id is out of range [ 110.757926][ T8021] netlink: zone id is out of range [ 110.759121][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 110.764309][ T8021] netlink: del zone limit has 8 unknown bytes [ 110.780084][ T8031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.133970][ T8056] netlink: 164 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.163084][ T8056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.195409][ T8056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.255488][ T8056] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.525923][ T8082] xt_CT: No such helper "snmp" [ 111.631770][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 111.683463][ T8100] netlink: 44 bytes leftover after parsing attributes in process `syz.1.876'. [ 111.747502][ T8105] validate_nla: 5 callbacks suppressed [ 111.747520][ T8105] netlink: 'syz.3.881': attribute type 3 has an invalid length. [ 112.053499][ T8129] netlink: zone id is out of range [ 112.115718][ T8131] ipvlan3: entered allmulticast mode [ 112.127217][ T8131] veth0_vlan: entered allmulticast mode [ 112.153212][ T8134] netlink: 'syz.2.890': attribute type 14 has an invalid length. [ 112.203731][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.217818][ T8135] sctp: [Deprecated]: syz.4.891 (pid 8135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.217818][ T8135] Use struct sctp_sack_info instead [ 112.734679][ T8180] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 112.808485][ T8180] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 112.819502][ T8180] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 112.830971][ T8180] bond5: (slave ipip0): making interface the new active one [ 112.839117][ T8180] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 113.164855][ T8206] geneve0: entered promiscuous mode [ 113.198188][ T8206] geneve0: left promiscuous mode [ 113.234132][ T8212] dccp_v4_rcv: dropped packet with invalid checksum [ 113.548113][ T8236] netlink: 'syz.0.926': attribute type 11 has an invalid length. [ 113.566836][ T8237] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 114.000792][ T8252] netlink: 'syz.4.931': attribute type 3 has an invalid length. [ 114.010663][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.458030][ T8273] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 114.769040][ T8301] xt_policy: neither incoming nor outgoing policy selected [ 114.851628][ T8303] lo speed is unknown, defaulting to 1000 [ 115.384116][ T938] IPVS: starting estimator thread 0... [ 115.393852][ T8349] __nla_validate_parse: 21 callbacks suppressed [ 115.393868][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 115.481281][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'. [ 115.481406][ T8360] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 115.507426][ T8354] IPVS: using max 33 ests per chain, 79200 per kthread [ 115.818485][ T8373] netlink: 'syz.2.967': attribute type 9 has an invalid length. [ 116.041436][ T8384] netlink: 156 bytes leftover after parsing attributes in process `syz.4.972'. [ 116.229670][ T8398] netlink: zone id is out of range [ 116.261571][ T8398] netlink: zone id is out of range [ 116.267463][ T8398] netlink: zone id is out of range [ 116.272625][ T8398] netlink: zone id is out of range [ 116.287517][ T8398] netlink: zone id is out of range [ 116.310629][ T8398] netlink: zone id is out of range [ 116.316175][ T8408] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 116.329875][ T8398] netlink: zone id is out of range [ 116.334561][ T8408] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.978'. [ 116.344542][ T8398] netlink: zone id is out of range [ 116.347010][ T8408] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.978'. [ 116.644601][ T8430] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 116.669540][ T8430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.679769][ T8432] netlink: 96 bytes leftover after parsing attributes in process `syz.3.988'. [ 116.716520][ T8428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.831687][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'. [ 116.866789][ T8441] netlink: 6 bytes leftover after parsing attributes in process `syz.1.991'. [ 117.086496][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 117.208567][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'. [ 117.900589][ T8511] netlink: 'syz.1.1011': attribute type 2 has an invalid length. [ 117.910154][ T8511] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 117.920591][ T8511] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 117.937290][ T8511] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 118.088017][ T8523] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 118.117877][ T8523] netlink: 'syz.4.1015': attribute type 4 has an invalid length. [ 118.366917][ T8543] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 118.399412][ T8547] bMtadv_lave_0: renamed from lo (while UP) [ 118.411901][ T8547] bMtadv_lave_0: entered allmulticast mode [ 118.662096][ T8566] team0: Port device team_slave_1 removed [ 118.695775][ T8568] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 118.709051][ T8568] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 118.720126][ T8568] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 118.986702][ T8592] pim6reg1: entered promiscuous mode [ 118.992154][ T8592] pim6reg1: entered allmulticast mode [ 119.556440][ T8638] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 120.409050][ T8704] __nla_validate_parse: 25 callbacks suppressed [ 120.409094][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 120.725130][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 120.885998][ T8731] syz.0.1079[8731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.886096][ T8731] syz.0.1079[8731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.956603][ T8732] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1079'. [ 121.126864][ T8739] xt_nat: multiple ranges no longer supported [ 121.388361][ T8748] bridge0: port 4(ipvlan2) entered blocking state [ 121.408825][ T8748] bridge0: port 4(ipvlan2) entered disabled state [ 121.432814][ T8748] ipvlan2: entered allmulticast mode [ 121.438161][ T8748] bridge0: entered allmulticast mode [ 121.450474][ T8748] ipvlan2: left allmulticast mode [ 121.468618][ T8748] bridge0: left allmulticast mode [ 121.482951][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.500337][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.511868][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.524433][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.534389][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.536772][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 121.541774][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.628138][ T8758] lo speed is unknown, defaulting to 1000 [ 121.663744][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 121.846128][ T8786] block nbd4: not configured, cannot reconfigure [ 122.118133][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 122.129807][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 122.237100][ T8806] xt_TCPMSS: Only works on TCP SYN packets [ 122.280082][ T8822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.330608][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.349237][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.359618][ T8758] bridge_slave_0: entered allmulticast mode [ 122.367638][ T8758] bridge_slave_0: entered promiscuous mode [ 122.398391][ T8834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1104'. [ 122.424678][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.440171][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.449138][ T8758] bridge_slave_1: entered allmulticast mode [ 122.456863][ T8758] bridge_slave_1: entered promiscuous mode [ 122.511072][ T8841] batadv0: entered promiscuous mode [ 122.536572][ T8832] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1107'. [ 122.543305][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.564353][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.576719][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.700926][ T8758] team0: Port device team_slave_0 added [ 122.722270][ T8758] team0: Port device team_slave_1 added [ 122.758007][ T8859] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.788552][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.807459][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.857119][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.884801][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.891773][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.929787][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.978886][ T8866] "syz.3.1117" (8866) uses obsolete ecb(arc4) skcipher [ 123.022428][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 123.075535][ T8864] bridge_slave_0 (unregistering): left allmulticast mode [ 123.084804][ T8864] bridge_slave_0 (unregistering): left promiscuous mode [ 123.091949][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.297017][ T8758] hsr_slave_0: entered promiscuous mode [ 123.315460][ T8758] hsr_slave_1: entered promiscuous mode [ 123.363951][ T8758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.371846][ T8758] Cannot create hsr debugfs directory [ 123.425926][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1123'. [ 123.573099][ T54] Bluetooth: hci0: command tx timeout [ 123.761262][ T8758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.006996][ T8758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.315214][ T8758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.422017][ T8758] bond0: (slave netdevsim0): Releasing backup interface [ 124.445293][ T8758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.663169][ T8758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.669966][ T8970] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 124.689039][ T8758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.704719][ T8758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.720831][ T8758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.905543][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.941624][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.974680][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.982325][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.006542][ T8990] infiniband syz0: set active [ 125.018117][ T8990] net_ratelimit: 34 callbacks suppressed [ 125.018134][ T8990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.065405][ T1165] lo speed is unknown, defaulting to 1000 [ 125.074703][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.082336][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.199813][ T9001] Bluetooth: MGMT ver 1.23 [ 125.340503][ T9011] openvswitch: netlink: Key type 4112 is out of range max 32 [ 125.466557][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.501255][ T9015] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 125.534209][ T8758] veth0_vlan: entered promiscuous mode [ 125.545397][ T8758] veth1_vlan: entered promiscuous mode [ 125.576529][ T8758] veth0_macvtap: entered promiscuous mode [ 125.588531][ T8758] veth1_macvtap: entered promiscuous mode [ 125.620636][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.633580][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.646814][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.655843][ T54] Bluetooth: hci0: command tx timeout [ 125.668247][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.678918][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.689118][ T9015] sctp: [Deprecated]: syz.3.1157 (pid 9015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.689118][ T9015] Use struct sctp_sack_info instead [ 125.694259][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.720226][ T8758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.730029][ T8758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.745908][ T8758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.763047][ T8758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.901891][ T8883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.933024][ T8883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.972297][ T8883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.988350][ T9029] validate_nla: 6 callbacks suppressed [ 125.988367][ T9029] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 126.014945][ T8883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.024714][ T9028] netlink: 'syz.0.1162': attribute type 3 has an invalid length. [ 126.033336][ T9028] __nla_validate_parse: 5 callbacks suppressed [ 126.033351][ T9028] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1162'. [ 126.051034][ T9033] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1163'. [ 126.085329][ T9033] Κό: entered promiscuous mode [ 126.249351][ T9043] netlink: 'syz.0.1167': attribute type 11 has an invalid length. [ 126.258997][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 126.371605][ T9048] can: request_module (can-proto-0) failed. [ 126.400678][ T9052] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1171'. [ 126.410445][ T9052] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 126.416144][ T9054] netlink: 'syz.3.1170': attribute type 6 has an invalid length. [ 126.602351][ T9064] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1175'. [ 126.889640][ T9083] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.943814][ T9087] netlink: 'syz.2.1183': attribute type 2 has an invalid length. [ 126.951913][ T5276] IPVS: starting estimator thread 0... [ 126.952597][ T9087] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.964420][ T9085] tipc: Started in network mode [ 126.970990][ T9085] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.979394][ T9085] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.986796][ T9085] tipc: Enabled bearer , priority 10 [ 126.994670][ T9087] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 127.004318][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1184'. [ 127.052959][ T9089] IPVS: using max 23 ests per chain, 55200 per kthread [ 127.075434][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.095503][ T9087] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.106257][ T9094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1183'. [ 127.113971][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.252620][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 127.252800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.279113][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 127.366011][ T9111] veth0_to_hsr: invalid flags given to default FDB implementation [ 127.392744][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.498250][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.532745][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.745129][ T9130] Cannot find add_set index 0 as target [ 127.851632][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.863675][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.875326][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.893740][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.905531][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 127.911514][ T9139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1195'. [ 127.922607][ T9139] netlink: 'syz.4.1195': attribute type 5 has an invalid length. [ 127.931210][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.012573][ T9131] lo speed is unknown, defaulting to 1000 [ 128.027147][ T9141] netlink: 'syz.3.1197': attribute type 13 has an invalid length. [ 128.052135][ T9141] veth0_macvtap: left promiscuous mode [ 128.077386][ T9141] macvtap0: entered allmulticast mode [ 128.099741][ T46] tipc: Node number set to 2886997162 [ 128.106016][ T9141] macvtap0: refused to change device tx_queue_len [ 128.118731][ T9146] bridge_slave_0: entered promiscuous mode [ 128.138420][ T9146] bridge_slave_0: entered allmulticast mode [ 128.276938][ T9156] x_tables: ip_tables: ah match: only valid for protocol 51 [ 128.318089][ T9158] dvmrp1: entered allmulticast mode [ 128.326522][ T9158] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 128.458748][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 128.531416][ T9169] x_tables: duplicate underflow at hook 2 [ 128.619506][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.639198][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.654825][ T9131] bridge_slave_0: entered allmulticast mode [ 128.662225][ T9131] bridge_slave_0: entered promiscuous mode [ 128.688118][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.711295][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.721365][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.722246][ T9181] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 128.739641][ T9131] bridge_slave_1: entered allmulticast mode [ 128.749275][ T9131] bridge_slave_1: entered promiscuous mode [ 128.797389][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.817228][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.868442][ T9131] team0: Port device team_slave_0 added [ 128.894966][ T9131] team0: Port device team_slave_1 added [ 128.937158][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.945702][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.971828][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.984875][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.992539][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.019751][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.106382][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.195357][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.214932][ T9131] hsr_slave_0: entered promiscuous mode [ 129.224359][ T9131] hsr_slave_1: entered promiscuous mode [ 129.235138][ T9131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.246867][ T9131] Cannot create hsr debugfs directory [ 129.633835][ T9223] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 129.661873][ T9223] bond0: (slave bond_slave_0): Releasing backup interface [ 129.712026][ T81] bridge_slave_1: left allmulticast mode [ 129.718421][ T81] bridge_slave_1: left promiscuous mode [ 129.725267][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.754996][ T81] bridge_slave_0: left allmulticast mode [ 129.770634][ T81] bridge_slave_0: left promiscuous mode [ 129.783514][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.976885][ T54] Bluetooth: hci0: command tx timeout [ 130.052770][ C1] net_ratelimit: 7 callbacks suppressed [ 130.052789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.248698][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.260649][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.271896][ T81] bond0 (unregistering): Released all slaves [ 130.319174][ T8899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.361811][ T8899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.883585][ T9298] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 130.945062][ T9296] sctp: [Deprecated]: syz.2.1240 (pid 9296) Use of int in maxseg socket option. [ 130.945062][ T9296] Use struct sctp_assoc_value instead [ 130.959635][ T81] hsr_slave_0: left promiscuous mode [ 130.973868][ T81] hsr_slave_1: left promiscuous mode [ 130.979998][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.987738][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.002785][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.010504][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.031929][ T81] veth1_macvtap: left promiscuous mode [ 131.038588][ T81] veth0_macvtap: left promiscuous mode [ 131.044178][ T81] veth1_vlan: left promiscuous mode [ 131.050241][ T81] veth0_vlan: left promiscuous mode [ 131.092939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.401409][ T81] team0 (unregistering): Port device team_slave_1 removed [ 131.441209][ T81] team0 (unregistering): Port device team_slave_0 removed [ 131.765952][ T9298] unknown channel width for channel at 909000KHz? [ 131.775005][ T9306] bond0: up delay (65535) is not a multiple of miimon (8196), value rounded to 57372 ms [ 131.803832][ T9309] __nla_validate_parse: 8 callbacks suppressed [ 131.803848][ T9309] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.1243'. [ 131.828622][ T9312] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 131.860682][ T9312] bond0: (slave netdevsim0): no link monitoring support [ 131.888273][ T9312] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 131.912624][ T9312] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.078069][ T54] Bluetooth: hci0: command tx timeout [ 132.091553][ T9131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.132926][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.211743][ T9131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.265034][ T9341] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1251'. [ 132.283342][ T9131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.335406][ T9131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.521487][ T9357] tipc: Enabled bearer , priority 15 [ 132.633869][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.690930][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.716702][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.723887][ T8883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.778528][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.785691][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.073739][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 133.172774][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.230807][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 133.259763][ T9400] vlan4: entered promiscuous mode [ 133.358104][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.411271][ T9131] veth0_vlan: entered promiscuous mode [ 133.436466][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 133.486701][ T9131] veth1_vlan: entered promiscuous mode [ 133.617069][ T9131] veth0_macvtap: entered promiscuous mode [ 133.656434][ T9131] veth1_macvtap: entered promiscuous mode [ 133.680139][ T9131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.690700][ T9131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.702284][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.711963][ T9131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.722480][ T9131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.733744][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.749585][ T9427] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.791621][ T9131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.801027][ T9131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.810278][ T9131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.819377][ T9131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.902266][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.949638][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.962233][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 133.987646][ T9439] xt_hashlimit: size too large, truncated to 1048576 [ 134.008953][ T9442] xt_hashlimit: size too large, truncated to 1048576 [ 134.016323][ T8883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.017133][ T9439] xt_hashlimit: max too large, truncated to 1048576 [ 134.031843][ T9442] xt_hashlimit: max too large, truncated to 1048576 [ 134.033795][ T9444] Bluetooth: MGMT ver 1.23 [ 134.040480][ T9442] xt_hashlimit: overflow, try lower: 0/0 [ 134.045101][ T8883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.050650][ T9439] xt_hashlimit: overflow, try lower: 0/0 [ 134.068975][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 134.213004][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.312409][ T9456] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1282'. [ 134.322577][ T9456] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 134.523295][ T9471] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 134.662442][ T9479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.781031][ T9488] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 134.791368][ T9488] ebt_limit: overflow, try lower: 0/0 [ 134.955050][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1299'. [ 134.965037][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1299'. [ 135.218007][ T9517] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 135.245837][ T9517] netlink: 'syz.3.1306': attribute type 2 has an invalid length. [ 135.252949][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.342013][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.787036][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.799037][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.807516][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.817292][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.826396][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.835305][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.877038][ T9543] lo speed is unknown, defaulting to 1000 [ 135.965460][ T9551] netlink: 'syz.3.1312': attribute type 3 has an invalid length. [ 136.034939][ T9551] netlink: 'syz.3.1312': attribute type 3 has an invalid length. [ 136.278965][ T9570] openvswitch: netlink: EtherType 0 is less than min 600 [ 136.292886][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.314984][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.337821][ T9574] vlan4: entered allmulticast mode [ 136.350573][ T9577] gre2: entered promiscuous mode [ 136.376598][ T9577] dummy0: entered promiscuous mode [ 136.509320][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 136.540478][ T9590] syz.3.1320 (9590) used greatest stack depth: 18904 bytes left [ 136.683498][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.774678][ T6467] ================================================================== [ 136.782788][ T6467] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270 [ 136.790545][ T6467] Write of size 4 at addr ffff8880629e8080 by task kworker/1:7/6467 [ 136.798534][ T6467] [ 136.800872][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 136.811293][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.821345][ T6467] Workqueue: events sco_sock_timeout [ 136.826660][ T6467] Call Trace: [ 136.829950][ T6467] [ 136.832887][ T6467] dump_stack_lvl+0x241/0x360 [ 136.837580][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.842778][ T6467] ? __pfx__printk+0x10/0x10 [ 136.847358][ T6467] ? _printk+0xd5/0x120 [ 136.851520][ T6467] ? __virt_addr_valid+0x183/0x530 [ 136.856630][ T6467] ? __virt_addr_valid+0x183/0x530 [ 136.861732][ T6467] print_report+0x169/0x550 [ 136.866228][ T6467] ? __virt_addr_valid+0x183/0x530 [ 136.871335][ T6467] ? __virt_addr_valid+0x183/0x530 [ 136.876442][ T6467] ? __virt_addr_valid+0x45f/0x530 [ 136.881549][ T6467] ? __phys_addr+0xba/0x170 [ 136.886046][ T6467] ? sco_sock_timeout+0x8b/0x270 [ 136.890977][ T6467] kasan_report+0x143/0x180 [ 136.895470][ T6467] ? __pfx_lock_acquire+0x10/0x10 [ 136.900489][ T6467] ? sco_sock_timeout+0x8b/0x270 [ 136.905418][ T6467] kasan_check_range+0x282/0x290 [ 136.910347][ T6467] sco_sock_timeout+0x8b/0x270 [ 136.915107][ T6467] ? process_scheduled_works+0x976/0x1850 [ 136.920822][ T6467] process_scheduled_works+0xa63/0x1850 [ 136.926366][ T6467] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.932337][ T6467] ? assign_work+0x364/0x3d0 [ 136.936922][ T6467] worker_thread+0x870/0xd30 [ 136.941510][ T6467] ? __kthread_parkme+0x169/0x1d0 [ 136.946527][ T6467] ? __pfx_worker_thread+0x10/0x10 [ 136.951629][ T6467] kthread+0x2f0/0x390 [ 136.955685][ T6467] ? __pfx_worker_thread+0x10/0x10 [ 136.960789][ T6467] ? __pfx_kthread+0x10/0x10 [ 136.965366][ T6467] ret_from_fork+0x4b/0x80 [ 136.969776][ T6467] ? __pfx_kthread+0x10/0x10 [ 136.974353][ T6467] ret_from_fork_asm+0x1a/0x30 [ 136.979115][ T6467] [ 136.982128][ T6467] [ 136.984440][ T6467] Allocated by task 9087: [ 136.988840][ T6467] kasan_save_track+0x3f/0x80 [ 136.993506][ T6467] __kasan_kmalloc+0x98/0xb0 [ 136.998087][ T6467] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 137.004489][ T6467] kmalloc_reserve+0x111/0x2a0 [ 137.009249][ T6467] __alloc_skb+0x1f3/0x440 [ 137.013657][ T6467] inet6_ifinfo_notify+0x72/0x120 [ 137.018670][ T6467] addrconf_notify+0xc6b/0x1020 [ 137.023599][ T6467] notifier_call_chain+0x19f/0x3e0 [ 137.028698][ T6467] dev_set_mtu_ext+0x4e5/0x710 [ 137.033453][ T6467] dev_set_mtu+0xb0/0x1a0 [ 137.037774][ T6467] team_change_mtu+0xbc/0x2b0 [ 137.042437][ T6467] dev_set_mtu_ext+0x3f8/0x710 [ 137.047188][ T6467] dev_set_mtu+0xb0/0x1a0 [ 137.051506][ T6467] bond_enslave+0xcf6/0x3ab0 [ 137.056085][ T6467] do_setlink+0xe73/0x41f0 [ 137.060489][ T6467] rtnl_newlink+0x180d/0x20a0 [ 137.065151][ T6467] rtnetlink_rcv_msg+0x73f/0xcf0 [ 137.070079][ T6467] netlink_rcv_skb+0x1e3/0x430 [ 137.074833][ T6467] netlink_unicast+0x7f6/0x990 [ 137.079588][ T6467] netlink_sendmsg+0x8e4/0xcb0 [ 137.084347][ T6467] __sock_sendmsg+0x221/0x270 [ 137.089015][ T6467] ____sys_sendmsg+0x52a/0x7e0 [ 137.093763][ T6467] __sys_sendmsg+0x292/0x380 [ 137.098338][ T6467] do_syscall_64+0xf3/0x230 [ 137.102826][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.108710][ T6467] [ 137.111017][ T6467] Freed by task 9087: [ 137.114982][ T6467] kasan_save_track+0x3f/0x80 [ 137.119644][ T6467] kasan_save_free_info+0x40/0x50 [ 137.124657][ T6467] __kasan_slab_free+0x59/0x70 [ 137.129407][ T6467] kfree+0x1a0/0x440 [ 137.133296][ T6467] skb_release_data+0x6a0/0x8a0 [ 137.138130][ T6467] consume_skb+0x9f/0xf0 [ 137.142357][ T6467] netlink_broadcast_filtered+0x116d/0x12a0 [ 137.148240][ T6467] nlmsg_notify+0xfb/0x1c0 [ 137.152650][ T6467] addrconf_notify+0xc6b/0x1020 [ 137.157492][ T6467] notifier_call_chain+0x19f/0x3e0 [ 137.162590][ T6467] dev_set_mtu_ext+0x4e5/0x710 [ 137.167342][ T6467] dev_set_mtu+0xb0/0x1a0 [ 137.171659][ T6467] team_change_mtu+0xbc/0x2b0 [ 137.176324][ T6467] dev_set_mtu_ext+0x3f8/0x710 [ 137.181078][ T6467] dev_set_mtu+0xb0/0x1a0 [ 137.185403][ T6467] bond_enslave+0xcf6/0x3ab0 [ 137.189981][ T6467] do_setlink+0xe73/0x41f0 [ 137.194388][ T6467] rtnl_newlink+0x180d/0x20a0 [ 137.199051][ T6467] rtnetlink_rcv_msg+0x73f/0xcf0 [ 137.203975][ T6467] netlink_rcv_skb+0x1e3/0x430 [ 137.208728][ T6467] netlink_unicast+0x7f6/0x990 [ 137.213484][ T6467] netlink_sendmsg+0x8e4/0xcb0 [ 137.218244][ T6467] __sock_sendmsg+0x221/0x270 [ 137.222909][ T6467] ____sys_sendmsg+0x52a/0x7e0 [ 137.227655][ T6467] __sys_sendmsg+0x292/0x380 [ 137.232229][ T6467] do_syscall_64+0xf3/0x230 [ 137.236718][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.242601][ T6467] [ 137.244913][ T6467] The buggy address belongs to the object at ffff8880629e8000 [ 137.244913][ T6467] which belongs to the cache kmalloc-2k of size 2048 [ 137.258949][ T6467] The buggy address is located 128 bytes inside of [ 137.258949][ T6467] freed 2048-byte region [ffff8880629e8000, ffff8880629e8800) [ 137.272816][ T6467] [ 137.275123][ T6467] The buggy address belongs to the physical page: [ 137.281527][ T6467] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x629e8 [ 137.290280][ T6467] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.298765][ T6467] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 137.306303][ T6467] page_type: f5(slab) [ 137.310279][ T6467] raw: 00fff00000000040 ffff88801ac42000 ffffea00009a6200 dead000000000002 [ 137.318848][ T6467] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 137.327416][ T6467] head: 00fff00000000040 ffff88801ac42000 ffffea00009a6200 dead000000000002 [ 137.336076][ T6467] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 137.344731][ T6467] head: 00fff00000000003 ffffea00018a7a01 ffffffffffffffff 0000000000000000 [ 137.353388][ T6467] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 137.362036][ T6467] page dumped because: kasan: bad access detected [ 137.368439][ T6467] page_owner tracks the page as allocated [ 137.374136][ T6467] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5229, tgid 5229 (syz-executor), ts 58456496196, free_ts 12237791844 [ 137.395312][ T6467] post_alloc_hook+0x1f3/0x230 [ 137.400073][ T6467] get_page_from_freelist+0x3045/0x3190 [ 137.405603][ T6467] __alloc_pages_noprof+0x256/0x6c0 [ 137.410784][ T6467] alloc_pages_mpol_noprof+0x3e8/0x680 [ 137.416231][ T6467] alloc_slab_page+0x6a/0x120 [ 137.420894][ T6467] allocate_slab+0x5a/0x2f0 [ 137.425380][ T6467] ___slab_alloc+0xcd1/0x14b0 [ 137.430048][ T6467] __slab_alloc+0x58/0xa0 [ 137.434370][ T6467] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 137.440771][ T6467] kmalloc_reserve+0x111/0x2a0 [ 137.445526][ T6467] pskb_expand_head+0x1f0/0x1380 [ 137.450451][ T6467] netlink_trim+0x183/0x220 [ 137.454942][ T6467] netlink_broadcast_filtered+0x76/0x12a0 [ 137.460647][ T6467] nlmsg_notify+0xfb/0x1c0 [ 137.465052][ T6467] rtnetlink_event+0x21d/0x260 [ 137.469803][ T6467] notifier_call_chain+0x19f/0x3e0 [ 137.474906][ T6467] page last free pid 1 tgid 1 stack trace: [ 137.480691][ T6467] free_unref_page+0xcfb/0xf20 [ 137.485447][ T6467] free_contig_range+0x152/0x550 [ 137.490371][ T6467] destroy_args+0x8a/0x840 [ 137.494774][ T6467] debug_vm_pgtable+0x4be/0x550 [ 137.499615][ T6467] do_one_initcall+0x248/0x880 [ 137.504369][ T6467] do_initcall_level+0x157/0x210 [ 137.509294][ T6467] do_initcalls+0x3f/0x80 [ 137.513609][ T6467] kernel_init_freeable+0x435/0x5d0 [ 137.518793][ T6467] kernel_init+0x1d/0x2b0 [ 137.523110][ T6467] ret_from_fork+0x4b/0x80 [ 137.527514][ T6467] ret_from_fork_asm+0x1a/0x30 [ 137.532268][ T6467] [ 137.534582][ T6467] Memory state around the buggy address: [ 137.540193][ T6467] ffff8880629e7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.548325][ T6467] ffff8880629e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.556387][ T6467] >ffff8880629e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.564437][ T6467] ^ [ 137.568492][ T6467] ffff8880629e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.576548][ T6467] ffff8880629e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.584602][ T6467] ================================================================== [ 137.593765][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.601390][ T6467] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.608598][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 137.619022][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.629090][ T6467] Workqueue: events sco_sock_timeout [ 137.634403][ T6467] Call Trace: [ 137.637690][ T6467] [ 137.640631][ T6467] dump_stack_lvl+0x241/0x360 [ 137.645328][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.650530][ T6467] ? __pfx__printk+0x10/0x10 [ 137.655119][ T6467] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.661102][ T6467] ? vscnprintf+0x5d/0x90 [ 137.665427][ T6467] panic+0x349/0x880 [ 137.669332][ T6467] ? check_panic_on_warn+0x21/0xb0 [ 137.674465][ T6467] ? __pfx_panic+0x10/0x10 [ 137.678974][ T6467] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 137.684864][ T6467] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 137.690756][ T6467] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 137.697088][ T6467] check_panic_on_warn+0x86/0xb0 [ 137.702021][ T6467] ? sco_sock_timeout+0x8b/0x270 [ 137.706957][ T6467] end_report+0x77/0x160 [ 137.711197][ T6467] kasan_report+0x154/0x180 [ 137.715692][ T6467] ? __pfx_lock_acquire+0x10/0x10 [ 137.720712][ T6467] ? sco_sock_timeout+0x8b/0x270 [ 137.725643][ T6467] kasan_check_range+0x282/0x290 [ 137.730574][ T6467] sco_sock_timeout+0x8b/0x270 [ 137.735328][ T6467] ? process_scheduled_works+0x976/0x1850 [ 137.741040][ T6467] process_scheduled_works+0xa63/0x1850 [ 137.746589][ T6467] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.752582][ T6467] ? assign_work+0x364/0x3d0 [ 137.757176][ T6467] worker_thread+0x870/0xd30 [ 137.761770][ T6467] ? __kthread_parkme+0x169/0x1d0 [ 137.766792][ T6467] ? __pfx_worker_thread+0x10/0x10 [ 137.771898][ T6467] kthread+0x2f0/0x390 [ 137.775958][ T6467] ? __pfx_worker_thread+0x10/0x10 [ 137.781069][ T6467] ? __pfx_kthread+0x10/0x10 [ 137.785652][ T6467] ret_from_fork+0x4b/0x80 [ 137.790066][ T6467] ? __pfx_kthread+0x10/0x10 [ 137.794737][ T6467] ret_from_fork_asm+0x1a/0x30 [ 137.799504][ T6467] [ 137.802746][ T6467] Kernel Offset: disabled [ 137.807060][ T6467] Rebooting in 86400 seconds..