last executing test programs: 37.288999029s ago: executing program 2 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = openat$cgroup_ro(r4, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) connect$can_bcm(r7, &(0x7f00000001c0)={0x1d, r3}, 0x10) write$bt_hci(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0127202708000000000000cd115a7906ccfb5c18743f9c7f211bab9899ecc0696708605527c22c19aef2928230616fe6de5fc9aafb58f6340466ace9df3d68737c5da4a9a599eb3a485eceff5cf05d6212c026fea249e961c724c0e1e45c94940c93199bce758f1f6c4b213a5874da7d7e11bffacc10124375bc2c6b0d40295d5ae1a1d3f5325070524eee6282c8f27dadeb3d210673769ee257e4907e3e67dcbb88348a112886a79897f2a0d3aa69edfba2ce9eba46b3079df05a8e7be007d2735955f9108da17f11bcb479a6a52aeb1f7761923f8a7341e9ff290dd23c29ab4e4fbcc8309a21ab2284b074d03f"], 0x2b) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r3], 0x80}}, 0x0) 37.116672368s ago: executing program 2 (id=214): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x822, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x4c}}, 0x8040) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0xfffffffc, 0x3ff, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (rerun: 32) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "265a7256dab75c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "96ac3addbb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "97d485aded"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c56ed235c303f9c55766bab34d"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x8080) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x4, &(0x7f00000005c0)=[{0x1, 0xfd, 0x1, 0x4}, {0x5, 0xcd, 0x5, 0x7f}, {0xb5b4, 0x6, 0x0, 0x20d8}, {0x7, 0x8, 0x8, 0x9}]}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = accept4$inet6(r5, 0x0, &(0x7f0000000640), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x6, @loopback, 0x9}}, 0x0, 0x0, 0x45, 0x0, "12b7ba36af3b695d34b8b3893e5e7a14ef7f406acbb819997f794494f82bd2a038bbcd09acddcc86fe709602a290bf29f870c3c9d65ad635c47f0d5a30110da76011828e71af0fd701f792ad5cc3d100"}, 0xd8) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x24}}, 0x20000080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004001) (async) getsockopt$inet6_buf(r7, 0x29, 0x2f, &(0x7f00000009c0)=""/3, &(0x7f0000000a00)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @broadcast, @random="c6727b5c6298", {0x5, 0x3}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x23}, {0xc}, {0x36}, {0x16}, {0x36}, {0x21, 0x1}, {0x24}, {0x9}]}, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x5, 0x0, {0x0, 0x6, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x3, 0x8}}, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44800) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r10, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x38}, 0x1, 0x0, 0x0, 0xc042}, 0x4028080) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x140c0}, 0x2004c800) (async) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000fc0), r1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001500)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, r13, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x88}, 0x4000) 36.721358747s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) accept$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0xa00, "226274ab4e8c8ac65e60b75f9bcf833d2e83d60a3231f963df5ec820c4906caab78f314284e799bb297889f216fbae09a5f9d4b195951a60cb46f24101233d45e87142320fb19f1212164debabd2fa8a27c82bd6a38952b494a019f0ec3dadae18cce05cf6f679be221c884f2ac1c105579e8445e80c588d8273e05aee360c09d4667c20bb284da8a2c3f1b12883f767a470857cc36c26d9427406e8a0794eb3c3a704c1cf0c8a4744656610cdad4a1c30232d28e7347bcf7a4c3fd637539ea0cfde5493c45bbca715f0dc78b81ce9c803be2ba91aeecf73ff4c093a9ea344f7bd270c167da44d28662da7c526244aeb6cce8c86f3ab6bb0"}}}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0xffffffff000) 24.080269777s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) accept$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0xa00, "226274ab4e8c8ac65e60b75f9bcf833d2e83d60a3231f963df5ec820c4906caab78f314284e799bb297889f216fbae09a5f9d4b195951a60cb46f24101233d45e87142320fb19f1212164debabd2fa8a27c82bd6a38952b494a019f0ec3dadae18cce05cf6f679be221c884f2ac1c105579e8445e80c588d8273e05aee360c09d4667c20bb284da8a2c3f1b12883f767a470857cc36c26d9427406e8a0794eb3c3a704c1cf0c8a4744656610cdad4a1c30232d28e7347bcf7a4c3fd637539ea0cfde5493c45bbca715f0dc78b81ce9c803be2ba91aeecf73ff4c093a9ea344f7bd270c167da44d28662da7c526244aeb6cce8c86f3ab6bb0"}}}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0xffffffff000) 14.387677432s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) accept$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0xa00, "226274ab4e8c8ac65e60b75f9bcf833d2e83d60a3231f963df5ec820c4906caab78f314284e799bb297889f216fbae09a5f9d4b195951a60cb46f24101233d45e87142320fb19f1212164debabd2fa8a27c82bd6a38952b494a019f0ec3dadae18cce05cf6f679be221c884f2ac1c105579e8445e80c588d8273e05aee360c09d4667c20bb284da8a2c3f1b12883f767a470857cc36c26d9427406e8a0794eb3c3a704c1cf0c8a4744656610cdad4a1c30232d28e7347bcf7a4c3fd637539ea0cfde5493c45bbca715f0dc78b81ce9c803be2ba91aeecf73ff4c093a9ea344f7bd270c167da44d28662da7c526244aeb6cce8c86f3ab6bb0"}}}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0xffffffff000) 3.952590192s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) accept$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0xa00, "226274ab4e8c8ac65e60b75f9bcf833d2e83d60a3231f963df5ec820c4906caab78f314284e799bb297889f216fbae09a5f9d4b195951a60cb46f24101233d45e87142320fb19f1212164debabd2fa8a27c82bd6a38952b494a019f0ec3dadae18cce05cf6f679be221c884f2ac1c105579e8445e80c588d8273e05aee360c09d4667c20bb284da8a2c3f1b12883f767a470857cc36c26d9427406e8a0794eb3c3a704c1cf0c8a4744656610cdad4a1c30232d28e7347bcf7a4c3fd637539ea0cfde5493c45bbca715f0dc78b81ce9c803be2ba91aeecf73ff4c093a9ea344f7bd270c167da44d28662da7c526244aeb6cce8c86f3ab6bb0"}}}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0xffffffff000) 2.741330809s ago: executing program 0 (id=555): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f00000001c0), &(0x7f0000000380)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0xd4, 0x32, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2f}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5158}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffb}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0x4) 2.373090831s ago: executing program 1 (id=558): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x2a, 0x2, 0x8000}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a3100000055050005000200000005000100060000"], 0x50}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r3, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001380)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800458c006c70fa0000bf1e0dad720500019078ac1e0001ac1414aa05009078e00000e0440000000065000000110000ac1414aa00000000890f5bac1e0001640101010a010102442c0003e000002f00000000e0000001000000000000000000000000ac141404000000000000000000008000001cc6d2445ef5f043cda3fac502fef264dd61d205416d290ae9"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x12, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb99a}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x9, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x23, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0xe, 0x1000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r7, r0, r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x4, 0x8, 0xb}, {0x2, 0x5, 0xa, 0x1}, {0x4, 0x4, 0x8, 0x3}], 0x10, 0x1000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 2.169389866s ago: executing program 4 (id=559): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c2003fa8000008004500001c00000000001190780800001ce0000001000017c10008"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10) (async) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001380)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x28000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="4c1b84bdac37f4451b20a3066494677ee389d422a1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x0, 0x0, 0xfffffffb, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x20000004}]}}]}, 0x44}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000200)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f00000000c0)="20e9e1", 0x3}], 0x2, 0x8) (async) splice(r7, 0x0, r6, 0x0, 0x8000, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="3dd08e41c95b12478d6ed8d4d89945ca058df4bf63c7b8384f427e92d0eb77fa097ec5635dbfbeb953e64950d0dfadc9e9ab095e366fc69a7d7239ca75b8695c719760e6a75b153bf82f9bed4bef59e042efab5835b7866e2d188659cf09ac055d072d156f2957cf5fc4fe4ae8d2549c63d62edb61d3870bc93e26c0115c34113f", @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) setsockopt$inet_udp_int(r11, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x2, 0x8, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@remote, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) 1.885877377s ago: executing program 3 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x27, 0x14, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x10001, 0xa, {{0x12, 0x4, 0x2, 0x7, 0x48, 0x66, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x24, 0x7f, 0x0, 0x0, [0x400, 0x8e, 0x8, 0xfe2, 0x2, 0x3a000000, 0x101, 0x38]}, @generic={0x44, 0x8, "f09485108472"}, @ssrr={0x89, 0x7, 0x67, [@remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', r9, 0x8, 0x7, 0x6, 0x3ff, {{0xa, 0x4, 0x0, 0x3e, 0x28, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback, {[@noop, @ssrr={0x89, 0x13, 0xac, [@multicast1, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB="0400000000000000", @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x810) 1.805464722s ago: executing program 4 (id=561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805df805dc75e6c3301fa9919904fd70483d7f5a421aec8cffd6bb05e", 0x6f}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.804593354s ago: executing program 1 (id=562): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @private}, &(0x7f0000000180)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x2e2e}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @private}, &(0x7f0000000180)=0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x2e2e}}) (async) 1.740490654s ago: executing program 1 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024f38da080b89452c5512d6163766c00087b6765e646d4a99e35b4eea8c759049ce493ef4618da265f0500e9623bf1a67a0f4015724c68c706e83ac6010507d3d8947d0aefb311dc06ae1cd759cae81fc2ef681c123ffe468d4d2bae221394259759c92af4c9526f3de20b248801c6555d4505e7ff504c64d882f5c8e936bcef2d5072108dbf1cd79c3c446fb7228dbc59d580ff3a2c814f067efba484e0af57fdc6a2c922c2a64598cb647da98d22df1baa7a5feccc69db679f81fd", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0000910000030900ff0f000007004c0800530065000080069078ac1e0001ac141417071bc9ac1414aa7f00000100000000e000000192cc1ed78ecd50c596f7fba9c8ac0a010101ac1e0001000000000000000000000000000000000400004e2300004e210000000400000004000000"], 0x61) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073118f00000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.585750605s ago: executing program 0 (id=564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000008000080046b2d4f59ef2248c6c6db3ebad0fc19bd05a3a2e3e9b52eab786604a9c7a72703476b55e521f0a0930cfb52f798110c5a2a5c8f79bc51846672134c55408d00a89f554945d6efffbc346546b7c3fe8639b5f0b637676a6e865ff2b1bd0171ad63034d5674f036af57ee27cdf0285", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r5, 0x89e9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 1.481447123s ago: executing program 3 (id=565): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r0, 0x35, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.467927741s ago: executing program 3 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 1.424420603s ago: executing program 0 (id=567): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x12, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r2, 0x2}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x16, 0x80000001, 0xa6f5, 0x6, 0x49c2, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_ext={0x1c, 0x33, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xe6, 0x8, 0xf, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0xc8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x9, 0x559c}, 0x10, 0x1cfee, r11, 0x1, &(0x7f0000000700)=[r4, r6, r7, r8, r9, r10, 0xffffffffffffffff, r12], &(0x7f0000000740)=[{0x5, 0x2, 0xa, 0x6}], 0x10, 0x8, @void, @value}, 0x94) 1.269057908s ago: executing program 0 (id=568): r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x1000002, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0xd}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) 1.191282214s ago: executing program 0 (id=569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, 0x13, 0x507, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r5, 0xff, 0x30}, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x31, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r5, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xa7b, 0x10000000, 0xfe01, 0xf588, 0x4, 0x45, 0x39, {0x0, @in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x3, 0xad7, 0x200, 0x88, 0x7}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r12, 0x2, 0x1, [0x9]}, &(0x7f0000000440)=0xa) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="63d8388b", @ANYRES16=r13, @ANYBLOB="080026bd7000fddbdf250f000000400001801400020076657468305f746f5f626f6e640000001400020067726530000000000000000000000000140002006772657461703000000000000000000070000180140002007465616d3000000000000000000000000800030002000000140002007665746830000000000000000000000014000200767863616e310000000000000000000014000200677265300000000000000000000000001400020064766d72703100"/190], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 902.328646ms ago: executing program 4 (id=570): bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0x50, 0x4) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000009a3b2c96f350f7f133c9bc4565eae92b845961b1a7b31df0442d360071918701e434ab1b0234398b0e0d5454ce4d366e81a9cd46571272244c4bdd9bb4561b4cc4572e2fb9d661639cf9bb83d759b81e87241555368ca77c2283b9e14b", @ANYRES16=r4, @ANYBLOB="00012dbd7000fbdbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 793.392335ms ago: executing program 4 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x20}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 790.558241ms ago: executing program 1 (id=572): r0 = epoll_create(0x3839) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r1, 0x8008b705, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5613, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000380)='GPL\x00', 0x1ce2, 0x1000, &(0x7f0000000d40)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x1, 0x4, 0xb, 0x3}, {0x1, 0x2, 0xc, 0x6}, {0x4, 0x1, 0xf}], 0x10, 0x7fff, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x21, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @jmp={0x5, 0x0, 0x2, 0x5, 0x6, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x1, 0x6, 0xa, 0x10, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, @fallback=0xc, r4, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0xaea, 0x4}, 0x10, 0x0, r5, 0x0, &(0x7f0000000540)=[r6], 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev, @mcast2, {[@routing={0x0, 0x0, 0xf5}]}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa66aa270045d70000fe08060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaa00ac"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getchain={0x34, 0x66, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xb}, {0x9, 0x1}, {0x3, 0xfff1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x80100d1}, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfffd, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'virt_wifi0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 718.096945ms ago: executing program 1 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) 623.079094ms ago: executing program 4 (id=574): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="31d3ef118ad0a22cd1b1bd058c53e338a8de1ada36a9af6577c3f7b4cbe9664a155a0e64f584d59a552be5e1c1e8c286cf1169d45da33a70bc6a166d4b3ab8937bcff968f2556ba55645c94512136e72d34b296b838928acebd7c7fcaa", 0x5d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) (async, rerun: 32) r4 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000100), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x3f}]}}}]}, 0x3c}}, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ba53b4292997"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="280a23b3fb53"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="802860ec8422"}]}, 0x58}}, 0x8) 184.15176ms ago: executing program 3 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) 146.074011ms ago: executing program 3 (id=576): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000300)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 144.368875ms ago: executing program 0 (id=577): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x19, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @generic={0x5, 0x5, 0xc, 0x5, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 74.09148ms ago: executing program 1 (id=578): connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x308, 0x9, 0x7, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048040}, 0x41) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000002c0)=0x694) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r2}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc081}, 0x4000010) socket$packet(0x11, 0x3, 0x300) bind$rose(r3, &(0x7f0000000640)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000680)) r5 = socket(0x18, 0x5, 0x259a) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4008801) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000840)={'erspan0\x00', 0x200}) getpeername$llc(r5, &(0x7f0000000880), &(0x7f00000008c0)=0x10) sendto$ax25(r5, &(0x7f0000000900)="ba86c3f7b3322996fb75fa4b0c66f46c74cce49f116b7a4c202160b30dd7c535694a6b2dd4937447d00fd519d8a2adb9d8362dc7b7868672982eb5592bd49879a44e08cab61e5eb92347e4df590b2df616", 0x51, 0x4000000, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getroute={0x14, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8001, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c60bbb271992d090c8569108eff39d386b7f4ebd490f63d"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1080) 1.300112ms ago: executing program 4 (id=579): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000051c0)=""/73, 0x49}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x2c}], 0x1}, 0x0) (async) syz_emit_ethernet(0x1016, &(0x7f0000001b00)={@broadcast, @random="6ecd640c2887", @void, {@mpls_uc={0x8847, {[{0x10}], @llc={@llc={0x0, 0xbc, '*\'', "ab59aa16c9113936f7829e33e7ac34333d2f04ee529be58fa960acf5b23f75901df1d8500d839c6f6bdd30738036a417dd4a721659cb3975f3fd2914e3e4648fbe2a840b7e7e08cf9c7146669d71574177e26b9b4b33201522c1764885c01d31ae3e72ecccd231f8d1a36031d5e21d91ec8a5db6a20f8db8825e4111fb60a9a4e62546e963450458fb57e1969b409c3545322322a383538d52a7be1f7dba75991f62424965570d3ed2374e22c528d87f906baa74af63664d08fe7edb3f2982a438583143de2f6c1b5af0b12ed78c691667177a906b6e0a8b603bbbfbcb2e92970d78741b5ff0d1bce0799b0066e380ceab547f6de7535fc7eb16578a2c47523cdb1e5d9d1dbc91264cc28cb335da381bb6117ad20f4896e7a2a0776d27a484709dbac21866581f69d2e15289aff098c23a4333e09348306e4a682074ad7fb9d31dc849ec3ab59053fcff68194add7b8b43d672018eef2b677c64d9aed77644f5b2c7240695c709c528022470d8a16e287cac1895e3d3cdd5242db29bac994044527a3ef17503403fd58f12ef8cff4174b555679737303d72cf2752eaf2dd07dfe75249f448767e431942bbaa6926e587ca5fe87dfaeafadc9f24a407cbc0c3ad0c412e981c4475ca0fb512fc03f673fe0547a83a27868cacdd5b044fc6b3de3f99bd6ae96795ec43d59ed83f55c19cebf3f61eaca224e2b5252aff8a78217068f64cf846315a8cde835fa3be4c6ad721c86b2aca2c80368ffc736841e7b67dd502252612d1dc691d2ff540df5544443707e872c3f4c74f4e07fd501feebb19207b626d6546afff2bf4d8b2bf25a62fcd3f5b31ea07c795f139cca59241b8a427e4edec3b13c82522e91a97c15b0ba98125b6b677a27a57b225d5f7d6b04d328b1a54fc2619804239b254a033d150b01d8fc49098bcaf79343dfea4f5d3f18eff9e3960e5153f00d9e3158def5c4a1f7ec252ed9528698ca004908b406b865894c63c4cb44f2ce3cc80005579eae952af3869f8d0a8aafdf72950c70e5cac9a59244c300b802cdf8803bff19f9063e82372bddf0d6cbb233feb93bd56f9ca5abc4d363f8403b063b4ec734cc4b250a101d3a1c0a7a997a895dd023be2e8ce0f0f79f9ae09f9989c9180ada23fcd50cde5ed7db59180dc68c959ebf00b0de7db52b07b04d2b4c58430c8a3fdb6036f8ac475fbcf55b8a677eb414b62df0678e20beb9df94fa698ede2b4c580da6d79d45b385ebffc84a9afc8c36087bf65df7b473be7cf1dcfc1e32994785fa7c648106ccf4e35906e49ee8da1d3c94db38a24cde5d8b1cb4d4d027533a518efd24f7dd1d6103beed540a77d3ebcc46466a040d146e759825c312eb5a3290163e2d9afd440dfd230881c0207f9339b01122a2ea429765b6dd3e9ead2873c3f540e9d204faf8ce3683cbd9eaeaf55aae47d9743cf75bbb12784ebff3d82a63e267ddf52241c36b33a6ffe8c02d9907a188475fead43013addeb1e62b74bf0fe3ed95bcd14562134d68f85447aec84fd68f3ac9066a257661c276d1f3d68322b45ccaad2cf49cf28a6f6977ba95ac72d76d774d781116d4101af4584fb4ae40aae49de99aa76166725d0dd28ea551c076891eb4fd6805e7091d9edc7dfbe0340dc03aa178330aeabc3e41f0feb26e4974d63df698cce3db37b406e74e2665492eff3e257632917c3b892e33f3b42d9375aa7777661bfc24c4eb6fb639097d67d1f7010226588fc5efbfdb3e3538a9bffb1b11465ca293d05ebb0cb55b55c9a666c52c347bd69ba0f181d4c1d27d12c3113469c9dbf890f72f9a83d9781c43c44062e9d1605226351d990108b04cd0de7a9add574186168eb026652cb0d032e0a6501d72536173bd2e387e9168c0812ff5beb73b5f161872db5026e0d4739dd248dccdbcf03248265d3d84bad0ad1258824102767200588532b57594c671da78bdfc67975ab23d115ea9858da62fe86c7f27d58ed12a4251f60bd6c6fa898f85cd4b95ed03c5435f0f16d42b721caaf0e4ec4dffdc7ff34816089694fd88e249a9abceea4de879e926c22b859b62ec8339968d5ed430022676a5180c5f301c2b3a5d47cd3afc07ebfd0f866c426f11f95e3feeb575e4d58192dbce1dd77cbe942c5fac28034185ecd74349f58f78826e719f776912d961a855c661fc151ccea1b0463c36e73d0c5fe473a4fbad63e88a1aaa76f6f5cec7ce6ad0abfc62f2dce71c9825da9b5f83399731f695ac5409f301c8f307b4fad72a9a6cc71bb9ec848670df80cc3647e45f06a73a01dbc9de4c2a2250fab45bfd5a9eabed7882fb10f4c0604634c8356b9c3c32ae45c25f898bf1055c526b8ad5dae0109fb0f2553fdc5a04e4a6d4434d9fbafe601e75b2d95614f804ac57394ba52185f8d7f1f54f5f5dbf997ae469627db77f80413aa9fbb9a720f9470b54bc99f41b1a6b3a49b38777c770180645a68473748796a1b0f082a44902353530e311098bdc045822a32fc998e166f870cf91cfe4dcccc035b6337a6a5634e4f71ccda0ee3a982be4b1b16dbfc4fdaba455ad21840a55b042a0444c37cd9242d361c14b4429de052adbca711bac9d4f8594b78e361ee1250ca2c7f23dee727d2f2fe1e4a3e751eb65fa70c82e0d7ede40abc8ac6f3e9998dcbf95cadaa96cb4d74f03e98a70b21e1f9e2ebf1403c15cea910af3afb4adc553d99b8fadb797cadec42bc2916f6f1605402fdc0e87afc3ef47f4036ea208718385258b014033ccfcb618ffe1ef349213951232d2a504de9f5f98d2b640c985145dd1a050260b8b4cfea5332d1446c30512b9a61eb843f938761b4389a8b09b22a632bf4d5651325897ac905a4b72103146bdde4a36160a788ff227edb74e210313881c0788cdd6ebb8d59a5679ca45a28f6fef3954a41d6ed0338fcc63c60b1877eb57eb1ea93daddacc4249805985cc6dda9183f4f89e4acf6ec0c1a07c4d27143a0a6fd12272250737935c43e65de3a0df279e55e1c4031c07253e9976ca6dc47c103f8710484ff9019f0e6b43a6577e7febf70190a9c12723779e862e2606a9a8d9360b099014a90bebaf9c1790924af633b57842e74e085b5db9370bb32ff841f8cf163c9a9b09d260ca8a5bf50609f5f51bdd868ba14bbcc029e3bb0e705fcf4483cd6960cbf9fe44c03ec3c4a6191e31f694ee40f6e92ae7d162d6965c9103cef26123dedf03562be34aab15caff004793f43a947fe8529af078b134e9975ba5e2e69d4f461db17820b5a94360627147a5827d27495960551aa7b474416c3680d8805ff8d9f8d45e9a37ae1fbe9fefb2d7f324eed4325e30c9e0321a765f1223a3b92a29716bd8eaacd6089ee056ddc2ebc6c99341b6c71c6019142c14171b398dd33ae8e0c0bce56fd6c55b7c1f222bd52d32c4aded2a8599542b96569bbaa7a99954741b826277a17c9b48f1c12ac485d35a8f24dc2731fa80c124335a3d241227f572172ffcff450b1261ad90b060064de48d3663b6319f641328a4abd4d0ae78926ddaa5354740ec01daac9f0ed348551a4401c6fdadf96df427ae3198cbe98e5fcd0512abcc474088ebd68c6d1246a2350316c306c4cdfbbc2e9ae07a0187d7b1275a98d8347a351ac4da0bca2e5ae7c53c9eeef067b8fa4acd913202d16db10dba15fe8c8d69617ac996fb0255492c79887ee54c5e075ac2c0c5e15f3d0929357d8670c2a87c4c006351242d5c59b9b3a2b96393b691faf70bb27862e55ba9ada54c27512d963a6eb6bb8406548e21f099b92440794925d1ddd367771d4a8e5ae09f6a2f6405f2e9f7f4313d3eaca227af437a5334281db9c26d2bcb8a95a8558f965c6f8385e0eea4c51281db7a03fbf89e1e552b98bbd5703619a0eff71696347637f2c4ace31a6aa72487dbd23f225384fe2cc3dd6f020874456834de51e53efd0da2ad4a00fe866294654e443c759dc5507064f342f3a8d428853c28833cc01ce933d14f29e0b23890e585df1e5362731759022835438b1499505dfbc45881269d23c0968ccee0d6bf6409665bf1f49340d66df04007c75a9aca04c66cfb588bd5112f98a2608dbfc628e32143bda565d91bc3113d70f9faacda0042e6f909b06aebb47c4b3e577e23b00877c8d0e70ebc7c7bc55aaeb012e204dee4ee2ada928d72daa0e745907db31a4f006f7d2f12edaaf954380d50471654d0f7d6cba90b1c64f00a20bcaa194afeb7516f3b97365d78cf9c9a1d02cbe04c0faeb4ecdcb94b03b4f26e17519f5845861d29db341190cd8c28c879610651cc316536a33de5f775de3078b7f3d99f19ee1838d10a0b244fad2e0b2531e0afc8777639be8cbdc25fb57005b4913984888b7a1d107333c32ac3356252955e0d61840e617c3e17a85ea9ee3a0fe01a236ca8a316185a58243b1d2e8aa46d127f7b5d97b628f7074f0d1dae792bee43c7bd00a6fb60121b9299df2b54d0fb7e29c7b0bae26b084e3e1d95f82bf25b05c4db34f8082397e8b0c294aeb718cf9980f52db97582f6d58b39e5dd401435bb25374e0b6e6699cfdeeb8a3573b80b71cce0236835dcf3afd596273554ab6e846472be9abb79850c9ed306eb013c7f127c204a60ff0487be978b1efa0b50c886d244da31af5e95f109c45cdad43beab906759004680a7a9e4104c38f02b06d92439078d39cd5e6a8393b9dfbfa3b152f9529af866db867666aa7c59e1cbffa44628b427b62224cab02fde8614585eabaea748f92105186bb2697c7a64fdcf9b9e5e933b330c5012c446c3c08e042843572684afa884505680ac1752e2d11170177cdbf8a0d43fe5777a3f06092120006c903e583e3bb7cfb5f73e8f90c17098c53bfa6df1e44de1fa74035cb4bb716e45622d6f940994a251c7169217d97ef7efd8a6b89bb7a1637abf92a35e5076ed07539fdbaf6b6f26ed10e842c960167c1aab0116725eb32dcbba8b754b64ea61b5e64b5a593b539efe8534f521968aa92d284981331e613343b034069a8bb73ba9bb129b85c79f12373e475342064b99dc34575ff71971d68494a590b8c62f783f724884f9f45e1030d2935bea89444501e4c7b0ec1f4fec4ef3a446fab2f8bda907239f7584eeb87aec7f05678972543006081b97d44632778b2b0801fb0e34b86174e7a666eaaf8a212aca4c0e41c234f607083cb925039a7a7ff80536ef1b6d9ff43f9389a01b0a73d140615335b849f448e029466ff402612a94b4ba17516ede7ce184b5c6c867e412e6fdb2bc14a40fec5ed01aae17e6039aff3c5daba6efa4b1211a2a2715544c9a7a361c35b369d75e0e91b08d29508a029e8fd917f91996b7af3d22e3970ea4190e35701447ae6835ccdc92badeab28d02066ae8f22b97f04e1d9638bb9e7e10e0907dee76a8e1e9bc882ef639d01efe19e8fc2be6768de6bdbbdc6546f2fe608fbdb6fae75bf6b5bf43c914428fd6041446fb27b6c08068ad7a1349b3864ffe245fc073b65e2f7aa3d955fe3ff54bfba2c48263403bb89074f9b3e7e2b43c4c31c3408d5326dbfeeaeb504d06d424300e96efd603a14cfef6de3c3308cad17d361c305da364421c7aa62b754514ae9f9e599c0ffe36091ee69e542b2215d7fdb8f918456b5af021aafedd5c78a0f2ba5a1ea26f6143b29bf95e221702ec4fd567cd04dcec222cb9d52f65a109f909453a39b561da143a8309c4a498042208e1a935f0071dd341404a9948b04dd0c1101cec9a7df5aa9dcd8cad571350ba6c2bae7fae5a67ffb5f389f987bc6067979856d597ecbeebd2efa4a33f11550"}}}}}}, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, &(0x7f0000001080)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'bridge_slave_1\x00', 0x1010}) (async) close(r3) (async) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000100)='dvmrp0\x00') (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) (async) listen(r6, 0xe) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}}, 0x4044805) (async) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r4], 0x34}}, 0x48044) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) 0s ago: executing program 3 (id=580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805df805dc75e6c3301fa9919904fd70483d7f5a421aec8cffd6bb05e", 0x6f}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 75.441410][ T5815] cgroup: Unknown subsys name 'net' [ 75.579283][ T5815] cgroup: Unknown subsys name 'cpuset' [ 75.588801][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.228447][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.144852][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.153406][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.161433][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.169499][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.177678][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.185375][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.195166][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.203126][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.226756][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.234768][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.248847][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.252154][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.256480][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.272854][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.280754][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.291952][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.299305][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.300162][ T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.314152][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.325123][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.332330][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.340102][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.341694][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.356491][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.367187][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.910718][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 81.991625][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 82.127273][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.176404][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 82.251150][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.260288][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.268100][ T5825] bridge_slave_0: entered allmulticast mode [ 82.275604][ T5825] bridge_slave_0: entered promiscuous mode [ 82.283645][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 82.323709][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.331336][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.338901][ T5825] bridge_slave_1: entered allmulticast mode [ 82.346451][ T5825] bridge_slave_1: entered promiscuous mode [ 82.468867][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.476313][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.483460][ T5827] bridge_slave_0: entered allmulticast mode [ 82.491145][ T5827] bridge_slave_0: entered promiscuous mode [ 82.553791][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.561319][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.568837][ T5827] bridge_slave_1: entered allmulticast mode [ 82.576395][ T5827] bridge_slave_1: entered promiscuous mode [ 82.598173][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.624958][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.632288][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.639502][ T5838] bridge_slave_0: entered allmulticast mode [ 82.646772][ T5838] bridge_slave_0: entered promiscuous mode [ 82.665686][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.672843][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.680433][ T5829] bridge_slave_0: entered allmulticast mode [ 82.687827][ T5829] bridge_slave_0: entered promiscuous mode [ 82.697407][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.704533][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.711810][ T5829] bridge_slave_1: entered allmulticast mode [ 82.720135][ T5829] bridge_slave_1: entered promiscuous mode [ 82.729022][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.760709][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.767893][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.774998][ T5838] bridge_slave_1: entered allmulticast mode [ 82.782434][ T5838] bridge_slave_1: entered promiscuous mode [ 82.804717][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.876711][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.903038][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.915212][ T5825] team0: Port device team_slave_0 added [ 82.935772][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.973687][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.996960][ T5825] team0: Port device team_slave_1 added [ 83.015961][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.023150][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.033082][ T5826] bridge_slave_0: entered allmulticast mode [ 83.040439][ T5826] bridge_slave_0: entered promiscuous mode [ 83.050889][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.058706][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.066286][ T5826] bridge_slave_1: entered allmulticast mode [ 83.073462][ T5826] bridge_slave_1: entered promiscuous mode [ 83.082388][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.094123][ T5827] team0: Port device team_slave_0 added [ 83.115975][ T5829] team0: Port device team_slave_0 added [ 83.147230][ T5827] team0: Port device team_slave_1 added [ 83.179615][ T5829] team0: Port device team_slave_1 added [ 83.226443][ T56] Bluetooth: hci1: command tx timeout [ 83.239309][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.246438][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.272464][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.299490][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.312761][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.324583][ T5838] team0: Port device team_slave_0 added [ 83.335385][ T5838] team0: Port device team_slave_1 added [ 83.341905][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.348899][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.375291][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.388154][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.388955][ T56] Bluetooth: hci0: command tx timeout [ 83.395482][ T5836] Bluetooth: hci3: command tx timeout [ 83.395605][ T5836] Bluetooth: hci4: command tx timeout [ 83.395862][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.437965][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.449679][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.456709][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.482746][ T56] Bluetooth: hci2: command tx timeout [ 83.488554][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.497554][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.507187][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.533406][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.550193][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.557217][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.583301][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.674857][ T5826] team0: Port device team_slave_0 added [ 83.684124][ T5826] team0: Port device team_slave_1 added [ 83.690760][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.698336][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.724396][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.737474][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.744434][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.770786][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.801982][ T5825] hsr_slave_0: entered promiscuous mode [ 83.808695][ T5825] hsr_slave_1: entered promiscuous mode [ 83.914561][ T5829] hsr_slave_0: entered promiscuous mode [ 83.921756][ T5829] hsr_slave_1: entered promiscuous mode [ 83.928997][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.936796][ T5829] Cannot create hsr debugfs directory [ 83.962053][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.969419][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.995458][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.037412][ T5838] hsr_slave_0: entered promiscuous mode [ 84.043714][ T5838] hsr_slave_1: entered promiscuous mode [ 84.050021][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.057635][ T5838] Cannot create hsr debugfs directory [ 84.070267][ T5827] hsr_slave_0: entered promiscuous mode [ 84.076920][ T5827] hsr_slave_1: entered promiscuous mode [ 84.082962][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.090580][ T5827] Cannot create hsr debugfs directory [ 84.109498][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.116668][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.143029][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.398036][ T5826] hsr_slave_0: entered promiscuous mode [ 84.404432][ T5826] hsr_slave_1: entered promiscuous mode [ 84.411920][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.420015][ T5826] Cannot create hsr debugfs directory [ 84.812689][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.824907][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.852706][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.872119][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.918579][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.946149][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.981187][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.994654][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.061644][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.073544][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.101888][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.113146][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.210136][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.222510][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.234172][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.244998][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.306453][ T56] Bluetooth: hci1: command tx timeout [ 85.357128][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.404481][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.412547][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.423644][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.444833][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.460667][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.468041][ T56] Bluetooth: hci4: command tx timeout [ 85.468093][ T5840] Bluetooth: hci3: command tx timeout [ 85.473531][ T56] Bluetooth: hci0: command tx timeout [ 85.491322][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.516468][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.523764][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.545705][ T56] Bluetooth: hci2: command tx timeout [ 85.561273][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.568477][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.631882][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.650313][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.670955][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.678109][ T727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.713129][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.734763][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.741937][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.773096][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.780257][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.790582][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.797725][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.857606][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.962438][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.023701][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.030926][ T727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.077189][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.098469][ T727] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.105764][ T727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.213672][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.233118][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.263455][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.270644][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.313052][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.320275][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.452339][ T5825] veth0_vlan: entered promiscuous mode [ 86.510407][ T5825] veth1_vlan: entered promiscuous mode [ 86.541061][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.707183][ T5825] veth0_macvtap: entered promiscuous mode [ 86.749829][ T5825] veth1_macvtap: entered promiscuous mode [ 86.860709][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.903261][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.923610][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.943794][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.954128][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.963444][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.981426][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.004000][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.283171][ T5829] veth0_vlan: entered promiscuous mode [ 87.361715][ T5827] veth0_vlan: entered promiscuous mode [ 87.385203][ T56] Bluetooth: hci1: command tx timeout [ 87.393252][ T5829] veth1_vlan: entered promiscuous mode [ 87.400857][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.434183][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.444609][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.459413][ T5827] veth1_vlan: entered promiscuous mode [ 87.535789][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.543694][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.551502][ T5836] Bluetooth: hci4: command tx timeout [ 87.551587][ T56] Bluetooth: hci3: command tx timeout [ 87.557556][ T56] Bluetooth: hci0: command tx timeout [ 87.626448][ T56] Bluetooth: hci2: command tx timeout [ 87.646207][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.670307][ T5827] veth0_macvtap: entered promiscuous mode [ 87.681456][ T5827] veth1_macvtap: entered promiscuous mode [ 87.727917][ T5829] veth0_macvtap: entered promiscuous mode [ 87.737886][ T5838] veth0_vlan: entered promiscuous mode [ 87.748741][ T5826] veth0_vlan: entered promiscuous mode [ 87.760533][ T5838] veth1_vlan: entered promiscuous mode [ 87.788396][ T5829] veth1_macvtap: entered promiscuous mode [ 87.802863][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.824246][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.849955][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.862917][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.872636][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.881745][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.898574][ T5826] veth1_vlan: entered promiscuous mode [ 87.933846][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.038788][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.056875][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.072069][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.083203][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.098587][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.136474][ T5838] veth0_macvtap: entered promiscuous mode [ 88.174769][ T5838] veth1_macvtap: entered promiscuous mode [ 88.228080][ T5826] veth0_macvtap: entered promiscuous mode [ 88.271581][ T5826] veth1_macvtap: entered promiscuous mode [ 88.308408][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.369004][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.410685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.422117][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431845][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.439506][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.445413][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.458148][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.470590][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.503634][ T5936] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 88.516406][ T5936] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 88.531412][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.551251][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.560393][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.569525][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578515][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.615567][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.627800][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.629705][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.636854][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.815788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.825146][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.931481][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.940318][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.074634][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 89.085344][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.093205][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.180773][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.204004][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.297514][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.331552][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.374782][ T5962] Bluetooth: MGMT ver 1.23 [ 89.475230][ T56] Bluetooth: hci1: command tx timeout [ 89.541821][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 89.579206][ T5967] lo speed is unknown, defaulting to 1000 [ 89.588810][ T5967] lo speed is unknown, defaulting to 1000 [ 89.608305][ T5967] lo speed is unknown, defaulting to 1000 [ 89.625623][ T56] Bluetooth: hci0: command tx timeout [ 89.631365][ T5836] Bluetooth: hci3: command tx timeout [ 89.631390][ T5840] Bluetooth: hci4: command tx timeout [ 89.677899][ T5967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.708796][ T5840] Bluetooth: hci2: command tx timeout [ 89.760477][ T5967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.827742][ T5971] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.852232][ T5967] lo speed is unknown, defaulting to 1000 [ 89.885773][ T5971] syz.0.1 uses old SIOCAX25GETINFO [ 89.893228][ T5974] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.910414][ T5967] lo speed is unknown, defaulting to 1000 [ 89.920909][ T5967] lo speed is unknown, defaulting to 1000 [ 89.930500][ T5967] lo speed is unknown, defaulting to 1000 [ 89.942629][ T5967] lo speed is unknown, defaulting to 1000 [ 89.966921][ T5974] batadv_slave_1: entered promiscuous mode [ 89.996298][ T5974] netlink: 'syz.4.14': attribute type 18 has an invalid length. [ 90.023748][ T5974] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.033831][ T5974] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.042678][ T5974] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.051503][ T5974] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.227898][ T5973] batadv_slave_1: left promiscuous mode [ 90.441139][ T5994] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 90.454387][ T5988] Zero length message leads to an empty skb [ 90.700554][ T6000] veth3: entered promiscuous mode [ 90.706006][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 91.006857][ T6017] [H: renamed from veth0_vlan (while UP) [ 91.035541][ T6019] netlink: 256 bytes leftover after parsing attributes in process `syz.0.29'. [ 91.069866][ T6019] netlink: 'syz.0.29': attribute type 9 has an invalid length. [ 91.341763][ T6034] warning: `syz.3.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.384750][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.505869][ T6042] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 91.660528][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 91.794829][ T919] cfg80211: failed to load regulatory.db [ 91.851321][ T6063] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.908366][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 91.929058][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 92.426007][ T5840] Bluetooth: hci4: command tx timeout [ 92.783006][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.814482][ T6113] netlink: 1784 bytes leftover after parsing attributes in process `syz.1.53'. [ 92.834313][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.872340][ T6111] netlink: 'syz.4.52': attribute type 3 has an invalid length. [ 92.918246][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.055628][ T6126] netlink: 'syz.1.56': attribute type 19 has an invalid length. [ 93.530423][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.683677][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.982319][ T6161] xt_socket: unknown flags 0x3c [ 94.309108][ T6171] lo speed is unknown, defaulting to 1000 [ 94.423713][ T6178] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 94.616415][ T6187] netlink: 'syz.2.77': attribute type 58 has an invalid length. [ 94.624113][ T6187] __nla_validate_parse: 4 callbacks suppressed [ 94.624126][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 94.660945][ T6189] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 94.831815][ T6189] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 94.948802][ T6192] lo speed is unknown, defaulting to 1000 [ 94.962865][ T6198] netlink: 'syz.0.79': attribute type 18 has an invalid length. [ 95.003089][ T6198] netlink: 'syz.0.79': attribute type 3 has an invalid length. [ 95.162739][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 95.243583][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 95.274976][ T6205] tipc: Enabling of bearer rejected, failed to enable media [ 95.307897][ T6205] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 95.392488][ T6213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.83'. [ 95.502883][ T6221] netlink: 5 bytes leftover after parsing attributes in process `syz.3.87'. [ 95.512388][ T6221] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 95.524621][ T6221] 0ªÃøÂFNð¡: entered allmulticast mode [ 95.687252][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 95.878454][ T6234] vlan2: entered promiscuous mode [ 95.885392][ T6236] netlink: 'syz.4.90': attribute type 23 has an invalid length. [ 95.923318][ T6234] bridge0: entered promiscuous mode [ 96.127977][ T6245] netlink: 9 bytes leftover after parsing attributes in process `syz.1.93'. [ 96.182658][ T6245] ï‰Oܼ: renamed from hsr0 (while UP) [ 96.204065][ T6245] ï‰Oܼ: entered promiscuous mode [ 96.211960][ T6245] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 96.243159][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'. [ 96.367824][ T6245] netlink: 'syz.1.93': attribute type 11 has an invalid length. [ 96.426971][ T6245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.93'. [ 96.705647][ T6271] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.825026][ T6273] veth1_macvtap: left promiscuous mode [ 96.850738][ T6276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'. [ 97.138411][ T6290] Unsupported Adiantum instantiation: (cbc(serpent),xtea,nhpoly1305) [ 97.261952][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.271255][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.279330][ T6294] xt_hashlimit: invalid rate [ 97.280358][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.294009][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.303135][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.312231][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.321338][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.330434][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 97.339583][ T6292] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 98.154048][ T6331] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 98.323079][ T6342] vlan3: entered allmulticast mode [ 98.377259][ T6342] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 98.412074][ T6343] smc: net device bond0 applied user defined pnetid SYZ2 [ 98.440642][ T6349] smc: net device bond0 erased user defined pnetid SYZ2 [ 98.498099][ T6354] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 98.523467][ T6354] veth0_macvtap: left promiscuous mode [ 98.597609][ T6352] xt_CT: No such helper "pptp" [ 98.899771][ T6364] Cannot find set identified by id 0 to match [ 99.818197][ T6411] lo speed is unknown, defaulting to 1000 [ 99.900495][ T6421] __nla_validate_parse: 17 callbacks suppressed [ 99.900517][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'. [ 99.950536][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 100.126027][ T6429] syz_tun: entered allmulticast mode [ 100.213585][ T6430] ip6gre1: entered allmulticast mode [ 100.260379][ T6427] syz_tun: left allmulticast mode [ 100.275286][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 100.326693][ T6436] raw_sendmsg: syz.4.156 forgot to set AF_INET. Fix it! [ 100.440748][ T6440] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.495485][ T6442] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.545735][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.783086][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 100.796110][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 100.837160][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 100.944249][ T6464] bridge_slave_0: left allmulticast mode [ 100.998546][ T6464] bridge_slave_0: left promiscuous mode [ 101.010688][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.044382][ T6464] bridge_slave_1: left allmulticast mode [ 101.054684][ T6464] bridge_slave_1: left promiscuous mode [ 101.079042][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.151771][ T6464] bond0: (slave bond_slave_0): Releasing backup interface [ 101.218665][ T6464] bond0: (slave bond_slave_1): Releasing backup interface [ 101.256043][ T6464] team0: Port device team_slave_0 removed [ 101.281227][ T6464] team0: Port device team_slave_1 removed [ 101.298631][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.317478][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.608117][ T6487] sctp: [Deprecated]: syz.1.172 (pid 6487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.608117][ T6487] Use struct sctp_sack_info instead [ 101.678093][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.820803][ T6500] netlink: 'syz.2.177': attribute type 3 has an invalid length. [ 102.146761][ T6522] netlink: 112 bytes leftover after parsing attributes in process `syz.2.182'. [ 102.404086][ T6536] netlink: 'syz.4.188': attribute type 12 has an invalid length. [ 102.434767][ T6536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.188'. [ 102.528134][ T6544] netlink: 'syz.2.190': attribute type 5 has an invalid length. [ 102.551152][ T6544] netlink: 140 bytes leftover after parsing attributes in process `syz.2.190'. [ 102.632575][ T6548] netlink: 96 bytes leftover after parsing attributes in process `syz.4.191'. [ 102.651306][ T6550] lo: entered promiscuous mode [ 102.688467][ T6550] tunl0: entered promiscuous mode [ 102.698978][ T6550] gre0: entered promiscuous mode [ 102.718586][ T6550] gretap0: entered promiscuous mode [ 102.740418][ T6550] erspan0: entered promiscuous mode [ 102.775414][ T6550] ip_vti0: entered promiscuous mode [ 102.805830][ T5915] lo speed is unknown, defaulting to 1000 [ 102.812322][ T5915] syz2: Port: 1 Link DOWN [ 102.817367][ T24] lo speed is unknown, defaulting to 1000 [ 102.822623][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 102.968116][ T6557] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 103.015369][ T6554] can: request_module (can-proto-3) failed. [ 103.020787][ T6559] netem: invalid attributes len -24 [ 103.027188][ T6559] netem: change failed [ 103.869720][ T6589] veth1_to_team: entered promiscuous mode [ 103.961593][ T6596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.320417][ T6589] veth1_to_team: left promiscuous mode [ 104.929891][ T6636] netlink: 'syz.0.221': attribute type 11 has an invalid length. [ 104.960171][ T6636] __nla_validate_parse: 1 callbacks suppressed [ 104.960187][ T6636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.221'. [ 105.028060][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.182253][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.260169][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.376459][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.487632][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 105.784703][ T6664] netlink: 144 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.840943][ T54] bridge_slave_1: left allmulticast mode [ 105.879096][ T54] bridge_slave_1: left promiscuous mode [ 105.885909][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.959176][ T54] bridge_slave_0: left allmulticast mode [ 105.964878][ T54] bridge_slave_0: left promiscuous mode [ 105.983427][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.060964][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.070263][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.079369][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.088077][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.103603][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.256613][ T6684] netlink: 68 bytes leftover after parsing attributes in process `syz.4.230'. [ 106.513528][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.527845][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.538460][ T54] bond0 (unregistering): Released all slaves [ 106.723734][ T6677] lo speed is unknown, defaulting to 1000 [ 106.749468][ T6690] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 106.776415][ T6690] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.802281][ T6690] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.914283][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.235'. [ 107.112940][ T6707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.185555][ T6705] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 107.200300][ T6705] team0: Device ipvlan2 is already an upper device of the team interface [ 107.375847][ T54] hsr_slave_0: left promiscuous mode [ 107.410402][ T54] hsr_slave_1: left promiscuous mode [ 107.432489][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.461195][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.488069][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.499011][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 107.508113][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.581586][ T54] veth1_macvtap: left promiscuous mode [ 107.645236][ T54] veth0_macvtap: left promiscuous mode [ 107.650990][ T54] veth1_vlan: left promiscuous mode [ 107.666130][ T54] veth0_vlan: left promiscuous mode [ 108.185483][ T56] Bluetooth: hci3: command tx timeout [ 108.358027][ T54] team0 (unregistering): Port device team_slave_1 removed [ 108.387699][ T54] team0 (unregistering): Port device team_slave_0 removed [ 108.670883][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.678537][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.687139][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.694577][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.973506][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 109.214944][ T6677] chnl_net:caif_netlink_parms(): no params data found [ 109.252743][ T6771] netlink: 'syz.1.249': attribute type 32 has an invalid length. [ 109.267952][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 109.377810][ T6771] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 109.527834][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 109.756147][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 109.838949][ T6800] net_ratelimit: 439 callbacks suppressed [ 109.838968][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.898246][ T6788] syz.3.251 (6788) used greatest stack depth: 18168 bytes left [ 110.071780][ T6809] netlink: 104 bytes leftover after parsing attributes in process `syz.4.255'. [ 110.133714][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.141517][ T6807] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 110.162837][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.184858][ T6677] bridge_slave_0: entered allmulticast mode [ 110.240086][ T6677] bridge_slave_0: entered promiscuous mode [ 110.270391][ T56] Bluetooth: hci3: command tx timeout [ 110.277541][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.287900][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.295309][ T6677] bridge_slave_1: entered allmulticast mode [ 110.303231][ T6677] bridge_slave_1: entered promiscuous mode [ 110.432716][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.489874][ T6820] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 110.513252][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.658807][ T6677] team0: Port device team_slave_0 added [ 110.706535][ T6677] team0: Port device team_slave_1 added [ 110.863582][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.873904][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.959061][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.981237][ T6842] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 111.025708][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.039848][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.081641][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.129738][ T6860] netlink: 'syz.3.266': attribute type 39 has an invalid length. [ 111.188146][ T6861] vlan2: entered promiscuous mode [ 111.193264][ T6861] bridge0: entered promiscuous mode [ 111.199137][ T6861] vlan2: entered allmulticast mode [ 111.204292][ T6861] bridge0: entered allmulticast mode [ 111.320426][ T6865] netlink: 830 bytes leftover after parsing attributes in process `syz.0.267'. [ 111.350993][ T6677] hsr_slave_0: entered promiscuous mode [ 111.358807][ T6677] hsr_slave_1: entered promiscuous mode [ 111.374890][ T6865] bond0: entered promiscuous mode [ 111.682646][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 111.856945][ T6893] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 111.958967][ T6894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.274'. [ 111.984802][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 112.056521][ T6900] netlink: 64 bytes leftover after parsing attributes in process `syz.4.275'. [ 112.320741][ T6894] bond0 (unregistering): Released all slaves [ 112.346532][ T56] Bluetooth: hci3: command tx timeout [ 112.364909][ T6916] netlink: 'syz.1.277': attribute type 33 has an invalid length. [ 112.651588][ T6922] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 112.739600][ T6922] macvlan0: entered promiscuous mode [ 112.752532][ T6923] xt_CT: No such helper "pptp" [ 112.757887][ T6922] macvlan0: entered allmulticast mode [ 112.812741][ T6922] veth1_vlan: entered allmulticast mode [ 112.844433][ T6922] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 113.153261][ T6938] netlink: 'syz.4.283': attribute type 32 has an invalid length. [ 113.508215][ T6677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.591295][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 113.600721][ T6677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.681533][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 113.692747][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'. [ 113.750382][ T6677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.770094][ T6677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.920147][ T6965] bridge_slave_1: left allmulticast mode [ 113.945309][ T6965] bridge_slave_1: left promiscuous mode [ 113.979151][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.044349][ T6965] bridge_slave_0: left allmulticast mode [ 114.088752][ T6965] bridge_slave_0: left promiscuous mode [ 114.109253][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 114.118750][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.146896][ T6980] netlink: 'syz.3.290': attribute type 8 has an invalid length. [ 114.425210][ T56] Bluetooth: hci3: command tx timeout [ 114.484809][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.554557][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.639997][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.647240][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.685721][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.692943][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.861095][ T6677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.993218][ T7006] vlan3: entered allmulticast mode [ 114.999507][ T7006] gretap0: entered allmulticast mode [ 115.041491][ T7015] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.201125][ T7023] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 115.230823][ T7026] netlink: 'syz.1.303': attribute type 41 has an invalid length. [ 115.574833][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.896974][ T7050] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 115.962137][ T6677] veth0_vlan: entered promiscuous mode [ 115.994636][ T6677] veth1_vlan: entered promiscuous mode [ 116.129795][ T6677] veth0_macvtap: entered promiscuous mode [ 116.234925][ T7072] tipc: Started in network mode [ 116.240275][ T7072] tipc: Node identity , cluster identity 4711 [ 116.250189][ T7072] tipc: Failed to set node id, please configure manually [ 116.285171][ T7072] tipc: Enabling of bearer rejected, failed to enable media [ 116.301567][ T6677] veth1_macvtap: entered promiscuous mode [ 116.364187][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.401088][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.447812][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.469581][ T6677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.489928][ T6677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.508721][ T7086] __nla_validate_parse: 2 callbacks suppressed [ 116.508739][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 116.524640][ T6677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.534277][ T6677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.879747][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.903332][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.978253][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.998343][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.036116][ T7105] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 117.044780][ T7105] netlink: 'syz.3.320': attribute type 3 has an invalid length. [ 117.054383][ T7105] netlink: 224 bytes leftover after parsing attributes in process `syz.3.320'. [ 117.067568][ T7105] NCSI netlink: No device for ifindex 131080 [ 117.173751][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 117.196913][ T7110] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 117.213676][ T7110] team0: Device ipvlan1 failed to register rx_handler [ 117.520558][ T6681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.598258][ T7098] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 117.632307][ T6681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.761470][ T6681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.871229][ T6681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.021503][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 118.349580][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 118.358551][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 118.593555][ T6681] bridge_slave_1: left allmulticast mode [ 118.612672][ T6681] bridge_slave_1: left promiscuous mode [ 118.641259][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.681008][ T6681] bridge_slave_0: left allmulticast mode [ 118.710193][ T6681] bridge_slave_0: left promiscuous mode [ 118.734731][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.825376][ T56] Bluetooth: hci0: command 0x0401 tx timeout [ 118.893782][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.907366][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.920744][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.930889][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.943959][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.191604][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.204237][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.214904][ T6681] bond0 (unregistering): Released all slaves [ 119.297770][ T7172] lo speed is unknown, defaulting to 1000 [ 119.751843][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 119.959623][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 120.008700][ T7219] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 120.258559][ T6681] hsr_slave_0: left promiscuous mode [ 120.276508][ T6681] hsr_slave_1: left promiscuous mode [ 120.282613][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.295486][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.320633][ T7238] netlink: 'syz.1.355': attribute type 8 has an invalid length. [ 120.331396][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.349619][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.373056][ T6681] veth1_macvtap: left promiscuous mode [ 120.378942][ T6681] veth0_macvtap: left promiscuous mode [ 120.384583][ T6681] veth1_vlan: left promiscuous mode [ 120.390003][ T6681] veth0_vlan: left promiscuous mode [ 120.772630][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 120.807810][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 120.985547][ T5840] Bluetooth: hci3: command tx timeout [ 121.154326][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 121.336597][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 121.467701][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 121.689645][ T7277] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 121.714195][ T7277] netlink: 244 bytes leftover after parsing attributes in process `syz.1.364'. [ 121.876951][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.888504][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.917785][ T7172] bridge_slave_0: entered allmulticast mode [ 121.944164][ T7172] bridge_slave_0: entered promiscuous mode [ 121.983412][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.991054][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.999470][ T7172] bridge_slave_1: entered allmulticast mode [ 122.007843][ T7172] bridge_slave_1: entered promiscuous mode [ 122.153652][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.189350][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.364419][ T7320] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 122.372313][ T7320] netlink: 228 bytes leftover after parsing attributes in process `syz.1.376'. [ 122.412893][ T7319] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 122.421240][ T6825] IPVS: starting estimator thread 0... [ 122.470905][ T7172] team0: Port device team_slave_0 added [ 122.503590][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 122.518801][ T7322] IPVS: using max 26 ests per chain, 62400 per kthread [ 122.634067][ T7172] team0: Port device team_slave_1 added [ 122.729657][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.737873][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.764201][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.781944][ T7331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 122.792734][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.799914][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.830068][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.897628][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 122.924921][ T7334] netlink: 44 bytes leftover after parsing attributes in process `syz.0.380'. [ 122.930703][ T7172] hsr_slave_0: entered promiscuous mode [ 122.942353][ T7172] hsr_slave_1: entered promiscuous mode [ 122.951105][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 123.075206][ T5840] Bluetooth: hci3: command tx timeout [ 123.440458][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 123.451854][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 123.465693][ T7357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.388'. [ 123.625604][ T7362] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 123.807734][ T7172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.834190][ T7172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.879313][ T7172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.923624][ T7172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.143621][ T7378] Bluetooth: MGMT ver 1.23 [ 124.184844][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.318768][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.334668][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.341889][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.432315][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.439830][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.988565][ T7421] tipc: Started in network mode [ 125.005732][ T7421] tipc: Node identity ea7a68fc878e, cluster identity 4711 [ 125.029053][ T7421] tipc: Enabled bearer , priority 0 [ 125.039120][ T7421] syzkaller0: entered promiscuous mode [ 125.044640][ T7421] syzkaller0: entered allmulticast mode [ 125.057875][ T7421] tipc: Resetting bearer [ 125.108286][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.122559][ T7420] tipc: Resetting bearer [ 125.152767][ T7420] tipc: Disabling bearer [ 125.159552][ T5840] Bluetooth: hci3: command tx timeout [ 125.353736][ T7172] veth0_vlan: entered promiscuous mode [ 125.383614][ T7172] veth1_vlan: entered promiscuous mode [ 125.469088][ T7444] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 125.482443][ T7445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.505426][ T7448] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 125.530309][ T7172] veth0_macvtap: entered promiscuous mode [ 125.553264][ T7172] veth1_macvtap: entered promiscuous mode [ 125.640968][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.670018][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.701849][ T7172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.721897][ T7172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.739557][ T7172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.755221][ T7172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.988704][ T7462] bridge_slave_1: default FDB implementation only supports local addresses [ 126.011717][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.041710][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.138577][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.159503][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.539083][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.807613][ T7507] __nla_validate_parse: 9 callbacks suppressed [ 126.807632][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 127.081021][ T7507] geneve2: entered promiscuous mode [ 127.183191][ T7526] netlink: 156 bytes leftover after parsing attributes in process `syz.1.436'. [ 127.286090][ T7156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.717539][ T7156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.876001][ T7548] netlink: 'syz.3.441': attribute type 7 has an invalid length. [ 128.077675][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 128.205321][ T7156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.362676][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.372094][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.380487][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.390588][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.400188][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.447814][ T7156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.573251][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.448'. [ 128.698972][ T7567] lo speed is unknown, defaulting to 1000 [ 128.715013][ T7584] netlink: 48 bytes leftover after parsing attributes in process `syz.3.452'. [ 128.843680][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.855752][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.874943][ T7590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'. [ 128.913008][ T7592] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 128.928475][ T7592] netlink: 244 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.963906][ T7592] xt_hashlimit: size too large, truncated to 1048576 [ 129.015347][ T7156] bridge_slave_1: left allmulticast mode [ 129.021129][ T7156] bridge_slave_1: left promiscuous mode [ 129.036878][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.060708][ T7594] netlink: 48 bytes leftover after parsing attributes in process `syz.3.455'. [ 129.088061][ T7156] bridge_slave_0: left allmulticast mode [ 129.093750][ T7156] bridge_slave_0: left promiscuous mode [ 129.150640][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.569650][ T7156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.592887][ T7156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.603948][ T7156] bond0 (unregistering): Released all slaves [ 129.664566][ T7610] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 129.728950][ T7610] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.749309][ T7610] gretap1: entered promiscuous mode [ 129.758956][ T7610] gretap1: entered allmulticast mode [ 130.048867][ T7632] x_tables: unsorted underflow at hook 1 [ 130.153407][ T7629] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 130.171203][ T7629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.185210][ T7629] bond0 (unregistering): Released all slaves [ 130.274094][ T7567] chnl_net:caif_netlink_parms(): no params data found [ 130.505255][ T56] Bluetooth: hci3: command tx timeout [ 130.550510][ T7156] hsr_slave_0: left promiscuous mode [ 130.559213][ T7156] hsr_slave_1: left promiscuous mode [ 130.565782][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.573263][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.582015][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.590463][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.609412][ T7156] veth1_macvtap: left promiscuous mode [ 130.615504][ T7156] veth0_macvtap: left promiscuous mode [ 130.624202][ T7156] veth1_vlan: left promiscuous mode [ 130.629602][ T7156] veth0_vlan: left promiscuous mode [ 131.099871][ T7156] team0 (unregistering): Port device team_slave_1 removed [ 131.147865][ T7156] team0 (unregistering): Port device team_slave_0 removed [ 131.661211][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.682745][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.726023][ T7567] bridge_slave_0: entered allmulticast mode [ 131.746932][ T7567] bridge_slave_0: entered promiscuous mode [ 131.749504][ T7661] netlink: 'syz.3.472': attribute type 7 has an invalid length. [ 131.775997][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.783248][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.801016][ T7567] bridge_slave_1: entered allmulticast mode [ 131.816802][ T7567] bridge_slave_1: entered promiscuous mode [ 131.825651][ T7666] __nla_validate_parse: 5 callbacks suppressed [ 131.825666][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 131.874748][ T7661] netlink: 810 bytes leftover after parsing attributes in process `syz.3.472'. [ 131.991570][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.010461][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.069164][ T7669] netlink: 'syz.3.475': attribute type 13 has an invalid length. [ 132.094798][ T7669] delete_channel: no stack [ 132.102771][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.256216][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.278320][ T7567] team0: Port device team_slave_0 added [ 132.306035][ T7567] team0: Port device team_slave_1 added [ 132.500964][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.516136][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.523112][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.595318][ T56] Bluetooth: hci3: command tx timeout [ 132.615904][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.635169][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.642295][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.701457][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.737499][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.751259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757840][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.762694][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.800228][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.837655][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.858606][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.880704][ T7695] xt_CT: No such helper "pptp" [ 133.006223][ T7701] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 133.026922][ T7701] bridge0: port 1(team0) entered blocking state [ 133.033938][ T7701] bridge0: port 1(team0) entered disabled state [ 133.044781][ T7701] team0: entered allmulticast mode [ 133.052894][ T7701] team0: entered promiscuous mode [ 133.067829][ T7567] hsr_slave_0: entered promiscuous mode [ 133.075868][ T7567] hsr_slave_1: entered promiscuous mode [ 133.184336][ T7709] netlink: 'syz.3.488': attribute type 25 has an invalid length. [ 133.682856][ T7729] IPVS: length: 66 != 24 [ 133.733961][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.851508][ T7746] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 134.072234][ T7757] TCP: TCP_TX_DELAY enabled [ 134.085387][ T7757] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 134.135291][ T7567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.185438][ T7567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.208143][ T7567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.228659][ T7567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.463071][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.519225][ T7567] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.609742][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.616946][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.653496][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.660711][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.669337][ T56] Bluetooth: hci3: command tx timeout [ 134.819126][ T7780] netlink: 'syz.1.508': attribute type 15 has an invalid length. [ 135.197267][ T7812] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 135.431679][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.571040][ T7567] veth0_vlan: entered promiscuous mode [ 135.609868][ T7567] veth1_vlan: entered promiscuous mode [ 135.721010][ T7567] veth0_macvtap: entered promiscuous mode [ 135.732088][ T7567] veth1_macvtap: entered promiscuous mode [ 135.788072][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.801277][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.854192][ T7835] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 135.888051][ T7567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.954749][ T7567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.977954][ T7567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.986965][ T7567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.002597][ T7839] IPVS: length: 8 != 1152 [ 136.198026][ T7790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.238877][ T7790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.395750][ T7796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.439218][ T7796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.551827][ T7866] wireguard: wg1: Could not create IPv4 socket [ 136.638508][ T7876] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 136.664197][ T7876] netlink: 'syz.3.533': attribute type 2 has an invalid length. [ 136.688417][ T7875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.745411][ T56] Bluetooth: hci3: command tx timeout [ 137.195276][ T7904] delete_channel: no stack [ 137.202881][ T7908] netlink: 'syz.1.543': attribute type 9 has an invalid length. [ 137.219440][ T7908] netlink: 'syz.1.543': attribute type 6 has an invalid length. [ 137.485864][ T7918] __nla_validate_parse: 49 callbacks suppressed [ 137.485883][ T7918] netlink: 156 bytes leftover after parsing attributes in process `syz.1.546'. [ 137.734039][ T7791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.753603][ T7920] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 137.836636][ T7920] hsr0: entered promiscuous mode [ 138.187441][ T7791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.366545][ T7791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.481959][ T7791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.500529][ T7929] netlink: 'syz.0.548': attribute type 30 has an invalid length. [ 138.536072][ T7929] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 138.572742][ T7929] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 138.769428][ T7942] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 138.797507][ T7942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.553'. [ 138.827795][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 138.864936][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 138.921550][ T7791] bridge_slave_1: left allmulticast mode [ 138.947944][ T7791] bridge_slave_1: left promiscuous mode [ 138.953790][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.021331][ T7791] bridge_slave_0: left allmulticast mode [ 139.035453][ T7791] bridge_slave_0: left promiscuous mode [ 139.051521][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.108024][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.117899][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.129684][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.147568][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.157369][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.167668][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 139.502543][ T7791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.513935][ T7791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.524997][ T7791] bond0 (unregistering): Released all slaves [ 139.550093][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 139.788346][ T7970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.563'. [ 139.810091][ T7951] lo speed is unknown, defaulting to 1000 [ 139.856105][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 140.150348][ T7791] hsr_slave_0: left promiscuous mode [ 140.157895][ T7791] hsr_slave_1: left promiscuous mode [ 140.163745][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.179390][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 140.188887][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.196365][ T7982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.566'. [ 140.219414][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.227554][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.254017][ T7791] veth1_macvtap: left promiscuous mode [ 140.262433][ T7984] atomic_op ffff888054742998 conn xmit_atomic 0000000000000000 [ 140.271029][ T7791] veth0_macvtap: left promiscuous mode [ 140.285261][ T7791] veth1_vlan: left promiscuous mode [ 140.290776][ T7791] veth0_vlan: left promiscuous mode [ 140.816658][ T7991] xt_CT: No such helper "pptp" [ 140.824493][ T7791] team0 (unregistering): Port device team_slave_1 removed [ 140.884224][ T7791] team0 (unregistering): Port device team_slave_0 removed [ 141.205249][ T7980] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 141.225145][ T5840] Bluetooth: hci3: command tx timeout [ 141.545824][ T8016] ================================================================== [ 141.553940][ T8016] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 141.561618][ T8016] Read of size 1 at addr ffff88805b824430 by task syz.1.578/8016 [ 141.569341][ T8016] [ 141.571684][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.1.578 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 141.571704][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.571717][ T8016] Call Trace: [ 141.571725][ T8016] [ 141.571738][ T8016] dump_stack_lvl+0x189/0x250 [ 141.571763][ T8016] ? __virt_addr_valid+0x18c/0x540 [ 141.571783][ T8016] ? rcu_is_watching+0x15/0xb0 [ 141.571804][ T8016] ? __kasan_check_byte+0x12/0x40 [ 141.571822][ T8016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.571843][ T8016] ? rcu_is_watching+0x15/0xb0 [ 141.571864][ T8016] ? lock_release+0x4b/0x3e0 [ 141.571885][ T8016] ? __virt_addr_valid+0x18c/0x540 [ 141.571903][ T8016] ? __virt_addr_valid+0x469/0x540 [ 141.571922][ T8016] print_report+0xb4/0x290 [ 141.571939][ T8016] ? rose_get_neigh+0x391/0x990 [ 141.571957][ T8016] kasan_report+0x118/0x150 [ 141.571975][ T8016] ? rose_get_neigh+0x391/0x990 [ 141.571998][ T8016] rose_get_neigh+0x391/0x990 [ 141.572020][ T8016] rose_connect+0x416/0x10a0 [ 141.572035][ T8016] ? __pfx_current_check_access_socket+0x10/0x10 [ 141.572053][ T8016] ? aa_sk_perm+0x81e/0x950 [ 141.572065][ T8016] ? __might_fault+0xb0/0x130 [ 141.572082][ T8016] ? __pfx_rose_connect+0x10/0x10 [ 141.572097][ T8016] ? aa_af_perm+0x1d0/0x2b0 [ 141.572109][ T8016] ? tomoyo_socket_connect_permission+0x164/0x290 [ 141.572131][ T8016] ? bpf_lsm_socket_connect+0x9/0x20 [ 141.572148][ T8016] __sys_connect+0x313/0x440 [ 141.572166][ T8016] ? __pfx___sys_connect+0x10/0x10 [ 141.572189][ T8016] __x64_sys_connect+0x7a/0x90 [ 141.572205][ T8016] do_syscall_64+0xf6/0x210 [ 141.572223][ T8016] ? clear_bhb_loop+0x45/0xa0 [ 141.572240][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.572253][ T8016] RIP: 0033:0x7fae50f8e969 [ 141.572270][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.572283][ T8016] RSP: 002b:00007fae4edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 141.572304][ T8016] RAX: ffffffffffffffda RBX: 00007fae511b5fa0 RCX: 00007fae50f8e969 [ 141.572315][ T8016] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000004 [ 141.572324][ T8016] RBP: 00007fae51010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 141.572333][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.572341][ T8016] R13: 0000000000000000 R14: 00007fae511b5fa0 R15: 00007ffe6ef33378 [ 141.572357][ T8016] [ 141.572362][ T8016] [ 141.815977][ T8016] Allocated by task 727: [ 141.820217][ T8016] kasan_save_track+0x3e/0x80 [ 141.824903][ T8016] __kasan_kmalloc+0x93/0xb0 [ 141.829491][ T8016] __kmalloc_cache_noprof+0x230/0x3d0 [ 141.834863][ T8016] batadv_forw_packet_alloc+0x1e9/0x390 [ 141.840416][ T8016] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 141.845885][ T8016] batadv_iv_ogm_schedule+0x81c/0xea0 [ 141.851248][ T8016] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 141.858270][ T8016] process_scheduled_works+0xadb/0x17a0 [ 141.863819][ T8016] worker_thread+0x8a0/0xda0 [ 141.868402][ T8016] kthread+0x70e/0x8a0 [ 141.872462][ T8016] ret_from_fork+0x4b/0x80 [ 141.876880][ T8016] ret_from_fork_asm+0x1a/0x30 [ 141.881636][ T8016] [ 141.883953][ T8016] Freed by task 13: [ 141.887751][ T8016] kasan_save_track+0x3e/0x80 [ 141.892420][ T8016] kasan_save_free_info+0x46/0x50 [ 141.897440][ T8016] __kasan_slab_free+0x62/0x70 [ 141.902197][ T8016] kfree+0x193/0x440 [ 141.906090][ T8016] process_scheduled_works+0xadb/0x17a0 [ 141.911645][ T8016] worker_thread+0x8a0/0xda0 [ 141.916228][ T8016] kthread+0x70e/0x8a0 [ 141.920293][ T8016] ret_from_fork+0x4b/0x80 [ 141.924722][ T8016] ret_from_fork_asm+0x1a/0x30 [ 141.929484][ T8016] [ 141.931801][ T8016] Last potentially related work creation: [ 141.937506][ T8016] kasan_save_stack+0x3e/0x60 [ 141.942183][ T8016] kasan_record_aux_stack+0xbc/0xd0 [ 141.947381][ T8016] insert_work+0x3d/0x330 [ 141.951728][ T8016] __queue_work+0xbd9/0xfe0 [ 141.956229][ T8016] call_timer_fn+0x17b/0x5f0 [ 141.960822][ T8016] __run_timer_base+0x646/0x860 [ 141.965675][ T8016] run_timer_softirq+0xb7/0x180 [ 141.970543][ T8016] handle_softirqs+0x283/0x870 [ 141.975317][ T8016] __irq_exit_rcu+0xca/0x1f0 [ 141.979905][ T8016] irq_exit_rcu+0x9/0x30 [ 141.984142][ T8016] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 141.989787][ T8016] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.995769][ T8016] [ 141.998087][ T8016] The buggy address belongs to the object at ffff88805b824400 [ 141.998087][ T8016] which belongs to the cache kmalloc-512 of size 512 [ 142.012220][ T8016] The buggy address is located 48 bytes inside of [ 142.012220][ T8016] freed 512-byte region [ffff88805b824400, ffff88805b824600) [ 142.025935][ T8016] [ 142.028254][ T8016] The buggy address belongs to the physical page: [ 142.034667][ T8016] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b824c00 pfn:0x5b824 [ 142.044820][ T8016] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.053330][ T8016] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 142.061850][ T8016] page_type: f5(slab) [ 142.065841][ T8016] raw: 00fff00000000240 ffff88801a041c80 ffffea0001f85a10 ffffea000171f410 [ 142.074427][ T8016] raw: ffff88805b824c00 0000000000100009 00000000f5000000 0000000000000000 [ 142.083102][ T8016] head: 00fff00000000240 ffff88801a041c80 ffffea0001f85a10 ffffea000171f410 [ 142.091781][ T8016] head: ffff88805b824c00 0000000000100009 00000000f5000000 0000000000000000 [ 142.100455][ T8016] head: 00fff00000000002 ffffea00016e0901 00000000ffffffff 00000000ffffffff [ 142.109131][ T8016] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 142.117798][ T8016] page dumped because: kasan: bad access detected [ 142.124217][ T8016] page_owner tracks the page as allocated [ 142.129931][ T8016] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1009, tgid 1009 (kworker/u8:6), ts 85694059496, free_ts 26077951371 [ 142.151288][ T8016] post_alloc_hook+0x1d8/0x230 [ 142.156064][ T8016] get_page_from_freelist+0x21ce/0x22b0 [ 142.161639][ T8016] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.167579][ T8016] alloc_pages_mpol+0x232/0x4a0 [ 142.172436][ T8016] allocate_slab+0x8a/0x3b0 [ 142.176939][ T8016] ___slab_alloc+0xbfc/0x1480 [ 142.181617][ T8016] __kmalloc_cache_noprof+0x296/0x3d0 [ 142.186992][ T8016] __ipv6_dev_mc_inc+0x420/0xaf0 [ 142.191928][ T8016] addrconf_dad_work+0x3d0/0x14b0 [ 142.196946][ T8016] process_scheduled_works+0xadb/0x17a0 [ 142.202498][ T8016] worker_thread+0x8a0/0xda0 [ 142.207091][ T8016] kthread+0x70e/0x8a0 [ 142.211163][ T8016] ret_from_fork+0x4b/0x80 [ 142.215579][ T8016] ret_from_fork_asm+0x1a/0x30 [ 142.220339][ T8016] page last free pid 1 tgid 1 stack trace: [ 142.226153][ T8016] __free_frozen_pages+0xb0e/0xcd0 [ 142.231278][ T8016] free_contig_range+0x159/0x440 [ 142.236212][ T8016] destroy_args+0x86/0x460 [ 142.240629][ T8016] debug_vm_pgtable+0x3cf/0x410 [ 142.245486][ T8016] do_one_initcall+0x233/0x820 [ 142.250258][ T8016] do_initcall_level+0x137/0x1f0 [ 142.255198][ T8016] do_initcalls+0x69/0xd0 [ 142.259527][ T8016] kernel_init_freeable+0x3d9/0x570 [ 142.264725][ T8016] kernel_init+0x1d/0x1d0 [ 142.269064][ T8016] ret_from_fork+0x4b/0x80 [ 142.273480][ T8016] ret_from_fork_asm+0x1a/0x30 [ 142.278278][ T8016] [ 142.280608][ T8016] Memory state around the buggy address: [ 142.286258][ T8016] ffff88805b824300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.294325][ T8016] ffff88805b824380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.302384][ T8016] >ffff88805b824400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.310444][ T8016] ^ [ 142.316071][ T8016] ffff88805b824480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.324129][ T8016] ffff88805b824500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.332273][ T8016] ================================================================== [ 142.340470][ T8016] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.347863][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.1.578 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 142.359776][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.369853][ T8016] Call Trace: [ 142.373134][ T8016] [ 142.376066][ T8016] dump_stack_lvl+0x99/0x250 [ 142.380667][ T8016] ? __asan_memcpy+0x40/0x70 [ 142.385262][ T8016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.390471][ T8016] ? __pfx__printk+0x10/0x10 [ 142.395071][ T8016] panic+0x2db/0x790 [ 142.398986][ T8016] ? __pfx_panic+0x10/0x10 [ 142.403414][ T8016] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 142.409304][ T8016] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 142.415197][ T8016] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.421517][ T8016] ? print_memory_metadata+0x314/0x400 [ 142.426974][ T8016] ? rose_get_neigh+0x391/0x990 [ 142.431821][ T8016] check_panic_on_warn+0x89/0xb0 [ 142.436758][ T8016] ? rose_get_neigh+0x391/0x990 [ 142.441603][ T8016] end_report+0x78/0x160 [ 142.445882][ T8016] kasan_report+0x129/0x150 [ 142.450414][ T8016] ? rose_get_neigh+0x391/0x990 [ 142.455275][ T8016] rose_get_neigh+0x391/0x990 [ 142.459966][ T8016] rose_connect+0x416/0x10a0 [ 142.464580][ T8016] ? __pfx_current_check_access_socket+0x10/0x10 [ 142.470920][ T8016] ? aa_sk_perm+0x81e/0x950 [ 142.475428][ T8016] ? __might_fault+0xb0/0x130 [ 142.480111][ T8016] ? __pfx_rose_connect+0x10/0x10 [ 142.485141][ T8016] ? aa_af_perm+0x1d0/0x2b0 [ 142.489646][ T8016] ? tomoyo_socket_connect_permission+0x164/0x290 [ 142.496074][ T8016] ? bpf_lsm_socket_connect+0x9/0x20 [ 142.501367][ T8016] __sys_connect+0x313/0x440 [ 142.505964][ T8016] ? __pfx___sys_connect+0x10/0x10 [ 142.511088][ T8016] __x64_sys_connect+0x7a/0x90 [ 142.515861][ T8016] do_syscall_64+0xf6/0x210 [ 142.520377][ T8016] ? clear_bhb_loop+0x45/0xa0 [ 142.525067][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.530962][ T8016] RIP: 0033:0x7fae50f8e969 [ 142.535385][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.554997][ T8016] RSP: 002b:00007fae4edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 142.563421][ T8016] RAX: ffffffffffffffda RBX: 00007fae511b5fa0 RCX: 00007fae50f8e969 [ 142.571396][ T8016] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000004 [ 142.579369][ T8016] RBP: 00007fae51010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.587345][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.595320][ T8016] R13: 0000000000000000 R14: 00007fae511b5fa0 R15: 00007ffe6ef33378 [ 142.603304][ T8016] [ 142.606460][ T8016] Kernel Offset: disabled [ 142.610789][ T8016] Rebooting in 86400 seconds..