last executing test programs: 1m14.444793443s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m1.048888983s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m1.04785214s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 49.955577956s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.402052248s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 35.796356273s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.670239053s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 23.378934195s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 22.939768315s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.587765723s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.054996075s ago: executing program 0 (id=208): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x66) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.812920547s ago: executing program 1 (id=1094): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000000000000080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000500"/28], 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc", 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e21, 0x5, @loopback}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$isdn_base(0x22, 0x3, 0x26) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) splice(r11, 0x0, r12, 0x0, 0x10500, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pS \x00'}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='pids.events\x00', 0x0, 0x0) r15 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r15, 0x84, 0x24, &(0x7f0000000040), 0x4) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000080000001853000002000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006100000044840400fcffffff0780fcff00000000a4a23000ffffffffb5060000fbffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0x94, &(0x7f0000000380)=""/148, 0x41100, 0x40, '\x00', r8, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[r9, r10, 0xffffffffffffffff, r12, 0x1, r13, r14, r16], &(0x7f0000000700)=[{0x4, 0x3, 0x7, 0xb}, {0x0, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x7, 0x1}, {0x5, 0x10000005, 0x4, 0x6}, {0x3, 0x1, 0x4, 0x8}, {0x3, 0x5, 0xe, 0x1}, {0x2, 0x4, 0x0, 0x4}, {0x2, 0x4, 0x80000000}], 0x10, 0x400, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00003f000000000000000006001d0000f7ffff07001e"], 0x2c}}, 0x0) 2.713554457s ago: executing program 2 (id=1095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000050000000000000062000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x5, 0x759, {{0x14, 0x4, 0x3, 0x4, 0x50, 0x66, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @rr={0x7, 0x7, 0x8b, [@remote]}, @lsrr={0x83, 0xf, 0x11, [@dev={0xac, 0x14, 0x14, 0xb}, @loopback, @remote]}, @ssrr={0x89, 0x1f, 0x6c, [@remote, @remote, @remote, @initdev={0xac, 0x1e, 0xd, 0x0}, @multicast1, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="02", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xad01, 0x30}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @generic={0x7, 0xe, 0xa, 0x1, 0xfbd}, @ringbuf_query]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, @lsm=0x1b, r4, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xe, 0x8, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[r5, r6, r7, r8], &(0x7f00000004c0)=[{0x4, 0x3, 0x4, 0x6}, {0x4, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x6, 0x9}, {0x1, 0x3, 0xb, 0x9}, {0x4, 0x5, 0x1, 0x6}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) close(r9) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r10, 0x3) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214000000110001"], 0xc0}}, 0x0) 2.471645392s ago: executing program 1 (id=1097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 2.468448344s ago: executing program 1 (id=1098): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000010001dff0000000000f2000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffffa0000000480012800b0001006261746164760000380002800c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560d0001004241544d414e5f4956000000"], 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010003000100"}) socket$pptp(0x18, 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00edffffff001793c54b32e6ee730000e10000010000000000ad03c70e7176ab5f7701d5"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={r3, 0x1}, 0x8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e22}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4d0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f2ffffff00"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYRESOCT=r7], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r6}, 0x20) sendto$inet(r6, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 2.224428102s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @broadcast}], 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000003c0)=@raw=[@exit, @ldst={0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$inet6_buf(r5, 0x29, 0xcd, &(0x7f0000000140)="aaf00ded89f852c0643f958a575905228ee344fbc52efc", 0x17) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r7, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x8040) 2.215732602s ago: executing program 1 (id=1100): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c00078008"], 0x34}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.948601371s ago: executing program 3 (id=1101): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000d00)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r9 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$ITER_CREATE(0x21, 0x0, 0x0) 1.800411307s ago: executing program 2 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r1, r5}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0xa40, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$nl_route(r0, 0x0, 0x0) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r1, r5}) (async) 1.523858009s ago: executing program 3 (id=1103): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7fffffff}, 0x20) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r0, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x74, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x2, @local, 0x5}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x9, @empty, 0x7ff}, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x506}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e24, 0x28, @ipv4={'\x00', '\xff\xff', @local}}}, [0x3, 0x2, 0x3, 0x5, 0x3, 0x0, 0x5, 0x4, 0x1ff, 0x1, 0x0, 0x2, 0x7e0, 0xfffffffeffffffff, 0x3]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x4e}, &(0x7f0000000240)=0x8) 1.404840281s ago: executing program 2 (id=1104): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x36, 0x0, &(0x7f0000000840)="e0274204690d85ff9782762f86dd344e5e84b7b931088ee47b93b65dffc4ee1d8624df5571330a920d309c51f316414d909bc72f0ec5", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000001c0)=0xb4) 1.350588679s ago: executing program 3 (id=1105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000160a020000000000180100002020782500bfa10000000000000701008358fa5c00f8ffffffb702000008000000b50a00000000000085000000060000009500"/120], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = getgid() r2 = getuid() r3 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002b40)={0x0, 0x0}, &(0x7f0000002b80)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, &(0x7f0000002c00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c40)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002d40)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0, 0x0}, &(0x7f0000002dc0)=0xc) r8 = gettid() r9 = getuid() r10 = getgid() r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002e00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0}, &(0x7f0000002e80)=0xc) r14 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002ec0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002f00)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000003000)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r17, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r19, 0x0, r20}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4040000}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003040)={0x0}, &(0x7f0000003080)=0xc) r22 = socket(0xa, 0x1, 0x3) setsockopt$IP_VS_SO_SET_ADD(r22, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000002, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r22, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000008c0)=0xfffffc6d) sendmsg$nl_xfrm(r22, &(0x7f0000000c40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a40100001c0000042abd7000ffdbdf252bac000700fc000000000000000000000000000000e00000020000000000000000000000004e2100004e2200070a00800032000000", @ANYRES32, @ANYRES32=r23, @ANYBLOB="018000000000000000000000000000000000000000000080040000000000000004000000000000000552000000000002000000000000000000000000000000000000000000002009000000000000000100000000000000ffffffffffffff7f05000000b06b6e0000013d0200000000e4000600ac1414bb000000000000000000000000640101000000000000000000000000004e2400094e2100"/164, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000004d60000000000000000000000000000ffffac1414aa0300000000000000040000000000000009000000000000000100000000000000000000000000000007000000000000007f000000000000000200000000000000ff0100000000000051000000000000000800000000000000ff01000000000000030000003ce200000600000027bd7000053500000a0000072000"/171], 0x1a4}, 0x1, 0x0, 0x0, 0x20040010}, 0x20040000) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000030c0)={0x0, 0x0, 0x0}, &(0x7f0000003100)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000001c0)="abb43c2401bf8ae51fcbe5786b0b3938518f7b6bbf5db6a5a265a9bebf80e95e86422118f5f730075cc38dc0515b23e427a926b80ad94dda23ca3748cb3e5b127ccd40853988a97507053124ec2029a8b911bb3e0859dcead68a02b77cf92089ec6f6d34fabc8af874b8afd8b5641cc4f4d650", 0x73}, {&(0x7f0000000240)="d0a74e1cef6d12995317a1e5f41e39ac836da58e934a0e7aed674c3f3199483a3c33b2188f664d503bc9ca45333603716b218b0c8f39206a9709b739e153add2487129d0da9446", 0x47}, {&(0x7f0000000500)="07c01ddbd9c9784681b4500bb47563dc035addf64e439e2af3f478910e42fb3ea5bf7314332ea3d1b1147b5892ac789ed977e19f361cda0517cda82130d358b4d0b65f10ffd12975838eeccd3110a8d642fb77d3d249dd031d6ae337b6776d94df0c6be631e4e2679ceca48c59034cd6aa9ea3bb99b0e9515b90b081469e441428500904f36cbe08b040aaf5ce5c47e8f390d4bb3dc0b86580e43743ad0edaca2e92013d", 0xa4}, {&(0x7f00000005c0)="21e2d491d37465bbb6befa8e96b75e1051741c929b83092168f2d58b7d38f54977e8ed67c9c45748faab03d2cabc89a7a46a573cadf45e0bc7f48b2c3074f460b37638c504ddc267ba0245f74a25f21165e0f565742f538edb556d4c31a7511f88d9aab4979dc369050ad300abb3daca8950f5ec71c50c1672cd5a690283a5285870900021069991273b40a6179298f970be41511bfc5b", 0x97}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x40, 0x20000000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000009c0)="9e985272bfe030ed13aa250d0f478658101f691f1945d9ca2bb096e3f13bc4cb6da796686d7b172f0894af2e0909eabe1a0ee8e7056ef9082252ee8da1d22c91541ec01cae0f5a834ba77956aee2059ad5bcff6b84c831d05b0185b73279d35c55664235b857776e60ee6faa1fbc4466da47a12e", 0x74}, {&(0x7f0000000a40)="c39d59b88fcc0a28415a4f188e5d162e1da4f008aedc1891682cf13079f2078dfcbf3abe212ebab2ce3fa3a78b588cb3df8ac4000a5c1f614be68b24cc2da79736b1d4f1b06ea4bec939af34925065cc376319fa9d873e6448ee5c2ab20968f2f37ea3d4230128f3898633b8cb07a4649eac7abf2923c84027382e915d0128a08e6f5042583928f95ea7de4114f4c451c291e635c4dd2e9c6ae66b8d403eed8cb34120", 0xa3}, {&(0x7f0000000b00)="9008106139bb4f360af4a9b2a786a814cf85905ab5356520177edc75a17ae78d72a4a3a31bef7dd64c6ba87b4b684d37d62e4525e2df6287aa935c0743834e861daa1d888c6cb6ba59789d7763572fc25c70e595fa39636760c328c620779c8d77bdd4df978858e1697b593cbd15351b36b8f687130bd779e950", 0x7a}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c}}], 0xb0, 0x40}}, {{&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e40)="2d7ba7b3a9494d81ce815bf305c3d845e362f9401f4b32703f4b8c65bce0fc04fc7df4154f96407076ccc29a535be8886c8d761a884d1c38b32d7b4a58ffd5ef0c930124dd5f13278be83e3997a2fb9beb968303afddca71ca081616912260f6a85e3f1e02f55d6bcf3c6e05b5c7b7193440fcea09a5f329ffbb532a542b75df061b11bdff39bda67ef695eb68ef5a2c95558b8497b6c5ad2ca47c14a99f27e96d9565efc69534968f6681332837631c73547773fcd2076e5ee16f87ab01ce5c0b7ec5899ec9b6c05b7ccfe296bf36ec", 0xd0}, {&(0x7f0000000f40)="453a85985efadbeda48e5f809d51715add96ba06d4124f9971ef233487a86137dd27a27ba5037793f43f207d6928193025213a291bb487f058a58f1da847e79f39b7f1ea3a8d239fc59ca66bbcd3640761dead3f014301b3352bf76d1d151367ecd4f2655ccad00d6ba4be3156116b91c7a9d9d3bb2f76b61c0ec74e7334d1bdaac75f4e668ab02a969903df47da045535f38aed489f996c7db877b4c14f1f3355e8318d66afc05fd7351ccc7784f6696942ad297a4c7e1501e4fd452a445313a3", 0xc1}, {&(0x7f0000001040)="d95fcceeec047271e2fdae2a45fcd21c52bad4e240006941144e5f3289a82f0ee28d59407f21cae2b4c686ac325aaea9ff16f8e160d8d069ba4c4d9c9332b7298ceb7bd864ef518a8290cb9b83c78f7eb6ed5d", 0x53}], 0x3, 0x0, 0x0, 0x20048090}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001100)="a60323cf15e9da07287b64124000cd3d0a0ed9d4fc43805aa11872dde4c4e8ff0908b17fef3d8861d34f902ea5c5123a5a40bb36aadacc9e1b63af4cd5bf1be6a78ce34318d08c80e8c67fec609928ee4f30e823e6bd14794b62ba987befdc8466f315e01de8e5a430597148c2aad345748025fa2c942bff285db57bb13e433482ec28a10432", 0x86}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="909934828a736f04b3fd7e078602ad2a85baba46acd8a3e1c81b9bf88d0e8350aa0681b56e170f7b53d34e29855d5f9e5fb228e40b50fd40af57301f45fb7123ff4104a4db55227c988c57610320becdf0cbf9aff3b9fa1ed4e542d0ba2e6e31bfb3592485aedd641310781d110335fc3638fc40f64e5b134d8d73b199fc26ea61531091877b493f950f3f43d5c4c8e2df2699c57bdf2be8924e786baf248d1f3e8244d2d1e27ab49853a86e4c7b2c19293a7c7b29eb917027344cfe84ade6ed1b34d1b1ff0b52e7dfce8988", 0xcc}, {&(0x7f00000022c0)="357fd1ce35c3b7e0de926a42bd8db49a1f2b793bfa850de2e63ad6e9d11c3cf0e2d7a9126659bf1d81cf25a4f8d6ad4cf72f8f97a74060ec4d1ff1c8e5348fa86125796548d35eedebf25d59dae53d1a52645d419beaaebf6c02645a9c6e6cbd139cbdeecfc25217c6db619db66ac4157ebecf2e8c8c756843e68ebf4fce847b053827b948e1abd8aa28a5ac659296a1612f2ac6dca4d7a565a6428ae75aa4c5c6e2276719bf008763f0d20636c839eda490be8ba5e3dd8abcb9723b19ebf030a7582d7998", 0xc5}, {&(0x7f00000023c0)="ed059289f6260bc6d2f3e7dd33ab2473510627cc3dea3b936b012a988726ce6430349469bb8a5d37804a0c6570c15b9821cd7e9641b5591ad7e856effa74040e7264fd0eed5f1fb2f4f784484716c507880fd58da4af58eec620af6c7138f6a64eb274e5b2a62d5aa39b2898407d263bcbc824a86d65648b31352055dfe4f21eaec8948b65acd28d726e6fdd751a8db549e47ebfff73890e28eafefab47d7872332dba9af1bcf8d014f3e1ed16cec9d368ac1e55338938843bcb23919be7542f24fbcc927254e1510c", 0xc9}, {&(0x7f00000024c0)="43bb51b08ba7a6ad336740c1271be97073b447b96d81423a17f5def56fcc63ddd531ce7bda373ffb8b9428d74d56b9a397f6e11d3a14ea9280155d1330e85cd255ed25c7617a5df38c16e5d8b79dec96d0eda643473748f7866b596d521e5a4e1d3503337840acb27abebf596db8464d5cbe1d6ee5ae40302f3edb437b2bf9e87775be43a482a341e3b12802911a9149c42741ad99d687413dc83c772d4865823d53b3aa3ea15ae3322e", 0xaa}, {&(0x7f0000002580)="de18a3c12c0e96620014232d1a4c52a66607d155ea37dafd7c521c862371070d443ca4a12cfb6b48b3273b4cb40ea939a226f980c25f5fad0a168bb72daddaa8be054746d6ec4aa28d51162ce1d630b3cb63cad2fcd3a24e15c3b1c702fc43768504b57da1a93ca3e901809370819325845d845b2274b4bbd2dbdea983b2f2912cbb329f", 0x84}, {&(0x7f0000002640)="573bd5f56650aaa7961c8445300d5e2403c8d339610590624c58a2a5b401c5cff00727c28623b84607e264c83aa8920cea89c130522b3020507a85730d1ebc67234a47e37ab4ac64ea2c44ec303949d92858ea591c206f839ba9a591eac23eac49360b9968ef78fbf578f8c4f5e99a93b3c1a2c52c795ca87957e1eca80bb8e4ded30b166d8f665390914488651dc42f63e19656", 0x94}, {&(0x7f0000002700)="233bfd5501465af9a93efa8a3f7ca5d566fe918c83ba6633837a1d40cbeba4a2d5cae90e97327668ad1121efc931e4885176d15645", 0x35}], 0x9, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4048045}}, {{&(0x7f00000028c0)=@abs={0xc392441924ac8a18, 0x0, 0x4e21}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)="f53c813d085c4a8135d32c23005743bfc9f45098e138649a31c3ce53abdcf286d1cd3f112fbf01d4719673fbf2d47845e352741dc3dd644c510cfb096bda87ff0e90f23a4dba1488d08a6e2525042f578fefb56d140bc00739d2b22afe9327b4ccf965b5154ce782b19ac1671088d720b3c7a8484a403641b69437003f71e1ba18fed797352e68bbba21656b7fc4fd81d88bb1740e640644a6915ed6883e827ca56bcf03319850bd643eb0d258550398", 0xb0}, {&(0x7f0000002a00)="8bc7e5d5e1bb0f4dd78ed6ed9cc448f1dde657ab955af3ddbfb278", 0x1b}], 0x2, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r11, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r23, r24}}}], 0x150, 0x20028000}}], 0x5, 0x4040000) 1.167879496s ago: executing program 1 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000000000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000110010000000000002000000ac5414aa0000000000000000000000000000000000003200"], 0x28}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000d80)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x4e) r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @netrom}, [@null, @rose, @default, @default, @bcast, @remote, @null, @rose]}, &(0x7f0000000000)=0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x1ff}, 0x3}) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000640), &(0x7f00000006c0)=0x4) r9 = accept4$alg(r6, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xf5f}], 0x1, 0x2003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000b8965acd4f7e866fc15bf806c71b563a38a72998f38f704dd02b5f570907764430f888b2aea821d390e1", @ANYRES16=r11, @ANYBLOB="49530000050003000000e700000008006c37", @ANYRES32=0x0, @ANYBLOB="0c009900080000000000000004004280"], 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)="817e", 0x2}], 0x1}, 0x8861) setsockopt$sock_attach_bpf(r14, 0x1, 0x10, &(0x7f0000001280), 0x4) readv(r14, &(0x7f0000001380)=[{&(0x7f0000002240)=""/4094, 0xffe}], 0x1) 1.032571205s ago: executing program 3 (id=1107): r0 = socket(0x11, 0x3, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="060000000400ce1370bbcdef99d300000000000061eaafcadfcfa24dd03cc46e98ab538011dfca67a9096f547d83e2e1e32c528e2eab064aec5cb77c2f40eadcd017ceebdee436d19f9b31dc3190", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069119500000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x9b, &(0x7f0000000580)}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x0, 0x8400, 0x1, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r9, 0x0, 0x20000000, 0x4}, 0x20) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed60", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r10, 0x1) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x15) 673.133787ms ago: executing program 2 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 357.002475ms ago: executing program 2 (id=1109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x973}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast1, r2}, 0x14) 28.770909ms ago: executing program 1 (id=1110): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x0, 0xa0028000}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x24c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r4, @ANYBLOB="cd3e0000000000000000020000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r4, @ANYBLOB="cd3e0000000000000000020000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x207f, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) setsockopt(0xffffffffffffffff, 0x8, 0x8000, &(0x7f0000000040)="6ef40dfd04a70b4b206f2e97fbedf86d83fcce2b472ee2e91f08a1e2680c540ad99691d2a6d73bc29e3c821a051cd081855d7bba999fcb9eebbf9b780108a5a8a41a2fbfe4d4fa74ed8af7ea4bd0a6d5367fec2dadb825eebadba7613b36b0631e7b954d03d1a3ea93b55e00c52c6fc0e2ee7f35fa2628c093072e584a6fbb1bad4cfa4e59fcd6ccd5958f74a147a4bbe45869a5e7893232e508049493b969f4ab3104d96937368935857ff420921d0a", 0xb0) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x99) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x1000000000, 0xa14c, 0x3], 0x0, 0x0}, 0x78) (async) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x1000000000, 0xa14c, 0x3], 0x0, 0x0}, 0x78) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{&(0x7f0000002980)={0xa, 0x4e21, 0xec5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3b}}}], 0x18}}], 0x1, 0x20044885) 27.123517ms ago: executing program 3 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x5}}]}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtclass={0x4c, 0x28, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {0x9, 0xfff1}, {0xb, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xfb}}, @TCA_RATE={0x6, 0x5, {0x16, 0xff}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 16.792276ms ago: executing program 2 (id=1112): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r2, 0x10, 0x0, 0x100}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x45, 0x0, 0x0, 0x6}}, 0x1c}}, 0x40000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) 0s ago: executing program 4 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x4e000}) socket(0x1a, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): ered promiscuous mode [ 164.324724][ T8895] bridge0: port 3(vlan3) entered blocking state [ 164.331196][ T8895] bridge0: port 3(vlan3) entered forwarding state [ 164.343694][ T8895] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.364555][ T8885] lo speed is unknown, defaulting to 1000 [ 164.417246][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.431567][ T3449] bridge0: port 3(vlan3) entered disabled state [ 164.528942][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.545031][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.592678][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.602498][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.777536][ T8671] veth0_vlan: entered promiscuous mode [ 164.815096][ T8671] veth1_vlan: entered promiscuous mode [ 165.117518][ T8671] veth0_macvtap: entered promiscuous mode [ 165.127900][ T8671] veth1_macvtap: entered promiscuous mode [ 165.142221][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.152864][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.163197][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.174033][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.185437][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.200470][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.211143][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.221173][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.232034][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.242762][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.253365][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.263576][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.274071][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.284984][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.314720][ T8671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.324130][ T8671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.333391][ T8671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.346793][ T8671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.359291][ T8920] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 165.386377][ T8920] vlan4: entered allmulticast mode [ 165.513314][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.525094][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.556586][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.571385][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.606216][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.666'. [ 166.011955][ T3449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.307336][ T3449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.365281][ T3449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.422758][ T3449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.522771][ T3449] bridge_slave_1: left allmulticast mode [ 166.529297][ T3449] bridge_slave_1: left promiscuous mode [ 166.535275][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.544618][ T3449] bridge_slave_0: left allmulticast mode [ 166.550866][ T3449] bridge_slave_0: left promiscuous mode [ 166.556555][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.947815][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.964352][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.975797][ T3449] bond0 (unregistering): Released all slaves [ 167.137221][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.146504][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.157638][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.168333][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.177040][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.186951][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.242356][ T8941] lo speed is unknown, defaulting to 1000 [ 167.285869][ T3449] hsr_slave_0: left promiscuous mode [ 167.292687][ T3449] hsr_slave_1: left promiscuous mode [ 167.298396][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.306007][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.314249][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.323305][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.344173][ T3449] veth1_macvtap: left promiscuous mode [ 167.350515][ T3449] veth0_macvtap: left promiscuous mode [ 167.356069][ T3449] veth1_vlan: left promiscuous mode [ 167.361656][ T3449] veth0_vlan: left promiscuous mode [ 167.695510][ T8947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'. [ 167.929002][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.943942][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.959676][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.974719][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.993208][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.001248][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.026732][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 168.113793][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 168.276647][ T8964] netlink: 412 bytes leftover after parsing attributes in process `syz.1.679'. [ 168.770002][ T8952] lo speed is unknown, defaulting to 1000 [ 168.939365][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 169.074346][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 169.114837][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 169.145838][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 169.226382][ T8988] veth0_vlan: left allmulticast mode [ 169.261528][ T5856] Bluetooth: hci2: command tx timeout [ 169.274280][ T8988] bond1: left allmulticast mode [ 169.318323][ T9000] netlink: zone id is out of range [ 169.407097][ T8994] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.517353][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.525046][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.533655][ T8941] bridge_slave_0: entered allmulticast mode [ 169.541222][ T8941] bridge_slave_0: entered promiscuous mode [ 169.561863][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.569015][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.576467][ T8941] bridge_slave_1: entered allmulticast mode [ 169.583791][ T8941] bridge_slave_1: entered promiscuous mode [ 169.652934][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.707304][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.747525][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.775190][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.795081][ T8952] bridge_slave_0: entered allmulticast mode [ 169.809986][ T8952] bridge_slave_0: entered promiscuous mode [ 169.821536][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.828772][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.845016][ T8952] bridge_slave_1: entered allmulticast mode [ 169.855899][ T8952] bridge_slave_1: entered promiscuous mode [ 170.000896][ T8941] team0: Port device team_slave_0 added [ 170.128128][ T5856] Bluetooth: hci3: command tx timeout [ 170.257230][ T8941] team0: Port device team_slave_1 added [ 170.395483][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.436077][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.459907][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.473389][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.503705][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.547100][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.686440][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.690414][ T9061] netlink: 52 bytes leftover after parsing attributes in process `syz.2.691'. [ 170.728301][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.746289][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.800274][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.903484][ T8952] team0: Port device team_slave_0 added [ 170.995212][ T9069] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 171.005471][ T9069] netlink: 216 bytes leftover after parsing attributes in process `syz.2.693'. [ 171.014920][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 171.026737][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.087636][ T8952] team0: Port device team_slave_1 added [ 171.108386][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 171.138976][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 171.151759][ T9068] tc_dump_action: action bad kind [ 171.194180][ T8941] hsr_slave_0: entered promiscuous mode [ 171.228456][ T8941] hsr_slave_1: entered promiscuous mode [ 171.310298][ T5856] Bluetooth: hci2: command tx timeout [ 171.338438][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.539174][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.560494][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.591582][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.668699][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.676004][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.726441][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.879263][ T3449] bridge_slave_1: left allmulticast mode [ 171.897210][ T3449] bridge_slave_1: left promiscuous mode [ 171.906550][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.927874][ T3449] bridge_slave_0: left allmulticast mode [ 171.946813][ T3449] bridge_slave_0: left promiscuous mode [ 171.970890][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.191638][ T5856] Bluetooth: hci3: command tx timeout [ 172.495730][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.506480][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.517321][ T3449] bond0 (unregistering): Released all slaves [ 172.528925][ T9098] ip6tnl3: entered allmulticast mode [ 172.542050][ T8952] hsr_slave_0: entered promiscuous mode [ 172.548785][ T8952] hsr_slave_1: entered promiscuous mode [ 172.555365][ T8952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.565206][ T8952] Cannot create hsr debugfs directory [ 172.699146][ T9120] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 172.715166][ T9120] syzkaller0: linktype set to 6 [ 172.957700][ T9122] syzkaller0: entered promiscuous mode [ 172.967695][ T9122] syzkaller0: entered allmulticast mode [ 173.025071][ T3449] hsr_slave_0: left promiscuous mode [ 173.038316][ T3449] hsr_slave_1: left promiscuous mode [ 173.047592][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.063878][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.085668][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.099387][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.129845][ T3449] veth1_macvtap: left promiscuous mode [ 173.136907][ T3449] veth0_macvtap: left promiscuous mode [ 173.142885][ T3449] veth1_vlan: left promiscuous mode [ 173.148312][ T3449] veth0_vlan: left promiscuous mode [ 173.400730][ T5856] Bluetooth: hci2: command tx timeout [ 173.475653][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'. [ 173.698693][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 173.737632][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 174.271072][ T5856] Bluetooth: hci3: command tx timeout [ 175.476355][ T5856] Bluetooth: hci2: command tx timeout [ 176.350724][ T5856] Bluetooth: hci3: command tx timeout [ 176.437830][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 176.624474][ T8941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.648812][ T8941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.666234][ T9197] netlink: 'syz.3.724': attribute type 4 has an invalid length. [ 176.726709][ T8941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.748964][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 176.757896][ T8941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.859549][ T8952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.928913][ T8952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.953669][ T8952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.970529][ T8952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.039950][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.129535][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.158172][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.165351][ T9038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.228231][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.235428][ T9038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.333458][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 177.368429][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.415117][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.453386][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.460604][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.557265][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.564446][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.791977][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.981948][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.021519][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 178.190012][ T8952] veth0_vlan: entered promiscuous mode [ 178.273271][ T8952] veth1_vlan: entered promiscuous mode [ 178.313394][ T9266] xt_l2tp: invalid flags combination: 0 [ 178.373309][ T8952] veth0_macvtap: entered promiscuous mode [ 178.411405][ T8952] veth1_macvtap: entered promiscuous mode [ 178.436373][ T8941] veth0_vlan: entered promiscuous mode [ 178.504113][ T8941] veth1_vlan: entered promiscuous mode [ 178.543476][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.563404][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.584445][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.634088][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'. [ 178.722771][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.739660][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.749756][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.761040][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.771844][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.782464][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.794737][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.804583][ T8952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.813382][ T8952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.822571][ T8952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.832661][ T8952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.966504][ T8941] veth0_macvtap: entered promiscuous mode [ 179.017640][ T8941] veth1_macvtap: entered promiscuous mode [ 179.047265][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 179.081496][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.081783][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.110390][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.110950][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.126762][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.138652][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.160472][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.161109][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.190835][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.199607][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.210149][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.230536][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.262311][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.281520][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.310505][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.326999][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.340162][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.351795][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.361786][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.372683][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.383592][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.398114][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.408048][ T8941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.420376][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.428280][ T8941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.449677][ T8941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.458676][ T8941] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.542242][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.750'. [ 179.769534][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.786382][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.853930][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.863908][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.101453][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.756'. [ 180.118963][ T9326] nbd: must specify at least one socket [ 180.231984][ T9334] xfrm1: entered allmulticast mode [ 180.283045][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 180.319861][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 180.586680][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.742684][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.811597][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.824732][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.833575][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.842931][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.851085][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 180.858737][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.890593][ T9343] lo speed is unknown, defaulting to 1000 [ 180.927311][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.003577][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.051886][ T9343] chnl_net:caif_netlink_parms(): no params data found [ 181.152965][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.160227][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.167444][ T9343] bridge_slave_0: entered allmulticast mode [ 181.176040][ T9343] bridge_slave_0: entered promiscuous mode [ 181.193365][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.205089][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.212531][ T9343] bridge_slave_1: entered allmulticast mode [ 181.219024][ T9343] bridge_slave_1: entered promiscuous mode [ 181.272483][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.290765][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.301938][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.436489][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.476368][ T9343] team0: Port device team_slave_0 added [ 181.562697][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.606344][ T9343] team0: Port device team_slave_1 added [ 181.654401][ T9364] veth0_to_team: entered promiscuous mode [ 181.672957][ T9364] veth0_to_team: entered allmulticast mode [ 181.737407][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.748219][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.757551][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.782958][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.793507][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.802927][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.839593][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.975046][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.990878][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.021200][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 182.025215][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.045545][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.052671][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.080020][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.152761][ T9367] lo speed is unknown, defaulting to 1000 [ 182.182732][ T9378] netlink: 'syz.2.767': attribute type 8 has an invalid length. [ 182.195666][ T9343] hsr_slave_0: entered promiscuous mode [ 182.207042][ T9343] hsr_slave_1: entered promiscuous mode [ 182.207160][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.767'. [ 182.222827][ T9343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.235877][ T9343] Cannot create hsr debugfs directory [ 182.261600][ T9378] vlan3: left allmulticast mode [ 182.266514][ T9378] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 182.275241][ T9378] vlan3: left promiscuous mode [ 182.281192][ T9378] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 182.289004][ T9378] bridge0: port 3(vlan3) entered disabled state [ 182.312924][ T9378] bridge_slave_1: left allmulticast mode [ 182.318799][ T9378] bridge_slave_1: left promiscuous mode [ 182.324102][ T9383] netlink: 'syz.3.770': attribute type 30 has an invalid length. [ 182.324908][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.340971][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 182.341837][ T9378] bridge_slave_0: left allmulticast mode [ 182.355645][ T9378] bridge_slave_0: left promiscuous mode [ 182.386702][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.437078][ T9378] bond0: (slave bridge0): Releasing backup interface [ 182.497833][ T9383] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 182.677363][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 182.771007][ T61] bridge_slave_1: left allmulticast mode [ 182.776930][ T61] bridge_slave_1: left promiscuous mode [ 182.795634][ T9400] netlink: 'syz.1.772': attribute type 4 has an invalid length. [ 182.805271][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.844662][ T61] bridge_slave_0: left allmulticast mode [ 182.852275][ T9388] netlink: 'syz.1.772': attribute type 4 has an invalid length. [ 182.855018][ T61] bridge_slave_0: left promiscuous mode [ 182.867380][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.878369][ T61] bridge_slave_1: left allmulticast mode [ 182.884269][ T61] bridge_slave_1: left promiscuous mode [ 182.890038][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.899916][ T61] bridge_slave_0: left allmulticast mode [ 182.909695][ T61] bridge_slave_0: left promiscuous mode [ 182.917406][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.928508][ T54] Bluetooth: hci2: command tx timeout [ 182.961749][ T9406] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 182.970264][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 183.520551][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.532341][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.542747][ T61] bond0 (unregistering): Released all slaves [ 183.657428][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.668842][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.680045][ T61] bond0 (unregistering): Released all slaves [ 183.696360][ T9398] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.705728][ T9398] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.715405][ T9398] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.724327][ T9398] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.733515][ T9398] geneve2: entered promiscuous mode [ 183.738739][ T9398] geneve2: entered allmulticast mode [ 183.848530][ T9401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.859280][ T9401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.870786][ T54] Bluetooth: hci3: command tx timeout [ 184.030853][ T6887] lo speed is unknown, defaulting to 1000 [ 184.090439][ T9401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.101878][ T9401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.196805][ T9401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.208807][ T9401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.477385][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 184.801172][ T9401] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.817128][ T9401] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.877764][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.909294][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.918678][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.928154][ T9367] bridge_slave_0: entered allmulticast mode [ 184.936982][ T9367] bridge_slave_0: entered promiscuous mode [ 184.946406][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.953855][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.961182][ T9367] bridge_slave_1: entered allmulticast mode [ 184.968209][ T9367] bridge_slave_1: entered promiscuous mode [ 184.986373][ T9401] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.001542][ T9401] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.010996][ T5850] Bluetooth: hci2: command tx timeout [ 185.036502][ T9401] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.064028][ T9401] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.177616][ T9401] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.186784][ T9401] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.306762][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.339290][ T61] hsr_slave_0: left promiscuous mode [ 185.351424][ T61] hsr_slave_1: left promiscuous mode [ 185.368748][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.386135][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.401828][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.409934][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.439254][ T61] hsr_slave_0: left promiscuous mode [ 185.452509][ T61] hsr_slave_1: left promiscuous mode [ 185.468323][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.480461][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.491634][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.499185][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.543151][ T61] veth1_macvtap: left promiscuous mode [ 185.548728][ T61] veth0_macvtap: left promiscuous mode [ 185.554452][ T61] veth1_vlan: left promiscuous mode [ 185.559886][ T61] veth0_vlan: left promiscuous mode [ 185.574256][ T61] veth1_macvtap: left promiscuous mode [ 185.579776][ T61] veth0_macvtap: left promiscuous mode [ 185.585453][ T61] veth1_vlan: left promiscuous mode [ 185.590875][ T61] veth0_vlan: left promiscuous mode [ 185.950477][ T5850] Bluetooth: hci3: command tx timeout [ 186.150470][ T61] team0 (unregistering): Port device team_slave_1 removed [ 186.199768][ T61] team0 (unregistering): Port device team_slave_0 removed [ 186.430430][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 186.438090][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 186.438128][ T5845] Bluetooth: hci0: command 0x0c20 tx timeout [ 186.957747][ T61] team0 (unregistering): Port device team_slave_1 removed [ 187.010308][ T61] team0 (unregistering): Port device team_slave_0 removed [ 187.072000][ T54] Bluetooth: hci2: command tx timeout [ 187.396153][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.452786][ T9465] bond4: entered promiscuous mode [ 187.457972][ T9465] bond4: entered allmulticast mode [ 187.463381][ T9465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.537643][ T9367] team0: Port device team_slave_0 added [ 187.548074][ T9367] team0: Port device team_slave_1 added [ 187.743582][ T9343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.765122][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.780311][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.794107][ T9484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.794'. [ 187.808775][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.831267][ T9343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.917136][ T9343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.946303][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.970172][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.000883][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.018423][ T9343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.030363][ T54] Bluetooth: hci3: command tx timeout [ 188.205125][ T9501] netlink: 'syz.2.798': attribute type 7 has an invalid length. [ 188.241689][ T9501] netlink: 'syz.2.798': attribute type 8 has an invalid length. [ 188.252852][ T9367] hsr_slave_0: entered promiscuous mode [ 188.268629][ T9367] hsr_slave_1: entered promiscuous mode [ 188.372147][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 188.454338][ T9515] x_tables: duplicate underflow at hook 2 [ 188.462992][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 188.659221][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.761891][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.808482][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.816431][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.837798][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.845025][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.864713][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 188.939152][ T9524] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 188.948632][ T9524] macvlan2: entered allmulticast mode [ 189.084456][ T9367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.156649][ T9367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.163876][ T54] Bluetooth: hci2: command tx timeout [ 189.194825][ T9367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.216164][ T9367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.345631][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.411631][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.475391][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 189.478398][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.491636][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.537525][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.560284][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.567501][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.626478][ T9554] lo speed is unknown, defaulting to 1000 [ 189.701823][ T9343] veth0_vlan: entered promiscuous mode [ 189.716077][ T9555] lo speed is unknown, defaulting to 1000 [ 189.737177][ T9343] veth1_vlan: entered promiscuous mode [ 189.908768][ T9343] veth0_macvtap: entered promiscuous mode [ 189.932940][ T9343] veth1_macvtap: entered promiscuous mode [ 189.957684][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.969655][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.981848][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.008466][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.029089][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.049636][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.066183][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.076248][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.087218][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.098716][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.115423][ T54] Bluetooth: hci3: command tx timeout [ 190.124351][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.223256][ T9343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.234610][ T9343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.244892][ T9343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.263903][ T9343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.331488][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'. [ 190.441290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.469406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.524338][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.545630][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.880803][ T9367] veth0_vlan: entered promiscuous mode [ 190.934701][ T9367] veth1_vlan: entered promiscuous mode [ 190.989809][ T9367] veth0_macvtap: entered promiscuous mode [ 191.018343][ T9367] veth1_macvtap: entered promiscuous mode [ 191.058833][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.080659][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.098212][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.110033][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.123075][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.138522][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.179584][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.200437][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.233185][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.250365][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.262387][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.273232][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.286299][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.302262][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.322739][ T9367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.332352][ T9367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.341967][ T9367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.351568][ T9367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.381942][ T9607] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.826'. [ 191.408732][ T9615] netlink: 'syz.1.827': attribute type 4 has an invalid length. [ 191.528472][ T5999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.622614][ T5999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.657041][ T9038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.669445][ T9038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.703045][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.712264][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.917676][ T5999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.132016][ T5999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.238902][ T5999] bridge_slave_1: left allmulticast mode [ 192.244689][ T5999] bridge_slave_1: left promiscuous mode [ 192.250655][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.259362][ T5999] bridge_slave_0: left allmulticast mode [ 192.265330][ T5999] bridge_slave_0: left promiscuous mode [ 192.271517][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.628810][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'. [ 192.740713][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.749697][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.801317][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.817968][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.831941][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.849308][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.885563][ T9637] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 192.928253][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.950032][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.967508][ T5999] bond0 (unregistering): Released all slaves [ 192.998854][ T9624] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 193.088815][ T9632] lo speed is unknown, defaulting to 1000 [ 193.124592][ T9624] netlink: 52 bytes leftover after parsing attributes in process `syz.2.829'. [ 193.377747][ T5999] hsr_slave_0: left promiscuous mode [ 193.386458][ T5999] hsr_slave_1: left promiscuous mode [ 193.395457][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.403936][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.414019][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.422014][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.445299][ T5999] veth1_macvtap: left promiscuous mode [ 193.450888][ T5999] veth0_macvtap: left promiscuous mode [ 193.456395][ T5999] veth1_vlan: left promiscuous mode [ 193.462352][ T5999] veth0_vlan: left promiscuous mode [ 193.845771][ T5999] team0 (unregistering): Port device team_slave_1 removed [ 193.892364][ T5999] team0 (unregistering): Port device team_slave_0 removed [ 194.354986][ T9650] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.480476][ T9632] chnl_net:caif_netlink_parms(): no params data found [ 194.609180][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615679][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.694615][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.711670][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.720869][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.733565][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.752206][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.765418][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.909544][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.911278][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 194.919295][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.926550][ T54] Bluetooth: hci2: command tx timeout [ 194.933778][ T9632] bridge_slave_0: entered allmulticast mode [ 194.947249][ T9632] bridge_slave_0: entered promiscuous mode [ 194.983288][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.991497][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.999115][ T9632] bridge_slave_1: entered allmulticast mode [ 195.007186][ T9632] bridge_slave_1: entered promiscuous mode [ 195.068211][ T9658] lo speed is unknown, defaulting to 1000 [ 195.088963][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.124380][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.214954][ T9632] team0: Port device team_slave_0 added [ 195.227566][ T9632] team0: Port device team_slave_1 added [ 195.306964][ T9673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 195.370471][ T5999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.389220][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.416138][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.450979][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.529361][ T5999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.548619][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.561260][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.599878][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.617090][ T9685] sctp: [Deprecated]: syz.3.841 (pid 9685) Use of int in maxseg socket option. [ 195.617090][ T9685] Use struct sctp_assoc_value instead [ 195.643059][ T9682] netlink: 244 bytes leftover after parsing attributes in process `syz.3.841'. [ 195.747052][ T5999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.784286][ T9691] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 195.815756][ T9632] hsr_slave_0: entered promiscuous mode [ 195.829115][ T9632] hsr_slave_1: entered promiscuous mode [ 195.840204][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.847801][ T9632] Cannot create hsr debugfs directory [ 195.912466][ T5999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.933640][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 196.062594][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 196.262038][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.846'. [ 196.343861][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.380881][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.393143][ T9658] bridge_slave_0: entered allmulticast mode [ 196.411921][ T9658] bridge_slave_0: entered promiscuous mode [ 196.440866][ T5999] bridge_slave_1: left allmulticast mode [ 196.453575][ T5999] bridge_slave_1: left promiscuous mode [ 196.467728][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.476880][ T5999] bridge_slave_0: left allmulticast mode [ 196.483261][ T5999] bridge_slave_0: left promiscuous mode [ 196.488976][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.806453][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.818238][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.834994][ T5999] bond0 (unregistering): Released all slaves [ 196.866308][ T9720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.850'. [ 196.877395][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.885573][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.900922][ T9658] bridge_slave_1: entered allmulticast mode [ 196.911053][ T5844] Bluetooth: hci3: command tx timeout [ 196.924358][ T9658] bridge_slave_1: entered promiscuous mode [ 196.956086][ T9724] FAULT_INJECTION: forcing a failure. [ 196.956086][ T9724] name failslab, interval 1, probability 0, space 0, times 1 [ 196.987976][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.2.851 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 196.991690][ T5844] Bluetooth: hci2: command tx timeout [ 196.998701][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.998719][ T9724] Call Trace: [ 196.998728][ T9724] [ 196.998738][ T9724] dump_stack_lvl+0x241/0x360 [ 196.998771][ T9724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.030678][ T9724] ? __pfx__printk+0x10/0x10 [ 197.035290][ T9724] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 197.041270][ T9724] ? __pfx___might_resched+0x10/0x10 [ 197.046554][ T9724] should_fail_ex+0x3b0/0x4e0 [ 197.051232][ T9724] should_failslab+0xac/0x100 [ 197.055905][ T9724] ? __alloc_skb+0x1c3/0x440 [ 197.060504][ T9724] kmem_cache_alloc_node_noprof+0x71/0x320 [ 197.066334][ T9724] __alloc_skb+0x1c3/0x440 [ 197.070771][ T9724] ? __pfx___alloc_skb+0x10/0x10 [ 197.075733][ T9724] ? netlink_ack_tlv_len+0x6e/0x200 [ 197.080929][ T9724] netlink_ack+0x13f/0xa30 [ 197.085348][ T9724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.090820][ T9724] netlink_rcv_skb+0x262/0x430 [ 197.095607][ T9724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.101090][ T9724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.106417][ T9724] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.111640][ T9724] netlink_unicast+0x7f6/0x990 [ 197.116433][ T9724] ? __pfx_netlink_unicast+0x10/0x10 [ 197.121764][ T9724] ? __virt_addr_valid+0x183/0x530 [ 197.127527][ T9724] ? __check_object_size+0x48e/0x900 [ 197.133170][ T9724] netlink_sendmsg+0x8e4/0xcb0 [ 197.137941][ T9724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.143241][ T9724] ? aa_sock_msg_perm+0x91/0x160 [ 197.148203][ T9724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.153488][ T9724] __sock_sendmsg+0x221/0x270 [ 197.158166][ T9724] ____sys_sendmsg+0x52a/0x7e0 [ 197.162940][ T9724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.168288][ T9724] __sys_sendmsg+0x292/0x380 [ 197.172895][ T9724] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.178016][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 197.182793][ T9724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.189123][ T9724] ? do_syscall_64+0x100/0x230 [ 197.193895][ T9724] ? do_syscall_64+0xb6/0x230 [ 197.198570][ T9724] do_syscall_64+0xf3/0x230 [ 197.203182][ T9724] ? clear_bhb_loop+0x35/0x90 [ 197.207868][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.213765][ T9724] RIP: 0033:0x7fb52ef7e819 [ 197.218199][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.237887][ T9724] RSP: 002b:00007fb52fdc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.246294][ T9724] RAX: ffffffffffffffda RBX: 00007fb52f135fa0 RCX: 00007fb52ef7e819 [ 197.254261][ T9724] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 197.262227][ T9724] RBP: 00007fb52fdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 197.270201][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.278270][ T9724] R13: 0000000000000000 R14: 00007fb52f135fa0 R15: 00007ffdec4956e8 [ 197.286253][ T9724] [ 197.364309][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 197.388348][ T9732] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 197.397632][ T9732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.853'. [ 197.450889][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.554994][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.715962][ T9739] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 197.783080][ T9658] team0: Port device team_slave_0 added [ 197.800623][ T9744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.855'. [ 197.815352][ T9744] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 197.840645][ T9739] : renamed from bond0 [ 197.864801][ T9658] team0: Port device team_slave_1 added [ 197.946161][ T5999] hsr_slave_0: left promiscuous mode [ 197.966611][ T5999] hsr_slave_1: left promiscuous mode [ 197.982770][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.000178][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.007882][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.017192][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.065262][ T5999] veth1_macvtap: left promiscuous mode [ 198.074170][ T5999] veth0_macvtap: left promiscuous mode [ 198.079703][ T5999] veth1_vlan: left promiscuous mode [ 198.087476][ T5999] veth0_vlan: left promiscuous mode [ 198.517459][ T5999] team0 (unregistering): Port device team_slave_1 removed [ 198.565797][ T5999] team0 (unregistering): Port device team_slave_0 removed [ 198.990475][ T5844] Bluetooth: hci3: command 0x041b tx timeout [ 199.070941][ T5844] Bluetooth: hci2: command tx timeout [ 199.112687][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.140405][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.166904][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.198216][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.206216][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.247004][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.274245][ T9763] __nla_validate_parse: 2 callbacks suppressed [ 199.274266][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.862'. [ 199.354551][ T9658] hsr_slave_0: entered promiscuous mode [ 199.379825][ T9658] hsr_slave_1: entered promiscuous mode [ 199.439593][ T9770] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 199.471740][ T9770] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 199.499893][ T9770] netlink: 500 bytes leftover after parsing attributes in process `syz.1.864'. [ 199.517975][ T9632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.574975][ T9632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.621610][ T9632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.639886][ T9632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.206795][ T9784] netlink: 224 bytes leftover after parsing attributes in process `syz.2.870'. [ 200.355425][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.417833][ T9632] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.502767][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.509960][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.553627][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.561314][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.620018][ T9798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.843416][ T9808] tipc: Enabling of bearer rejected, failed to enable media [ 200.879268][ T9658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.922747][ T9658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.944206][ T9658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.966997][ T9658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.068315][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.076609][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 201.150882][ T54] Bluetooth: hci2: command tx timeout [ 201.226151][ T9632] veth0_vlan: entered promiscuous mode [ 201.309564][ T9632] veth1_vlan: entered promiscuous mode [ 201.410704][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.456490][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.483739][ T9632] veth0_macvtap: entered promiscuous mode [ 201.540863][ T9632] veth1_macvtap: entered promiscuous mode [ 201.551394][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.558533][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.591840][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.598955][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.619542][ T9824] TCP: TCP_TX_DELAY enabled [ 201.627710][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.639787][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.651431][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.693482][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 201.718345][ T9825] syzkaller0: entered promiscuous mode [ 201.724489][ T9825] syzkaller0: entered allmulticast mode [ 201.733685][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.750734][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.769257][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.781220][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.793124][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.803743][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.815900][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.841577][ T9825] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 201.898108][ T9829] mac80211_hwsim hwsim7 wlan0 (unregistering): left promiscuous mode [ 201.946667][ T9632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.959912][ T9632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.976343][ T9632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.986579][ T9632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.134734][ T61] syzkaller0: tun_net_xmit 48 [ 202.426563][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 203.156677][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 203.979461][ T9658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.248527][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.256723][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.314608][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.333005][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.368542][ T9848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'. [ 204.377864][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.683836][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 204.736864][ T9875] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 204.799117][ T9658] veth0_vlan: entered promiscuous mode [ 204.824598][ T9658] veth1_vlan: entered promiscuous mode [ 204.942501][ T9658] veth0_macvtap: entered promiscuous mode [ 204.967641][ T9658] veth1_macvtap: entered promiscuous mode [ 205.014475][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.039063][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.070195][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.090228][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.111673][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.125317][ T9881] gretap0: left promiscuous mode [ 205.172440][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.190962][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.213490][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.231580][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 205.240176][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.254850][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.266166][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.277575][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.289386][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.300703][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.308042][ T9887] lo speed is unknown, defaulting to 1000 [ 205.345129][ T9658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.354702][ T9658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.367392][ T9658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.381048][ T9658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.553171][ T9894] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 205.632887][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.814940][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.887481][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.917401][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.926296][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.955824][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.964387][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.990783][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.107914][ T1145] bridge_slave_1: left allmulticast mode [ 206.114776][ T1145] bridge_slave_1: left promiscuous mode [ 206.121737][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.131611][ T1145] bridge_slave_0: left allmulticast mode [ 206.137256][ T1145] bridge_slave_0: left promiscuous mode [ 206.143573][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.520854][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.533788][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.548963][ T1145] bond0 (unregistering): Released all slaves [ 206.701880][ T9901] netlink: 'syz.1.895': attribute type 10 has an invalid length. [ 206.713583][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'. [ 206.754950][ T9906] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 206.855428][ T9901] ipvlan1: entered promiscuous mode [ 206.870445][ T9901] ipvlan1: entered allmulticast mode [ 206.880355][ T9901] veth0_vlan: entered allmulticast mode [ 206.888847][ T9901] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.102334][ T1145] hsr_slave_0: left promiscuous mode [ 207.108675][ T1145] hsr_slave_1: left promiscuous mode [ 207.108736][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.125641][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.134456][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.143369][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.143788][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.158755][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.162023][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.180561][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.182901][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.188067][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.225754][ T1145] veth1_macvtap: left promiscuous mode [ 207.232479][ T1145] veth0_macvtap: left promiscuous mode [ 207.238052][ T1145] veth1_vlan: left promiscuous mode [ 207.243387][ T1145] veth0_vlan: left promiscuous mode [ 207.837962][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 207.932165][ T9921] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 207.952828][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 208.071312][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.087960][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.112219][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.124648][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.142667][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.157014][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.491969][ T9921] : (slave bond_slave_0): Releasing backup interface [ 208.596962][ T9908] lo speed is unknown, defaulting to 1000 [ 208.654479][ T9925] lo speed is unknown, defaulting to 1000 [ 208.665611][ T9929] tap0: tun_chr_ioctl cmd 1074025677 [ 208.673797][ T9929] tap0: linktype set to 769 [ 208.999060][ T9953] x_tables: unsorted underflow at hook 4 [ 209.059748][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 209.174830][ T9958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.909'. [ 209.198132][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 209.205775][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 209.233948][ T5844] Bluetooth: hci2: command tx timeout [ 209.381395][ T1145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.417376][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.436918][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.448552][ T9925] bridge_slave_0: entered allmulticast mode [ 209.460226][ T9925] bridge_slave_0: entered promiscuous mode [ 209.588860][ T1145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.618199][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.625650][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.634570][ T9925] bridge_slave_1: entered allmulticast mode [ 209.642658][ T9925] bridge_slave_1: entered promiscuous mode [ 209.724337][ T9983] Cannot find set identified by id 0 to match [ 209.743862][ T1145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.815813][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 209.829078][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.857906][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.868516][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.877536][ T9908] bridge_slave_0: entered allmulticast mode [ 209.886034][ T9908] bridge_slave_0: entered promiscuous mode [ 209.893851][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.901654][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.908900][ T9908] bridge_slave_1: entered allmulticast mode [ 209.915893][ T9908] bridge_slave_1: entered promiscuous mode [ 209.938506][ T1145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.958750][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.972640][ T9994] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 209.982561][ T9994] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 210.075273][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.108608][ T9925] team0: Port device team_slave_0 added [ 210.125415][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.169598][ T9925] team0: Port device team_slave_1 added [ 210.191425][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 210.200442][ T5844] Bluetooth: hci3: command tx timeout [ 210.219002][ T9908] team0: Port device team_slave_0 added [ 210.228561][ T9908] team0: Port device team_slave_1 added [ 210.340167][T10000] syz_tun: entered promiscuous mode [ 210.371308][T10000] macsec1: entered promiscuous mode [ 210.391502][T10000] batman_adv: batadv0: Adding interface: macsec1 [ 210.413202][T10000] batman_adv: batadv0: The MTU of interface macsec1 is too small (224) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.442087][T10000] batman_adv: batadv0: Interface activated: macsec1 [ 210.458237][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.467223][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.494767][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.517577][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.529677][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.567587][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.594655][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.610539][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.640011][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.652257][T10013] tipc: Started in network mode [ 210.657196][T10013] tipc: Node identity ac1414aa, cluster identity 4711 [ 210.682451][T10013] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.704251][T10013] tipc: Enabled bearer , priority 10 [ 210.725514][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.739306][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.778059][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.820517][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.909378][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'. [ 210.944135][ T1145] bridge_slave_1: left allmulticast mode [ 210.953885][ T1145] bridge_slave_1: left promiscuous mode [ 210.959832][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.970333][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.984366][ T1145] bridge_slave_0: left allmulticast mode [ 210.999031][ T1145] bridge_slave_0: left promiscuous mode [ 211.006110][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.120321][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.260293][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.320820][ T5844] Bluetooth: hci2: command tx timeout [ 211.410428][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.418046][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.429735][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.441304][ T1145] bond0 (unregistering): Released all slaves [ 211.552245][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.584734][ T9908] hsr_slave_0: entered promiscuous mode [ 211.595243][ T9908] hsr_slave_1: entered promiscuous mode [ 211.620855][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.640346][ T9908] Cannot create hsr debugfs directory [ 211.691083][ T6886] tipc: Node number set to 2886997162 [ 211.743096][ T9925] hsr_slave_0: entered promiscuous mode [ 211.757965][ T9925] hsr_slave_1: entered promiscuous mode [ 211.781012][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.799829][ T9925] Cannot create hsr debugfs directory [ 211.840552][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.971886][T10051] IPVS: Error connecting to the multicast addr [ 212.071214][T10051] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 212.110464][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.205166][ T1145] hsr_slave_0: left promiscuous mode [ 212.240446][ T1145] hsr_slave_1: left promiscuous mode [ 212.255683][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.270400][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.270883][ T5844] Bluetooth: hci3: command tx timeout [ 212.303475][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.330595][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.355743][T10067] xt_hashlimit: max too large, truncated to 1048576 [ 212.404385][ T1145] veth1_macvtap: left promiscuous mode [ 212.410387][ T1145] veth0_macvtap: left promiscuous mode [ 212.416323][ T1145] veth1_vlan: left promiscuous mode [ 212.421752][ T1145] veth0_vlan: left promiscuous mode [ 212.571382][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 212.640592][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.949761][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 212.986079][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 213.380900][T10076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 213.400913][ T5844] Bluetooth: hci2: command tx timeout [ 213.410282][T10076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.544268][T10087] Bluetooth: MGMT ver 1.23 [ 213.555117][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 213.638937][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 213.885925][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 213.938424][T10111] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 214.215779][T10126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 214.229176][T10126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 214.252050][T10126] veth0: entered promiscuous mode [ 214.258183][T10126] team0: entered promiscuous mode [ 214.271153][T10126] team_slave_0: entered promiscuous mode [ 214.277414][T10126] team_slave_1: entered promiscuous mode [ 214.288588][T10126] hsr1: Slave A (veth0) is not up; please bring it up to get a fully working HSR network [ 214.310359][T10126] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 214.362104][ T5844] Bluetooth: hci3: command tx timeout [ 214.429392][ T9925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.461511][ T9925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.489434][ T9925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.526866][ T9925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.755431][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.796663][ T9925] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.817098][T10147] lo speed is unknown, defaulting to 1000 [ 214.861862][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.869116][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.889527][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.896951][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.958219][ T9925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.970507][ T9925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.013706][ T9908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.032888][ T9908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.100688][ T9908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.116446][ T9908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.129934][T10153] bridge0: port 4(hsr0) entered blocking state [ 215.148087][T10153] bridge0: port 4(hsr0) entered disabled state [ 215.173151][T10153] hsr0: entered allmulticast mode [ 215.179850][T10153] hsr_slave_0: entered allmulticast mode [ 215.199947][T10153] hsr_slave_1: entered allmulticast mode [ 215.210082][T10153] hsr0: left allmulticast mode [ 215.219857][T10153] hsr_slave_0: left allmulticast mode [ 215.226024][T10153] hsr_slave_1: left allmulticast mode [ 215.351399][ T9925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.466193][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.490548][ T5844] Bluetooth: hci2: command tx timeout [ 215.507983][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.559059][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.566439][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.624473][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.631824][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.728493][T10183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 215.767502][T10184] xt_SECMARK: invalid mode: 0 [ 215.800223][ C0] net_ratelimit: 2 callbacks suppressed [ 215.800243][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.821165][ T9925] veth0_vlan: entered promiscuous mode [ 215.879783][ T9925] veth1_vlan: entered promiscuous mode [ 215.927071][ T9925] veth0_macvtap: entered promiscuous mode [ 215.958816][ T9925] veth1_macvtap: entered promiscuous mode [ 216.016059][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.046194][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.064444][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.078928][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.091443][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.103513][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.113753][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.124829][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.136394][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.147812][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.166506][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.194216][ T9925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.205920][ T9925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.216511][ T9925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.226054][ T9925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.245499][T10198] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 216.328265][ T9908] veth0_vlan: entered promiscuous mode [ 216.391224][ T9908] veth1_vlan: entered promiscuous mode [ 216.430885][ T5844] Bluetooth: hci3: command tx timeout [ 216.451955][ T9908] veth0_macvtap: entered promiscuous mode [ 216.511191][ T9908] veth1_macvtap: entered promiscuous mode [ 216.524618][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 216.542691][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.551338][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.594634][T10209] batadv_slave_1: entered promiscuous mode [ 216.651058][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.662058][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.671326][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.711540][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.757497][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.782099][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.802366][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.814240][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.830562][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.834972][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.856991][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.869024][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.887466][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.898788][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.919659][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.929486][T10218] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 216.937971][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.949169][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.968757][ T9908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.986625][ T9908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.996812][ T9908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.005919][ T9908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.037391][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 217.050686][T10208] batadv_slave_1: left promiscuous mode [ 217.239577][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.255788][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.284933][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.293560][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.401700][T10226] syz.3.972 (10226) used obsolete PPPIOCDETACH ioctl [ 217.563982][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.974'. [ 217.809989][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.977'. [ 217.870640][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.077463][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.153750][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 218.177201][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 218.546101][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.556777][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.571452][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.580087][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.589464][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.599306][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.630050][T10275] lo speed is unknown, defaulting to 1000 [ 218.673849][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.779788][T10275] chnl_net:caif_netlink_parms(): no params data found [ 218.829333][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.837548][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.851086][T10275] bridge_slave_0: entered allmulticast mode [ 218.858644][T10275] bridge_slave_0: entered promiscuous mode [ 218.867752][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.875661][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.883128][T10275] bridge_slave_1: entered allmulticast mode [ 218.890669][T10275] bridge_slave_1: entered promiscuous mode [ 218.913256][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.922490][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.933619][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.965515][T10275] team0: Port device team_slave_0 added [ 218.989017][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.011170][T10275] team0: Port device team_slave_1 added [ 219.032467][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.039458][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.066861][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.095706][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.109725][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.117587][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.144863][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.191168][T10275] hsr_slave_0: entered promiscuous mode [ 219.201050][T10275] hsr_slave_1: entered promiscuous mode [ 219.275554][ T1154] bridge_slave_1: left allmulticast mode [ 219.282001][ T1154] bridge_slave_1: left promiscuous mode [ 219.287735][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.296373][ T1154] bridge_slave_0: left allmulticast mode [ 219.302941][ T1154] bridge_slave_0: left promiscuous mode [ 219.308736][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.806061][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.827749][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.837004][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.847505][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.858370][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.871260][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.913634][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.915673][ T1154] bond0 (unregistering): Released all slaves [ 219.929613][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.950459][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.968065][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 220.155017][T10295] lo speed is unknown, defaulting to 1000 [ 220.407526][ T1154] hsr_slave_0: left promiscuous mode [ 220.428846][ T1154] hsr_slave_1: left promiscuous mode [ 220.439705][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.461211][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.479872][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.493961][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.538948][ T1154] veth1_macvtap: left promiscuous mode [ 220.549193][ T1154] veth0_macvtap: left promiscuous mode [ 220.560619][ T1154] veth1_vlan: left promiscuous mode [ 220.575294][ T1154] veth0_vlan: left promiscuous mode [ 220.672099][ T5844] Bluetooth: hci2: command tx timeout [ 220.731978][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 220.990589][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.112941][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 221.155736][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 221.728190][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 221.758891][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 221.779696][T10327] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024) [ 221.821760][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.904524][T10295] chnl_net:caif_netlink_parms(): no params data found [ 222.030279][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.041851][ T5844] Bluetooth: hci3: command tx timeout [ 222.196958][T10275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.226374][T10275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.326067][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.333766][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.342328][T10295] bridge_slave_0: entered allmulticast mode [ 222.349383][T10295] bridge_slave_0: entered promiscuous mode [ 222.357533][T10275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.367276][T10275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.377177][T10348] netlink: 'syz.1.996': attribute type 10 has an invalid length. [ 222.407362][T10347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.996'. [ 222.438065][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.450077][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.457423][T10295] bridge_slave_1: entered allmulticast mode [ 222.476708][T10295] bridge_slave_1: entered promiscuous mode [ 222.593991][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.646480][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.719269][T10355] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 222.733553][T10355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.998'. [ 222.750964][ T5844] Bluetooth: hci2: command tx timeout [ 222.808555][T10359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 222.896983][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.922693][T10295] team0: Port device team_slave_0 added [ 222.988588][T10295] team0: Port device team_slave_1 added [ 223.016644][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.070260][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.088274][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.099776][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.128441][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.215215][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.245871][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.262169][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.299552][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.438598][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.578800][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.598267][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 223.613553][T10295] hsr_slave_0: entered promiscuous mode [ 223.625472][T10295] hsr_slave_1: entered promiscuous mode [ 223.649809][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.658615][T10295] Cannot create hsr debugfs directory [ 223.779973][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.867439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.874642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.905501][ T1154] bridge_slave_1: left allmulticast mode [ 223.920345][ T1154] bridge_slave_1: left promiscuous mode [ 223.927179][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.948521][ T1154] bridge_slave_0: left allmulticast mode [ 223.970928][ T1154] bridge_slave_0: left promiscuous mode [ 223.977372][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.110594][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.111109][ T5844] Bluetooth: hci3: command tx timeout [ 224.331483][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 224.591484][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.613972][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.633702][ T1154] bond0 (unregistering): Released all slaves [ 224.656775][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1006'. [ 224.724885][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.732066][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.830786][ T5844] Bluetooth: hci2: command tx timeout [ 225.010672][T10429] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 225.025994][T10429] batman_adv: batadv0: Removing interface: team0 [ 225.058083][T10431] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 225.150237][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.243576][ T1154] hsr_slave_0: left promiscuous mode [ 225.266783][ T1154] hsr_slave_1: left promiscuous mode [ 225.301380][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.320031][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.368782][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.402801][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 225.413126][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.493036][ T1154] veth1_macvtap: left promiscuous mode [ 225.499007][ T1154] veth0_macvtap: left promiscuous mode [ 225.509741][ T1154] veth1_vlan: left promiscuous mode [ 225.516662][ T1154] veth0_vlan: left promiscuous mode [ 226.158609][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 226.190512][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.190651][ T5844] Bluetooth: hci3: command tx timeout [ 226.238667][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 226.697868][T10461] lo speed is unknown, defaulting to 1000 [ 226.848741][T10469] xt_l2tp: v2 doesn't support IP mode [ 226.889806][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1020'. [ 226.911382][ T5844] Bluetooth: hci2: command tx timeout [ 226.925364][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.148254][T10295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.186937][T10295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.217881][T10295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.230657][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.245846][T10295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.367311][T10485] sctp: [Deprecated]: syz.2.1024 (pid 10485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.367311][T10485] Use struct sctp_sack_info instead [ 227.417971][T10488] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 227.435476][T10488] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 227.446923][T10488] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1025'. [ 227.535473][T10275] veth0_vlan: entered promiscuous mode [ 227.593197][T10275] veth1_vlan: entered promiscuous mode [ 227.680981][T10275] veth0_macvtap: entered promiscuous mode [ 227.722010][T10275] veth1_macvtap: entered promiscuous mode [ 227.746177][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.798146][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.830890][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.877279][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.904054][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.914239][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.928919][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.941289][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.956730][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.968671][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.979802][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.991877][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.005549][T10275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.029347][T10275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.040069][T10275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.049111][T10275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.069029][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.076229][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.107276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.114447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.207712][T10295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.257566][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.270370][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.270784][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.285413][ T5844] Bluetooth: hci3: command tx timeout [ 228.299919][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.310223][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.466320][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 228.626057][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.819763][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.858794][T10295] veth0_vlan: entered promiscuous mode [ 228.962527][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.977431][T10295] veth1_vlan: entered promiscuous mode [ 229.008065][T10295] veth0_macvtap: entered promiscuous mode [ 229.049490][ T2972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.065993][T10295] veth1_macvtap: entered promiscuous mode [ 229.084352][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.095320][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.106855][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.117430][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.128892][T10295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.153278][ T2972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.169023][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.179637][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.189979][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.201050][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.211043][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.221832][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.231991][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.247694][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.259144][T10295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.277808][T10295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.287211][T10295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.296560][T10295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.305929][T10295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.320298][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.401134][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.408978][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.434357][ T2972] bridge_slave_1: left allmulticast mode [ 229.440028][ T2972] bridge_slave_1: left promiscuous mode [ 229.445858][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.454416][ T2972] bridge_slave_0: left allmulticast mode [ 229.460052][ T2972] bridge_slave_0: left promiscuous mode [ 229.466342][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.795745][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.807032][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.822613][ T2972] bond0 (unregistering): Released all slaves [ 229.847937][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.857924][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.085338][ T2972] hsr_slave_0: left promiscuous mode [ 230.091996][ T2972] hsr_slave_1: left promiscuous mode [ 230.098031][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.105808][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.117377][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.124905][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.146216][ T2972] veth1_macvtap: left promiscuous mode [ 230.152430][ T2972] veth0_macvtap: left promiscuous mode [ 230.157962][ T2972] veth1_vlan: left promiscuous mode [ 230.163309][ T2972] veth0_vlan: left promiscuous mode [ 230.350316][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.711630][T10544] netlink: 'syz.3.1039': attribute type 8 has an invalid length. [ 230.771932][T10544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 230.976646][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.987771][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.998515][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.007203][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.015918][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.030441][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.248016][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 231.295839][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 231.395233][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.723807][T10544] bridge_slave_1: left promiscuous mode [ 231.734913][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.859437][T10544] bridge_slave_0: left promiscuous mode [ 231.871828][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.002429][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.029310][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.038053][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.048141][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.048409][T10545] lo speed is unknown, defaulting to 1000 [ 232.056857][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.115514][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.268786][T10563] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 232.336215][T10545] chnl_net:caif_netlink_parms(): no params data found [ 232.435630][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 232.446698][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.455163][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.478201][T10572] veth1_to_bridge: entered promiscuous mode [ 232.514191][T10572] veth1_to_bridge: left promiscuous mode [ 232.596559][T10555] lo speed is unknown, defaulting to 1000 [ 232.742001][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 232.747698][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.801330][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.808612][T10545] bridge_slave_0: entered allmulticast mode [ 232.852004][T10545] bridge_slave_0: entered promiscuous mode [ 232.889424][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.906434][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.926763][T10545] bridge_slave_1: entered allmulticast mode [ 232.941598][T10545] bridge_slave_1: entered promiscuous mode [ 232.968952][T10588] netlink: 'syz.1.1052': attribute type 29 has an invalid length. [ 233.018483][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.029763][T10594] netlink: 'syz.1.1052': attribute type 29 has an invalid length. [ 233.029787][T10588] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1052'. [ 233.070644][ T54] Bluetooth: hci2: command tx timeout [ 233.112730][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.137573][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.248823][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 233.265090][T10545] team0: Port device team_slave_0 added [ 233.282553][T10545] team0: Port device team_slave_1 added [ 233.324789][T10609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1055'. [ 233.397777][ T2972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.414419][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.426086][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.458536][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'. [ 233.459973][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.480351][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.489037][T10555] chnl_net:caif_netlink_parms(): no params data found [ 233.528142][ T2972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.546650][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.554578][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.581031][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.773918][ T2972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.887890][ T2972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.981720][T10545] hsr_slave_0: entered promiscuous mode [ 234.020657][T10545] hsr_slave_1: entered promiscuous mode [ 234.271413][ T54] Bluetooth: hci3: command tx timeout [ 234.277938][T10555] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.300508][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.319213][T10555] bridge_slave_0: entered allmulticast mode [ 234.348846][T10555] bridge_slave_0: entered promiscuous mode [ 234.368170][T10555] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.391544][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.398833][T10555] bridge_slave_1: entered allmulticast mode [ 234.419500][T10555] bridge_slave_1: entered promiscuous mode [ 234.430945][T10637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1062'. [ 234.510206][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.581542][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.621723][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.650979][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 234.693384][T10555] team0: Port device team_slave_0 added [ 234.703853][T10555] team0: Port device team_slave_1 added [ 234.765648][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.780667][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.810491][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.828283][ T2972] bridge_slave_1: left allmulticast mode [ 234.839136][ T2972] bridge_slave_1: left promiscuous mode [ 234.845271][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.855106][ T2972] bridge_slave_0: left allmulticast mode [ 234.865443][ T2972] bridge_slave_0: left promiscuous mode [ 234.872347][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.886872][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 235.160362][ T54] Bluetooth: hci2: command tx timeout [ 235.226266][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.241225][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.257223][ T2972] bond0 (unregistering): Released all slaves [ 235.267441][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.275367][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.302250][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.550234][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.722433][T10669] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 235.766985][T10555] hsr_slave_0: entered promiscuous mode [ 235.787440][T10555] hsr_slave_1: entered promiscuous mode [ 235.810899][T10555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.818528][T10555] Cannot create hsr debugfs directory [ 236.036689][ T2972] hsr_slave_0: left promiscuous mode [ 236.058562][ T2972] hsr_slave_1: left promiscuous mode [ 236.108731][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.125272][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.137328][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.145482][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.173570][ T2972] veth1_macvtap: left promiscuous mode [ 236.179320][ T2972] veth0_macvtap: left promiscuous mode [ 236.197751][ T2972] veth1_vlan: left promiscuous mode [ 236.203919][ T2972] veth0_vlan: left promiscuous mode [ 236.351262][ T54] Bluetooth: hci3: command tx timeout [ 236.600223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.679920][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 236.719517][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 237.176638][T10698] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 237.210376][T10698] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 237.230503][ T54] Bluetooth: hci2: command tx timeout [ 237.349139][T10701] lo speed is unknown, defaulting to 1000 [ 237.630281][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.795950][T10545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.843040][T10545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.928096][T10545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.935711][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 237.951545][T10545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.296098][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.430904][ T54] Bluetooth: hci3: command tx timeout [ 238.479456][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.593753][T10545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.604617][T10545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.606877][T10743] netlink: 'syz.1.1094': attribute type 30 has an invalid length. [ 238.627188][T10555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.639046][T10555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.659389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.668095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.678356][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.723269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.730647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.799763][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 238.825068][T10555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.851134][T10555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.016912][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.074959][T10555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.155860][T10555] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.179401][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.186574][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.248563][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.255927][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.310815][ T54] Bluetooth: hci2: command tx timeout [ 239.334331][T10555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.346836][T10555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.495940][T10545] veth0_vlan: entered promiscuous mode [ 239.533192][T10545] veth1_vlan: entered promiscuous mode [ 239.646903][T10545] veth0_macvtap: entered promiscuous mode [ 239.661573][T10545] veth1_macvtap: entered promiscuous mode [ 239.686780][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.710639][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.718277][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.732674][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.755588][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.773679][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.788771][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.815739][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.830146][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.850208][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.869855][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.895734][T10545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.908803][T10792] sctp: [Deprecated]: syz.3.1103 (pid 10792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.908803][T10792] Use struct sctp_sack_info instead [ 239.915028][T10545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.935682][T10545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.944712][T10545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.062910][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.149296][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.164164][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.217390][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.269509][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.304503][T10805] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1107'. [ 240.316544][T10555] veth0_vlan: entered promiscuous mode [ 240.373205][T10555] veth1_vlan: entered promiscuous mode [ 240.473790][T10555] veth0_macvtap: entered promiscuous mode [ 240.511064][ T54] Bluetooth: hci3: command tx timeout [ 240.579657][T10555] veth1_macvtap: entered promiscuous mode [ 240.721914][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.733272][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.743638][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.754645][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.764304][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.882503][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.923697][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.970771][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.020806][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.071060][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.110281][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.160861][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.177749][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.189012][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.210213][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.264429][T10555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.274724][T10555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.285886][T10555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.314454][T10555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.354679][T10817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 241.367563][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 241.454105][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.500865][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 241.658131][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.673075][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.719382][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.734762][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.743386][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.794893][T10573] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 241.809290][T10573] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 241.818496][T10573] CPU: 0 UID: 0 PID: 10573 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 241.829601][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 241.839835][T10573] RIP: 0010:klist_del+0x49/0x110 [ 241.844797][T10573] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 19 a9 40 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 fb a8 40 f6 4c 8b 7b 58 48 89 df e8 cf a7 [ 241.864682][T10573] RSP: 0018:ffffc90004347828 EFLAGS: 00010202 [ 241.870839][T10573] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff8880256dbc00 [ 241.879423][T10573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 241.887400][T10573] RBP: ffffc90004347950 R08: ffffffff823c6b9a R09: 1ffff1100a81374a [ 241.895384][T10573] R10: dffffc0000000000 R11: ffffed100a81374b R12: dffffc0000000000 [ 241.903786][T10573] R13: 1ffff1100b97040c R14: ffff88805cb82060 R15: ffff888034294b88 [ 241.911745][T10573] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 241.920666][T10573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.927248][T10573] CR2: 00007fff3c0eedc8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 241.935206][T10573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.943684][T10573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.952343][T10573] Call Trace: [ 241.955680][T10573] [ 241.958624][T10573] ? __die_body+0x5f/0xb0 [ 241.963205][T10573] ? die_addr+0xb0/0xe0 [ 241.967361][T10573] ? exc_general_protection+0x3dd/0x5d0 [ 241.973006][T10573] ? asm_exc_general_protection+0x26/0x30 [ 241.978834][T10573] ? kernfs_put+0x20a/0x370 [ 241.983457][T10573] ? klist_del+0x49/0x110 [ 241.987780][T10573] ? klist_del+0x20/0x110 [ 241.992115][T10573] device_del+0x2c9/0x9b0 [ 241.996503][T10573] ? __pfx_device_del+0x10/0x10 [ 242.001638][T10573] ? netdev_unregister_kobject+0x178/0x250 [ 242.008423][T10573] unregister_netdevice_many_notify+0x1859/0x1da0 [ 242.014834][T10573] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 242.021597][T10573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 242.027494][T10573] ? rcu_is_watching+0x15/0xb0 [ 242.032245][T10573] ? trace_contention_end+0x3c/0x120 [ 242.037516][T10573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.043837][T10573] unregister_netdevice_queue+0x303/0x370 [ 242.049550][T10573] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 242.055787][T10573] ? down_write+0x18c/0x220 [ 242.060427][T10573] ? __pfx_down_write+0x10/0x10 [ 242.065313][T10573] unregister_netdev+0x1c/0x30 [ 242.070171][T10573] bnep_session+0x2e3c/0x3030 [ 242.074929][T10573] ? __pfx_bnep_session+0x10/0x10 [ 242.081172][T10573] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 242.087416][T10573] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.093839][T10573] ? __pfx_woken_wake_function+0x10/0x10 [ 242.099584][T10573] ? __kthread_parkme+0x169/0x1d0 [ 242.104863][T10573] ? __pfx_bnep_session+0x10/0x10 [ 242.110231][T10573] kthread+0x2f0/0x390 [ 242.114423][T10573] ? __pfx_bnep_session+0x10/0x10 [ 242.119439][T10573] ? __pfx_kthread+0x10/0x10 [ 242.124054][T10573] ret_from_fork+0x4b/0x80 [ 242.128740][T10573] ? __pfx_kthread+0x10/0x10 [ 242.133587][T10573] ret_from_fork_asm+0x1a/0x30 [ 242.138432][T10573] [ 242.141450][T10573] Modules linked in: [ 242.145434][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.153544][T10573] ---[ end trace 0000000000000000 ]--- [ 242.159733][T10573] RIP: 0010:klist_del+0x49/0x110 [ 242.170406][T10573] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 19 a9 40 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 fb a8 40 f6 4c 8b 7b 58 48 89 df e8 cf a7 [ 242.196468][T10573] RSP: 0018:ffffc90004347828 EFLAGS: 00010202 [ 242.207769][T10573] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff8880256dbc00 [ 242.217470][T10573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 242.230011][T10573] RBP: ffffc90004347950 R08: ffffffff823c6b9a R09: 1ffff1100a81374a [ 242.241122][T10573] R10: dffffc0000000000 R11: ffffed100a81374b R12: dffffc0000000000 [ 242.250983][T10573] R13: 1ffff1100b97040c R14: ffff88805cb82060 R15: ffff888034294b88 [ 242.261268][T10573] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 242.271936][T10573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.278551][T10573] CR2: 00007f151df062d8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 242.287731][T10573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.296472][T10573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.305177][T10573] Kernel panic - not syncing: Fatal exception [ 242.311503][T10573] Kernel Offset: disabled [ 242.315818][T10573] Rebooting in 86400 seconds..